last executing test programs: 7m34.548254681s ago: executing program 0 (id=3846): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/freeze_filesystems', 0x0, 0x40) getdents(r0, &(0x7f0000001c80)=""/218, 0xda) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getpeername$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) shutdown(r7, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000480)={0x7, 0x1, {0x80000001, @usage=0x5, 0x0, 0xae1, 0x3, 0x4, 0x1, 0x2, 0x5, @usage=0xa, 0x2, 0x9cf3, [0x7bc3, 0x4, 0x100000000, 0x3, 0x1, 0x100000000]}, {0x7fffffff, @usage=0x2, 0x0, 0x2, 0x5a5e, 0x2, 0x80, 0xf800, 0x12, @struct={0x10, 0x2}, 0x6, 0x2, [0x9, 0x1, 0x6, 0x40, 0x1, 0x8eb]}, {0x7, @usage, 0x0, 0x2, 0x5, 0xb, 0x0, 0x935b, 0x83, @struct={0x5, 0x1}, 0xb, 0x1, [0x9, 0x7, 0xaf37, 0x9, 0x4, 0x3]}, {0xffffffffffffff81, 0xffffffff, 0x7}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000c80)={0x0, "cbb588c05858768ff2d1cef5632c1d03"}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000002080)={0x18, 0x0, {0xfffffffffffffffb, @struct={0x1, 0x8001}, r9, 0x6, 0x80010000, 0x7, 0x8, 0x5, 0x811, @usage=0x7fffffffffffffff, 0x6, 0x100, [0x8, 0x6, 0x0, 0x3, 0x0, 0x1000]}, {0x8, @usage=0x7, r10, 0x6, 0x6, 0xe00000000000, 0xffffffffffffffa9, 0x1, 0x0, @struct={0x4}, 0x7, 0x2, [0x9, 0x9, 0x6, 0xffff, 0xfffffffffffffffa, 0x24a]}, {0x100000000, @usage=0xd65, r11, 0x2, 0x9dc5, 0x7, 0xffffffff, 0x6, 0x75, @struct={0x9, 0x81}, 0x2, 0x15, [0x2, 0xe8d3, 0xb366, 0x2, 0x3, 0x6]}, {0x7ff, 0x4, 0x8}}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r12, 0x25, &(0x7f0000000000)={0x1}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r13, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x10}) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x2000000000000000, 0x6, 0x7fffffff}) 7m33.626626996s ago: executing program 0 (id=3854): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8811) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) syz_usb_connect(0x2, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000393f6fe108c10590157db0102030109022b00018109300009041cfa02f278380209050c02100000fdda0705fda2"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r4, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x0, 0x800) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000006800010000000000000000000a00000000000000140006007f0000010000000000001c7508af00000400040008000880"], 0x72}, 0x1, 0x0, 0x0, 0x42000004}, 0x2000014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000900)=""/19, 0x13}, {&(0x7f0000000940)=""/207, 0xcf}], 0x5, &(0x7f0000000ac0)=""/80, 0x50}, 0x8}], 0x1, 0x2163, &(0x7f0000000b80)={0x0, 0x989680}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r8, 0x4, 0x8, 0x8, 0x0, 0x20, @mcast2, @remote, 0x8000, 0x40, 0x8000, 0x1}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r9) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r10, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r11 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r11, &(0x7f0000000040), 0xc) 7m30.90091511s ago: executing program 0 (id=3867): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x36}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) 7m30.820268405s ago: executing program 0 (id=3868): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200000, &(0x7f0000000300)='usrquota') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) syz_clone(0x4000200, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x40000006, 0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) statx(0xffffffffffffffff, 0x0, 0x800, 0x800, &(0x7f00000006c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x6ce, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000f40), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 7m29.530679971s ago: executing program 0 (id=3869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="720ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000110f000000000200000000000500", @ANYRES32, @ANYBLOB="0401000000000000280012800900010076657468000000001800028014000100000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x2400c800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) 7m29.271582647s ago: executing program 0 (id=3870): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x36, &(0x7f0000000200), 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="969395b9f570bdda0819a788b7ca0382868f114dc819ef4342b69cf571b22bcb07b6af493be8398aea0c", 0x1}], 0x1}}], 0x2, 0x8814) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x5, 0x2, {0x3, 0x2}}}]}, 0x3c}}, 0x4000010) 7m28.987444287s ago: executing program 32 (id=3870): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x36, &(0x7f0000000200), 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="969395b9f570bdda0819a788b7ca0382868f114dc819ef4342b69cf571b22bcb07b6af493be8398aea0c", 0x1}], 0x1}}], 0x2, 0x8814) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x5, 0x2, {0x3, 0x2}}}]}, 0x3c}}, 0x4000010) 8.858839594s ago: executing program 3 (id=6229): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x44080) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r9, 0x1c77b3ffb7919603, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000100}, 0x24000000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x31) 8.791662902s ago: executing program 1 (id=6231): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0xeaffffffffffffff) 8.572237287s ago: executing program 1 (id=6232): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) clock_getres(0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 7.696038077s ago: executing program 3 (id=6236): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x319100) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0xc00) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r1, r2}) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "89ecfe9575a76f4fb37cd5aa2802f3a9839e1137bdd3686f40109203e64c7a224a3b6c3d0bdb41711a7f1d3721951c741bfec1ce97e56ae6ba077de5fc4ac266", 0x24}, 0x48, 0xfffffffffffffffa) (async, rerun: 64) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) (async, rerun: 64) r5 = add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="ff2183ca0a64747205c93506c4f550b1501b76ae9b71ff5b79ad324a29c88a84275c771121991923b9997ad40f2a147dcbdb48ca271f9abc2fee397c210681caf34fca7afacc7a59d3c5655b9833d75cc61c3a13fef0f51483f9a131236644d13d37ec5a311a72b53d0363746815a9afb43ed2f0a93e6e4cd26af06262d2be75c3d833897fdf8d44c0c8932d36f8fa28021d7eadbc350010f72272b03235e2e9f74399a696d5ed6f3fd1acb07cb7356a450199185c853a92e1cad57a6e65d5af8ce12ba94ae6dc79a55053e238b0b75b3d79f11a828747a785f6a176f288261a0131224bec9d2fd897761a9967ab2e2d4726bd2252243b311103c21de4513534eafd271035e4dc489a13a76e1ee5e5a0add3d3fbe691d72f8b9afa38535aed15c7ca6c21ab8dd7f9ad2b623b5bc49809dc91ec92f70e84b83553ccb2c93f53b225952e2b86de3e08d89a4ec65d01cdfbbb0efdea1a22df21d84070d4d8711a3e12a7a87c9c5842bbd12749aae94d22f5ca497b50167e21531ae9b41be31405c6b1cfd2431bb5dcf1c2fa127dcc24c4e886b3f83059fdb7596809e790484f1fc1e1282fa10a255a70dc3efca2be77fced278a0816625fcd8bd42984c73f853af9068e5a9b9923b046085d7680848ebac996202c68ec15b6ecac44808ffe494c852bfb6ca2d4ef867dcbf4799e717e78ba54691f510376892d6d0d1e8ae81a2704d76f29b1ccd5c34d69ced62b8d2561c838d149a13380204985a6eee8df396503d8cf68f06f019099fe2380651f0d616afac3142e88ae43eb7383129c99a7e1138b47cb63b8fac41fcb0f52ef16f9d92011e7272b53e16832553d7531ea424dcd1c3fd9074f8e95e4ea0d4735c929236b5a895644ee9cb3bb690472737373d14a51425b9cea2fa1daec94bdc445f892d1a2fa9afa63b5710be0fb7734844defb738512df3fdd3568a1fcd6580c31face6dd1c3b2e920039de697e6f1f080348392513e53931d4150b8f389decdce934ee37d97f03d9077083b0f9c0d95342037ea2caaaac47795a76b53f71b788f9714ea2aaa829d7d5007e9f3ea5abd4536770fdee0fb626f0e6c9ff1abd9a411e856d05708886370767a4173e49459163d4eda9647a948710fac599d98827999795a27dcaeaea77b6a8168f9f9972ee4527639c1d0e01cbb786da618d1d7947c8d4293a49691e88f32cd5238e2d37404c2ec41e38f85d0f30290345fdab9416d0e3fba0f03abf9927be207ee5469a8fb73eeb35c6ab01d1c59661e7cb40ce370c7daedb3ed452aa6ee8d72db847870499aab767d12620d9a1bd4aa52fc2d4355249abc6363c4715dcf52fcb8fa13ef2dd5ebf8d8699d886d4bb0b06b229586d2bf81383a064fbb852282ff444538101e2afe6be0a1c9ab8b6f9337dc3778dfe182b8a319afa03a9fed2c2809dcfb906a7bb5376d24bb24e3245ddbd9ce06323d0418efb06057216f37cbbf383e1fc207c178cfc5f0c21a9e84d70018dbfcdd34b2d6b0ed6cc66aa3efca60a19698771e61cc09dea6dbedafe34740a083e0af167ff7cccbc6e117855e5f4e8801806946eccac9963fb36f34b4095a4f9babb5ca214679567da2bdd3079afa934e68bcd7bd3bbca08e1aac129c0bc43ff4b66a7f12239ae49f433af14b009e5f967d976191f08f5a7a28c4d6f8eb3e680a85e81ddbabc9f8ffc790141d313871b60ac17821f66eaa03d8bd6abc0e03c12c56b671549b848e3cb87743990240f78269dcc3f754a55de3c4e2b5a2d14c3b208997993b452e058047f502ac1da2ff4f7fbdbedcf63db5f8ef7d70089f18fe61d93d9b38d9870b200ddb28811ae5b2dbce9676c0a66a2e04036462bfe0bf4906fbee5556a4e657b63e6291a6bfe69c1671210d7c9cf36b88313e004b5b2e57cd1f181e334bf6b46134493da7dd3b3afb4125e59d7fc6bdc7295025f1fe40ea51b5a241adcd21d21e9323d5bf057d4ee3f4b1e3190bdcb10fc623bd7f61289315c8023621e5086b5f359616a3f505cdd7239abcf54be57bd4bc0eb36ef12970273afa24b4259525fc52a7f7944b14214b7e8aaafa1d8f597ec0ca92b44191033b0777cfb7ebf572560d7b394cb3fc683ad5423a6007e7ef3e59d4c0a9b77f04f475da949ed51882a31e6bc13315bcd0b3a0c33244b1c230778dd210e746709f1c92c4d2499969918a6a4d4cd2f548131240f7138721a1f0a8a86b26d931761858629155f7f8d0606dcf8896f5af34f471271a1953b285982161c9c224de9c2e04f652a3b62fa6a31bc2c12b2c6364fb536d8983c37ab91b6f86277d9b73a709413d7e29fe7d203704e89887f1a1267f0a23bd63ba7d8312943931a8bcbf2e593bb12964c9d9f949777a6a0387d002cf2b9cd663f23bc3af373cd5795de4a599ae863a1ab4c217bc6cfc316d02ad893af09081e6ff7dbbd4d96b876c00fe9abfcd0148bbe163640cfc3ca3d22dbed4ef6be7df350b748c838d0210174510e3e11e9544645e0afc8732795b2fd1480705829bd76c952e3f82ab67f554ac718db7569bbeaede0ebab20807a1ff421fc83699ee1af6c8b8337d7a37c4f94ad6c67469c8c24baf1bafeea91fec04292a390872252698baad46c42540753b6831ea658e18b0455e71c805d0167475efc7cdeb9dc2a53fa9f3d5af829942d9ca4561c6d48108b25d5a75d9194abea888713672d7e7a43ec068ab343a795b4878a0ea3d7ae8791408a0c5495106cad868a34b44ca6ccea601bd35817ab57aa56eb627dfde33ab09bff8e024e3807a8d56992f90eac46bc78a8b7feee5bd22236b5397dae092e23fa4115fca780d3136617e4d7ea47ef461b7ce2473c31ffa13335641faa77e2e011a03dfebb92318b41c4aeecb04b94249a04376c133412cba10fac82e407cc08b923a443be5536f99afc092d935e146a8bc6d682982d29a6640e322f33e01adc2d2ce3a997af56111ad473ef149bc03225386faee387de095cb982f3d7e4cc9b56dc32ff9e29111b8511512ae06514b050720b23f93b2275bbc5056da7e6294fec913855009dfd615df12687417cb948fd40f4b1e81846197ea0e899ee5693dac37a0c908f3b30040f7ada56b5484f1dcd69e38e6bb1ac8ffa6f4c1503b2d1074c5b85041444be0a708c3a18b3d67b77e7479045fbb0afe06010da270ce58fe6a44bab274d77e4513d481c291feae06acad2733f403a9b5fdf59fd7893fdde3be3ba117abee2d1381e346257d978dd2104cedb307189eac76a8b1e48d414ec4070bc7ffe3cd74be3f679a35c8cec253b0094e0f2d976ccf60984a705fda7ead381c206a546626a4c81525d29eeb1d36a9376f41c79b9b0ca62291285d869e20512d401e3d57839db1edc2adb1d955b95ed3ad55db51d7f5ce29dedc7939b4f02913b1e2ba4735b1797b8496f0b899696da70c810f97dec920ec9586d24cea17439b83fdf43e6d988ab22306fbb40bf1f8498e74fe5978fe6882e203237414da505eae94190d2f80a8b764e05f12d06cba689b57e2da9715aaec6a9a760c361a14c8fa422daa69b3868747807a587297cec2efeeecee22c6bdc4cecf4d7a77b20f4d727084face721e9140d4a1e5fe73e56b6122825158c272381b1603a1428782193d02a687931bf31fd842cf51bd165e827ba6d590ff9819830f75166ba0f1f7d15918772ad8a330eed5b924deced0550630942d645049d82e67207a0d092e50bd074afaeab44f18f1016c3d06d8e7d094a411418e844dbebca5f0fe2e99d14b8927e93b3ec161a58ecca8026a806dac867beb658ce1abf26c9e87c4f2665c4c2bd1a5fbf508f076682b86d08e401c7ada966226621f035422e15085488dc16fbb7978578f7b214f8da5801974cf19e17100ee37db348b4d091e4f6ec1b7cf35ddfdfb61b2a0acf4bd54eea241a0c5fe140418c3b20c01ad9510d665e3962edf7f9bf8e2affe73be6b7a2a13d27c54989d86592bafb3ce291352910fcf0663399dcba276de41ffdb35e996536b58b10c0b1d8ccda185a91cf0b249112850275b1934f07e53d6137cab459173b4624d9f2f054d2c10e0c6a8c0b65ee902b27d0c061ddc725a87e23d1e43d4c7f7ef296b3e701e6389872af7dad59ead8bdadfe3989487eec63cb3b558e27ebfb08249ea99884570a7fe21f9e00f2c827107b879ccf0c0419c21a9c1283f3d62e2391f83ab7da9318701bf131790791d7ebea149bae8d3c9ba0fd0e116d09329daf1dca51d1154da3f75395b2e5a1eb9ce74e82d9363cb257d8cbdf6d1900f07f82b2576325f0d93408bd1998a44272b9c68e4517201f847314a96c3c09c0c9a61d58e685de48a525b9e5706907e9dae38acdca33731af665b306c858e03b1b3e03bc0dbd4f5ae8d0df3ecec45d05fa289857d79f64d4b2737651c2054712ca193c01eea4af811eea11a93d83b6a931beb76619b01af9a47ea930f57e9955844e776a7d87d38a03dcb2cfa1a583447860a8f7132984126a606a57a3ad02da4f06a9229526f4f7a28de6e5636b4de08da60b28a1b43b20f70595b2f10df9933fb41516cbeba512e24a1e609c82858b93a7c0099dc9af67883e5d62ab01473dd8ff6568f45eddc3a524df7ce9d9707cec1c3bc4d55ccf64c839b911ab817c65c893a2c117e998ed95807198f1a955965016e44674157e85b02ac30f239b51114b57ba8d3cef7d4386a6644aec9a511215518234549e1c64c09cd7cedd4ac1088127d428e4db415797aaad68d7593dd62837baf619ed9d057613daae8aa312472a1535f73818e0f10fd333902a1412ad70037b29f9e7643eac1dd24c8ff42658e6598301f0f216acb4a0ba8bc12ba7aa5274b5ab035a42faf7e8fcaf83ff3ee87b2debb8b7c50251ed82bafc27afd193ecd4081ed32976fcdcdfee1daf18c5641bd3cae51a92090de20511ff3efc73e8236adce6d72dc96d378ac8413181c0d10b119a56bd84ca969f20b10ddf595b321595ad64a17da75baf09ef1ad277005c78f440da6e6ee1276f481cd9afab73458dd80f2a5ee6f59c06589b0dab759c2cc474a7dd812cef119d2145b4409da2e3e93641ce28ea7cbadf27a3735c59a484b0c56e4c8525b46907b8f06c80c3ecada5687556021a18f4ae70758dd5f15a2d55aae9115a3edd763a7ed0f3462ee68501f0a47a0e59376565247d9fcc34d4dc548e5c62aed72f0a63660342b696de003b71264e34640c0d1267a782e4a167c3e85530c26853b42acbd626ca74e00539111385c3581c9ab5c463d47d016ec19bac28d6f6c383ab95e6ed882ca166c1f622d33ae496358cad8c8b35077dd852f7369ad4596daab7cd49e95a69e6b4c53831b308ae80429734f60a7855bae133aa38beb8428a957449e896ee53861f588e02831ce28ea98ed92c04fa0de7a93fb2f9a3efdb1604f8d7e725b8389030002fd3847e45a631937750fb83f0b688da7ae24e9e352c05ae21debfa38c4ccdd691a0eb8943a9558a7da3c1c99beefd29b441472a8d3f9a07ad74200967362a87ab433af15e26d8c38ea0fd8ef38f984031dcbb7de06a8c9dbe0bca6f693a1e46ea2dd6c3b000cb3cf0a63b34e18c789f602810990b2976bba4b7bfd07edc21788ffaa34b4ab005582b3ea585b16e86282f4e460abddb390eaa89f7f3ff92141c329f2752cfde27c157b2b83a1821c7bfa850a6d42bd6ade2404d4717f7332582a46ceb45d8b4b0a4afb54698de69259d40661d6cbf73829384b7b1069f048c75207f40dd8c6c01925128d7b39d6b4b837362cd69377597b671", 0x1000, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000001340)={0x0, 0x15}) (async, rerun: 32) add_key$user(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, &(0x7f0000001400)="044d294e85e1c6f7b28a7cf9c5bf9b79476142b78d5072887335370e05102db4dcd2564c20eb17738a16ea61afe6b2cf91317b2a671e89a6cbe6467ce5ae3dcbc2dfa3f6af9b2349d6b53543a896a8b4a4782544c99d669c26416a69152d4ca56f374ecd3ae3b4a5888e7c92aa0e99cbdf540c291f", 0x75, r4) (rerun: 32) keyctl$clear(0x7, r4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000014c0), r2) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x44000) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), r0) (rerun: 32) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004888}, 0x20060090) socket$nl_route(0x10, 0x3, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000002a40)={&(0x7f0000001700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001780)=""/32, 0x20}, {&(0x7f00000017c0)=""/229, 0xe5}, {&(0x7f00000018c0)=""/43, 0x2b}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/62, 0x3e}], 0x5, &(0x7f00000029c0)=""/122, 0x7a}, 0x40000141) newfstatat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) keyctl$get_persistent(0x16, r8, r3) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000002c80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b80)={0xb0, 0x0, 0x100, 0x6, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xf, 0x4, "32f315ff40d8c2e7f625a9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a0eb7af8f385bab7fe7b9edb6e"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "31b7587b09"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "cc823f0227"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async, rerun: 64) ioperm(0x5, 0x7, 0x9) (async, rerun: 64) sendto$phonet(r2, &(0x7f0000002cc0)="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", 0x1000, 0x4000000, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000004e80)={0xfffffffffffffffe, &(0x7f0000003cc0)=""/225, &(0x7f0000003dc0)="526323f8b01a0f62dfac483607a7c20f8feb3877e7646bd032c593104bf4a5dbf675b8810954d270662706c8954dd1e32e55e338a7ec7e1bad496a48a2301ecd233a71e8e9c76b44367462ce4fc5c87db5c779611833a2e6f7d87b58a19383d6a411241226dad09d283c61aaec80f52310ba7a1073eb9e6ceee02156f8598ec5df63e78215c319ddc861a60d8a6fa38d70139448089d214fe321fa", &(0x7f0000003e80)="39d01b81b1abf66e723048ec2d800fc4cf65eff56f7c3074b861242c65f355a30be3bc9f588d435fe0eded991087f46f93106effc05d21dd7cdf5868e369969da8a1e93fb68212651f623569d2063ab51a710a51565b237304564d6460b3f0c3a1786f1219ac6931816138a6a06704482fcb2bc57023111bc1e5d82ad18f82090832420064487875f04624b761f3119eacadfdca7e2af59da5694d6bab4b0fa1e014e02ae49d8be04ff37afd0dc4d0a9be03f55fcacdc385fca05f591bffc5342fc09de2e245a106cc0f801f844834733e9da2343ad17a6d0b7e351c309745bf8b4e9fbdedd82a5f4c2902758889a171e257b6c7451f0dc30c7209a7442647d9d151ff759618d30927f5cc72415a49afbc754a6633fce0b8d40f116a5132c77a9881b1722ebaee9b8c313fe43ca5c790e6e6f2e2cc1a09f6caba69406b59637c16a03ccb6d33844d79e04cdf65018811d3c574cf332963657a5dfaf1b956c2bc4dd4f292599505f7f96fb91e1e5f448817ee81a102388bff78535e3b2c4456a30624d1f4aaa6794a7612f057f80eeeeff6ead18a98920fd87537612e070f39f73441a02d18bfbe0314b7791c590862e3b22a8c1d280baaf4d2671fc715ee1a0f45116719587ae8d3e8db4da88f22a68843beacd659c9aa0cd7ffd41330d03dd94f35125ab544254cde72a63be5c5e517a3baa383f594c5a97af9736cbd2ababf3f069128b02fe6780843e66c7594eb1057871878d6af4c76ef1fce47cae3eecd8661876f7959d6b155fd4c72143eb2bc9da93b2b83a1a68d077b11613a34fe5656c549d964e1de22d3931b104df6c8070a86b4d11375d1a69c5c0146e869f3c1e2ee47267a2997d595c3492771c81b92223dca620f8909be591e9c1f127402506cd48eda2e45986cec65ec6fc320b3eab374239251cb84f62ace7ad4c08fab9691df29880cabf72e3baaa0333541c553693f92f7883b32c25a621cd9d049cc045b223ca6c9923c2b560b0ebf2f193649da70d6d73d6996aab8c0061e38112caeba86bf111ed13f9a52fbb63506426eea874cff9084abe2cbb62cdd5186f467c62b83e488218175149cf5f680308ed479c335665cf673b5e318679c016b3bc81bd1f469fabe77b518866f3f5390fe562d6a2895c240f3c7e22f8a197c095afd3e0b3d662804ad00f2b709f099eadba6e1ad0d8d8ff871a5eb94dd3a603695cf9a5809fb4be9e77ff99b69cf43a13219af372c557b235be26ce5a72d9b593943b413d3b0f81cfe2596ef9802d8c4d905e8365eb65bf5373b632656a658c9279dca8bf04091c5d619fdd677ade0d648a07f5c06af5db17010728b359b598af7fe13285bd2eb8c8d332c3214813a3815d2e3f3ddc33edf5591b57eb5473a0486bd3d6dab65817eb6b40cbca817ff2d260122998c1058a32eaab4d2b32abe45403aa32b277a174f42aff7832f49365ae9d71af0b8a10d94cb76487cbcbc0c6e4b9e198a2a4ebed7de469dbf660f2c2311c30bda7dcac2c469848c175a837023cdd8a5637d824b066640a654d5c5fe42ef71a1f8aec05cbdc9577beb2a76aec4a49ae5e83f353dbfdfeaad2e7a49b0f421a626217182d2fa355e6f186ab19a268f009f11bf9bced5f90c3869321942d90cf6e05d4ffe339ac38b2c1101f93c0dc3305bae80381b3dd4590ff74166f34e912ea8503fc15407977cb65ad8be9649c90a826da42c29864945a635d55c0d22a68a2050f2bee175964c8c4ace3393af3a653eb881b8f18477c17e1a6b250a5bb87071b2913db64d02acdeda377dd88ed9bd9302c3141d049a5ce55f72e75f000a94a3e2bd1e025382050a599f081a8026ed333c2c5e6b9fd0f7cc538a7cec26a594788961028b286d88ff5dc684483e50c07e92998ee9940303d688ce908ab292b75ff2620d07f6e932f6d332274cf2aab59c25dd37e1dd32ddf470e2aaa73d981d5e1a4f9b2bb174c30315ca7bb4ebbc3c781b8b6b4149af4de4df57be41987cbd6bc7a681dcc19ddc3cc283af239cd74b011dc47703e19bb54236029be317b3a5dd683c10318de2bfeded32a19c891d2b87b14c8aaa3b8790181f291b5fc9627942afc21f4f8569b52b4d6370b647655a9ef400eadbe09a2d3b244ca6f86db4239b9d6fddad29c0dbe8d4c0c3ee32f982fb61f222038d66ff8255881754212f581999b120c68d140ce81afbcc7156fe1dbcfeb5a9ab9087ae371edbda402f520ae011ff6b3dc0318576829bc58072e3e20123efe28041dc7945a874c5b26e40735a0aa3f232173eb8d68ab28cd5caec35e3866c7a5d49a5e0b6261d698135cac4a554c6ebcbac547a5ab02def19f2dbb2a789690d730af811826925f79fc6afc817f6e64e30aacd3c653f63c7e20e712220e84af18843024431128882f1120d7843b0dd2035cc3816a16dacb15f88b2998e1c9e7acf107790ed6836e296be2f444df8341e84e09af7a883d0c341efc9028a014b91f54991a11f5d67a54ac33d46b8edf233849e6cc73e3c1e88b4bb9d0fd21cd58a1a8182cfd2293ab4127f60a1d33a22472a9a091d5a5a131f611d2bb2c6bdc5dba70fd3bb42bd7709ef18e11e6daebd971f41dc13f906526e897b9491c262caf1efb582afa0e1a7a52038e254959361a52f83eeba547d254d548b2bd3761d1fc0f6cc7424174972118cdf5e9018a1a56fcee04faf3a552e37e9a723fe01d2b3328a9ca420cee42c1915be86533b098bf436e192f76e48ee6d35f0872d5bb184cfe233aea4c533cfed7a74c6d01483f651e87175f9176339d5759bc7aa9d20e7bffe68aa2c86841754eef8a510b4ddb8c92b43d37ba6b8e3ebce52fba860d9647568342d7ed70041125cbeac35ca318227529225cd63a20c8a42210f3f647c65f6142053affe41d8019f67617a780e2c0617fd4170bc04cbd73d2fabe8531fc5cc82b12b223d837672e8c4976d6189dd156010c4fe09a52e2e50557280126d999877ba6e183845ac4bdb3e9f302e313f771baf916a8460a595d81abaddb588b5653396837110dd94796e84e4456c283de54e0bd95c3f1215e4688afd1a8fcd4a5000558f87ce15306f673cb10410013df1f3bc211aa369a9ac8bf8a088772aeb0c36135ad79fe30ea0dc7563e138fea3b7e721ec842f77c0a5b867aaa95781fd539b8d512b1f35ccba0b40606dff640cb36c52e304dcb4733146caaa4d991deb2bd3235456e4ccaf83b27d1b129e46279420367193be3ac82320cde0cc1d14230b6b55d657dfec24fe9c4f9952ef419d9ac24c36f41cabf2378a5100ef971689fc178f8e2ed8f3e762956d74f9e0873e49ac1da8d4a50d47b762b2c6226fad1ad25ff1b1e35c704b78f28e9b2b6d05a11e36e381ad5556cd6107794d724c03bc5af99d7f6394bf15b71538bb8e18d8cfe0ff3db3ddcc23fdf6979936aa033203e4f422c61b1ab61b05fc4aa96ac94c646a92dc69888d2183baebfbcd7466daf22da7756bc1fc4a0fcae56e4d361bd9d01b9025cdaf54c530632c0748dafe57bf9a835b4503cda2894c8517f7c24bfdf0cc34eb3d8b814d6cb5612e3e613fb396964f1073b1e809cd88efcd1ee6572511210c661bc39fd239e47339ab76c323160ac8cfdb36c68e284398e79ef55014660b7ce14eeeba18c1999a64fa3773d7019b036c79bd7934ffe1302f62b4cc4fdfb43feb0a34e6bcdeb5b49015d5d245fda77eda9c7fd4e720a4750ee89053f2d56d6585bf148668fa8d9901cdffa7d3fbb63e8a9280ef2d586dc868f3c581790ad4573a0e3c68609653e7c0210eaddda451912b5ff0614296e6ba2f079834e04864f4b920cfc149e56c5b6fcabcd862e4db2400f5a1cd3a6c5ff88a2bfca6a6520edd38e0f022a2dfe7e49f4b03bed13e04b11396dd8de93f9ee7104db5023c3d0da55db78416e386f1d782328690954df021c3720ca0b1bdd3f213324f637da48952712b161b92b559819055961142324834673ebba6ad73165ad71ae47467dafd2bb4530bae8733e0aa4391f6764d680299ce0d6d2386d3ccd9fad1f99c7f8a6deee6705571ec6546abda7dfbd2b77ab3d89441ee00953f9133d0a2b31bf9d91edeef6d5aba9d0b407256db05a576fd40c23cdc9f01aa6696dd3354bd41456ebe03747faf2be165e2bfc9578bdb0a752263e669e62f4fc22bc05cba0195ec27516f3aff05fea9faf899815176454eb3a755a59d7d3f0cc1d8faf69a37c27a801abfa6ae4bf79b9b73d846fd780062004cab5d9c74af3859f520a02d64db8db13e4165f162018adfd7381ebb50e80521312f6c78d23b32e9823b81edfbd2f500dfcd8a4bff2d246ca8cfc088992a55ab4cffbe3327612b5d9ac7cec6716fe25dc26d02169380d711a01ea3b1193b33015e5971b821ad37d4b9f8a206dcf3671a9cedd65a8ebb903c34fb185c10ac3216d97d6198595f3f745413c9c1d421e4d9861af457e0c13a7ab3cadf4666d73203a2edba2534e8e2e0a328104c2b190c817921112b96b8c34401fbd76bc89442e0712a7c31f8e32bc39512217e24dabbbfb50d6d1a4fa30e0577bcd6318c479394a52c0bbad3ec1e4d70068112a4681abb192c15ba23e53a995bdac8f6420bbe30bea451269d78500963dbcc0b7ef20a375887ba9904d5468b41b641aedb4180df4369a05552a597709a0640b6ef31306916eb503c3a1b219e44f1053ec65eb7d124e0c32c193a9a846432fbbc2e3f7c648984dfaf55c94013423a13d28443ade60fd604e0a47cbf76f9b06b58b3567941a7bb10f6cf053329ab3b2a29967241583b5f60e3fb4078642e482e68bf8e51bc694aa878b3ec1498f6e4695fd217542c0eee58affe8e3550d48ae5c3bbcdb1302f5741c5d3bb1cc38be7ba07c379820e1b482f7e4e1c8b901efbccd107471eafce579bd2a3e448716f708f1d50db546f974a4f5c1be5e2a039475f8a4d8621b173949a667471f85fbfc6e287b71b665b7e5508b4bcce4cd1768f2e863887797c33332401527fde32c82d3357e788682d9a3ef0a1c95497714c9e704344c869d14e7e68a654fc9f8f0a1c57b7fc3ee5d7bfbb88cd7c46ddf9993b8b3d0040dfd190ca8e0e24b5d50e5caa2f74bc913fc910e621545e8e233534e26877ad11f4ec2774c767e12e5c96af176cbb40b977aa711334e33102eeb5642d2926fb8b722125c6ab60111fac2034efd0c79215399dbb287dd0d9df4aaf5fc5abdbcfb475169a1004eb2fd69fd56e783bfeffefcf0f89a11062730b8fd5bb2eed96fa2b931efcf1a2bd3adf59c08b3658dd7d3a5ef82d30eff531e2599d853931643e34b5db898ca22f1e565f956a188ec5617f8ac39e2dbace4e57529c88d0130ea1c49de07d8f809e6c7f124dcc4efaf61a7b67eaa7b0651ce47d427444e9ab5732a3471e3a08593f44d85a0f2e22cffc8ad75d0efe5a393c9273490f968b2efc1f17f9fe03d576abb3b6e038d36231ce48bf719e76e2f02c8774be39ea29b6ae66c7c89850ca802529a41965eb759144b92df03855c8ca190c789ff79defce5ced71238d96c1506efe52a032a76a6bf084b35c9601e8f2c59aaba311532fabff060f79c2229bd7d39a1af38cea73972f1e7d9b84ec9ef1a967ef4d9986dad1ef54783176cb9a97e068a6343b11e55783093b83cf7d5cd59dfeb3448808b99e176bcff6c743d6a8a3e2467a4f82ef99047c9261c3c9e13ba0bd54a7341f4fdc4a9313b0ba1be0f28e8a6b1add8342d7d68823d2b828ac0ecfbbf80f3049981f023e392b3641438208002defb1e4d406fc3386", 0xdb, r2}, 0x38) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000004f00)={&(0x7f0000004ec0)=[0x0], 0x1}) (async) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000004f40)={{0xa, 0x4e20, 0xc, @private2, 0x4}, {0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x0, {[0x800, 0x10001, 0x7fffffff, 0x0, 0x8, 0x0, 0x0, 0xc]}}, 0x5c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000004fc0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x1, 0x3, {0xa, 0x4e21, 0x9, @private0, 0x8}}}, 0x32) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r10, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x10, 0x3e8, 0x10, 0x70bd26, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040040}, 0x4001) 7.695121848s ago: executing program 3 (id=6239): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='page_pool_update_nid\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x86dd, r7, 0x1, 0x7, 0x6, @random="eb68e3f58965"}, 0x14) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_TXQLEN={0x8, 0xd, 0xf4c0}]}, 0x40}}, 0x0) 7.62508382s ago: executing program 1 (id=6240): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40294}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x2001000000000000, 0x0, 0x4090}, 0x22000010) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001727000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="040e04007ad230f3642cd1bec6e1268621f0bc553ec4f3d6f331dd3e6760aa5717874037faa47828390a1a904224801aedc028e97f397264d92518224941327dce"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000cc0)={0x3, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xf0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = syz_usb_connect$cdc_ecm(0x6, 0xd3, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x1, 0x1, 0x6, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0xd9, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, "1247f0"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0xaf, 0x1, 0x7, 0x1}, [@obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x85, 0xe2, 0xad}, @mdlm_detail={0x58, 0x24, 0x13, 0x1b, "953aece11a5f8f5f2c773c3890fc94f4c6c1afe434554b0dbc0b51ea12c0e1c2a0273b99189d3dd50d498580049e42d583cdf901c9f2c5b9f77f7f2f64549d8fb73004b6d90162d0f38c135d7ca48f4bf3ddcb9e"}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x3, [0x8, 0x2]}, @mbim={0xc, 0x24, 0x1b, 0xcc, 0x2, 0x0, 0x2, 0x10a, 0x20}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x7, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x3, 0x6}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x47, 0x7, 0x8, 0x8a579d2b6628e877}, 0x79, &(0x7f00000001c0)={0x5, 0xf, 0x79, 0x6, [@ptm_cap={0x3}, @generic={0x54, 0x10, 0x2, "568c66c91745ae6ad3b67e1225d1492bf5ad430141a024ded137d2d77f2ab5762c9a2dcbd558f25e0db762a5ee8ef14016573a62008e6cd7aa6c7edc4be0ed36d7e094b8cf5d2085b6a01ddaca09c679a4"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "29bfc280af6a9f8e14618f5af5dd8882"}]}, 0x9, [{0x5c, &(0x7f0000000240)=@string={0x5c, 0x3, "db82a3c9da0c43454432d48b5131eadbcec3e25ab5b6d1fbd8916c1e3d62554309c80706b3e2612d1a4610d09ba9c2b24cf5720620af52b45455e1cfde2f4965314366f0f0ca32abe24eeb7b8860c7466bfa6da6e40c775a8936"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42d}}, {0x102, &(0x7f0000001000)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x140c}}, {0xea, &(0x7f00000006c0)=@string={0xea, 0x3, "1529164df59cdd032739514de68febaf1667db299b3c6c94b08d84025e15d0d926eaf3e816858cefc5dc9ee7cabe0bc55e2e812b0d5e44ea32ce091385b4e78e78a255717cec311e1bfd3bf6f68ad3a36b646fdbc9378456fb0c455d483aaa48c327a276ba862fa2ab1809131fb54d49ff050ca907dcf787ad30d3d71725dce514a00b35793f83d17447180d35ce89e58833c4c02ef716123db3d0d5b860a563c9f18ec000b5017f45cfc516040ae1c18fba56fea6440b3b12d1855bf5fe581c599a18c38202424b0cb56cc771c3b2e0327db430cab2ebd4ac53f9107e4afdff65a880d18e5ffb4a"}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000a80)={0x14, &(0x7f00000009c0)={0x0, 0x15, 0xae, {0xae, 0x2, "935d3a07f9358da87ed2f925c1e4d8fd225624426ce05e01aea95bdd62d066973bd6a37166b497a825b95c020f0ddbec8c0f7cec25076765b7cf0c79c5ba404851194dc939439c70ea4b9a0726d679857436d2eb93ac149aabbef170b96ffe690c53b3b7970bc9db8948a23e8b1fd1d23ce0dcde3658cd681203b590518a2cf456287611da7f948bda4572e6c8e717790f21a8a6f82a45c773cd510e6e065d3cfee12de161d9dc1dcbe0efd3"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000ac0)={0x40, 0x14, 0x4d, "126abcb769ebc9772ca975e3135abc9d7c88836ef50b28012495de08666aaf46d3cba6ae31e600b47b0b4d67c6b443bbc21d918a91b0fbe67e9573cd3f957cd93f9471adb0303569b0e450f506"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xe}}) syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x24, &(0x7f0000000c00)=ANY=[@ANYBLOB="40056e0000006e21a756f16a9f5e088b6aebca9223df6d54988e55b61166ece2a314b32f77e08638384ded72d45973bd0971234c3ac6bd4851073f6e7ff5bbcd1439e57a9eab80224f68780d7fdc72ea90dd013f0b6062652cacfc358399650fe1dce57f19674cfc81bcf9606f21bfdea14cb38d"], &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000d40)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "83d89362"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xad9}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000e00)={0x10, 0xb, 0x67, "3e146149afde1eca55aa9dbc346e329b0234c0db137ecbbf247c52d8e88937f406229166f9293493d4f6982e8971323377b5bc99bcbc771e544c9fa3ec9692c1d2e3b83b89f07b6f0af5e6f342835c840e857deed91ec110f8b90276860d0d490ce78dfa110468"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000f00)={0x20, 0x1, 0x45, "75004ebb28ac6e2fb70b461234b83271df5f9565b91a24bef7fa621dd14f5b5308eadd57e05342284708c57a1c8db75e76a059ee6512c7c71dfbb875fa3edaae61fb29afd9"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0xa}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.176730575s ago: executing program 3 (id=6244): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) close(r4) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r6}, 0x18) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x68, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x82) r7 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0xfffc, 0x11, 0x0, 0x0}, {0x100, 0x1000, 0x0, 0x0}], 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x200441c5) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000008000000000000ffff0a010104e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000006000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000009300000000000000000000000000000001000001000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) 5.932290788s ago: executing program 2 (id=6246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe}}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r5 = syz_open_pts(0xffffffffffffffff, 0x0) r6 = dup(r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) dup3(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000640)='hQ', 0x2}], 0x2, 0xffffffff, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f0000002700)=0x23, 0x1c) socket$inet(0x2, 0x4000000000000001, 0x0) 4.945208848s ago: executing program 2 (id=6247): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904"], 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000001b00)=ANY=[@ANYBLOB="06000000000000000400000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000c0f4d922c02fff8000000000000001d0b080000004b8f"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x5, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6e0b3183}, 0x94) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@t={0x81, 0x5, 0x4, 0x5, @generic=0x80000000}) r8 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}, {0xf, 0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x800}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) sendmmsg$unix(r8, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000001d80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000240)="aee897ffa44f77d4cc1161f811b4460b9088f4e341240d4e71", 0x19}, {&(0x7f0000000540)="4233d95b60d8401fc2d526ded5c57fdffb6a50399f49da2f38e15e57e55626c0e3f527462036c4d3254cca522e3a94c64a9cd9ca93e66787740b4b7fbc73d2263abfbecc2fd09c377ad88dbe625646b6c1d97038394a3366aad0d6611e36e1fa7f8c26076cdf728e1eaa960e6a2fed50abc6986ee7812c6a241f39634eaa8bc5a485b8f01393b83b387fe0fc256b820777e34e1a874536dfb52ded473d1e2df6dcc66cd4837247cc9cf0effd1f34b2df649ae7c8e9084b7b762875a3f412b4c7ab8f484f3121f37fe1ac6f15b1a4bece85f7d4f1c1", 0xd5}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000440)="1142d87424b7f0bdb4c43327e720a39e6ff41d69d7babe7da71465762cad9e97a6af646c55e8eda11b396d99016e28aead72e6f38d63bed02b4b6881267eb367ab50f5c2f675dedae39f8ced4b03965b7f5c7da71d94d1f96fb8c8ce89ced9ebdd1399cce9bf6d702a0d8ab1117eae53f120a80fc679efe984", 0x79}, {&(0x7f0000001640)="cf47fb1538dffb6f628cf185a101c7800825f70012b8f1bc6bdecfe321baa5dd1250bc57365a86886830b526da4485f6652d3e94e529c859a3c822b4bf636054eff1e79485ea8ab6c12a4f951aeebf85d4d39468d317c955a1cf2a1e18feb6bbf7b85760c82794bf859bee4a884f9bddf5036b90851d7e61b1ed78d5d40e648758b6d58fab538c196c1236168d8fbafc491c71d43c76", 0x96}], 0x5, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e1f}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001800)="089cf192bd6d8c8a7477b7a22cf28e6f298689758c985a019033f2a611ca2d98f4447c3c208417d87cef3abb713849dbaab20db312e117f14d6a742dd8e17e14b528814d371116f7ba3b79d72cdb60d4813ee3538307ffecaee49f669b1369dd96248aeadbe7e1028ec7845c557b6b3a", 0x70}, {&(0x7f0000001880)="822b5cd5f22c196f12d60aa8f2186d4133c78a2cfbed8acab01feaf894fe18d87d55e868b170bde18f5aded9ab9c542cf6bea2ffefe902cf81bdd617125fa93285015472f5fa168febec26c3a83922024f2b9b910e14889f5b2f314f4fc041322474a7fa2328d1011265f6a3a5395370fa7107da6630bee513c255d097ed7b8a26020ce7640ff53bcba08f662927ae1a4f082ad3edb6fde94e3ff296a80281e90317e2a8c0f745b22d03bdd8ad2422a9ce16eecd1086d5539880c45e47334c62f5789a9659b1f013f1ab2eed0e0ed19a2d", 0xd1}, {&(0x7f0000001980)="0c8eb7412eeb568893792b542eecceb7c65b269062c5cdf69a411b40517b32b572d3a17202246b3fb445184b099d439232f851befa3a2f5e0ac799b6d41886db3270d43704e3cf797cbae6f7100db26840", 0x51}], 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES16=r1, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r4, @ANYRES8=r5, @ANYRES32, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES64=r7, @ANYRES32, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32, @ANYRESHEX=r10, @ANYRES64=0x0, @ANYRES64=r2], 0xc0, 0x20000800}}], 0x4, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) 4.511005529s ago: executing program 4 (id=6254): r0 = io_uring_setup(0x560d, &(0x7f0000000680)={0x0, 0xb587, 0x8, 0xfffffffe, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10000002}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x10}, {0x1, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) close_range(r0, r1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) fanotify_init(0x16, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x247) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r6 = syz_io_uring_setup(0xb93, &(0x7f0000000440)={0x0, 0x79a8, 0x20000, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.264309074s ago: executing program 1 (id=6255): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f000071f000/0x3000)=nil, &(0x7f000071e000/0x3000)=nil, 0x3000, 0x3}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000240)=""/128, 0x80}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f00000002c0)=""/39, 0x27}], 0x5}}], 0x1, 0x0, &(0x7f0000000780)={r1, r2+10000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newtclass={0x24, 0x28, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xb, 0xd}, {0x10, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x2004c040) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f0000000200)='./bus\x00', 0x0, 0x190) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00007bc000/0x2000)=nil, 0x2000, &(0x7f0000000180)='^\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.036153446s ago: executing program 1 (id=6256): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000025c0)=[{{&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f00000009c0)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000780)=""/119, 0x77}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000900)=""/134, 0x86}, {&(0x7f0000000340)=""/26, 0x1a}], 0x7, &(0x7f0000000a40)=""/122, 0x7a}, 0xafe0}, {{&(0x7f0000000ac0)=@x25, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000001c00)=""/237, 0xed}, 0x1ff}, {{&(0x7f0000001d00)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000001d80)=""/163, 0xa3}, {&(0x7f0000001e40)=""/155, 0x9b}, {&(0x7f0000001f00)=""/211, 0xd3}], 0x3, &(0x7f0000002000)=""/68, 0x44}, 0x7fffffff}, {{&(0x7f0000002080)=@ax25={{0x3, @null}, [@rose, @rose, @default, @bcast, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002100)=""/135, 0x87}, {&(0x7f00000021c0)=""/48, 0x30}], 0x2, &(0x7f0000002240)=""/58, 0x3a}, 0x8}, {{&(0x7f0000002280)=@xdp, 0x80, &(0x7f0000002580)=[{&(0x7f0000002300)=""/122, 0x7a}, {&(0x7f0000002380)=""/221, 0xdd}, {&(0x7f0000000b40)=""/265, 0x109}], 0x3}, 0x40}], 0x5, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x0, 0xf) vmsplice(r5, &(0x7f0000000100)=[{&(0x7f0000000140)="014ca0", 0x3}, {&(0x7f00000004c0)="de12d551f4b3d605bc488a6ceed3df27c381a3ea6f15631da81ee55d2e723895024a1bccb76605659ad15fa3127522dc63041dfb053f509a78e15ecaa50b9a5a8a4edc65c2673b7403bb00d5bb725925ea65eaf1cdf9afd489b3b6f31965c5017a501774d2a7c09f375c17cfb22a1ce69e1e88a740105ccdd192fe003e821b4221c007a41d13963f6823d6bd6c63f8f788c242606019f69b9076211e85199abc0d9f594dd530b45f31b388980a256fcdee04438243d570ccb12fd4edcf8129", 0xbf}], 0x2, 0xe) shutdown(r2, 0x1) r6 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x5, r6, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x88402, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000440)="e06c4ae7ef7136ce15087f80c205000000c78f7fefa3eda16e95fad0cf9d141135fe43773acde83cfdb8378694577d07acf73a59c43552d0de4c8d3c24a579f98b8710", 0x43, 0xfffffffffffffffd) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000240)='./file0\x00', 0x80140, 0x1c8) fcntl$setlease(r0, 0x400, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105042, 0x100) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r8, 0xfbfffffffffffc01, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) 3.596836004s ago: executing program 4 (id=6258): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) readv(r0, &(0x7f0000000600), 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) r1 = syz_io_uring_setup(0x6c9c, &(0x7f0000000000)={0x0, 0x757d, 0x4000, 0x2, 0x210}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r1, 0x5dfc, 0x5683, 0x3, &(0x7f0000000100)={[0x7]}, 0x8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x60, r7, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x5, 0x1, r5}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x4c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001200010400"/20, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080003"], 0x40}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffff46c6aaaaaaaa0008060001080006040001aa"], 0x0) 2.984225948s ago: executing program 1 (id=6259): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) chdir(&(0x7f0000000480)='./cgroup\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0xf0ffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.98378312s ago: executing program 4 (id=6260): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000900)="079611532b9da8e77fd37aa632b97c14cd1fadc50312a16c34adde4c0ac2334ebf8be8b46c4398103f9d53b6174b6436be19f27126581c1897663cf2bb14edacbe1cd750f88a156217e98576463abc8df98e9026c3c6f000061c7b5de5e310b3e030fae55b093de101028731c411f147cffe13fe9690ebe4050415c549975dd6f7d6c8b894577aff2e84", 0x8a}, {&(0x7f0000000540)="cb5dcbfbe56b2008c2115db6942e7dac167ddc6dc158c658a96f543e594a75ccdc74f803ae07b92325f1808dbf2ea078ac7973d28011cfc78d1bc18e38ef43122e1c2f0a9f5886f5add346e652655902b582e34b2b8c72ba6a3ca94f1b536cb00aeae88e9397394548d52d0ccec9274f8065dcb8e22bd242deb80af19e0da9bc9512a46471ae29d7d51979307cf049", 0x8f}, {&(0x7f0000000800)="668147e3d731eedc7459bd9edd5143919041dd51eb47eec2db68e162be89caae99ab1fbab3ffde2d84ae510100000001000000e9905744610000f6435c3cc357f834000000a7c06fe8697a80209541a04f12c8d1fad9b2f9c61560bbf4ed4873214a18321a47d9941f2cd15d9587e5687aefba21afc134fbf67268447fb6d522cc28b4054bf793ba8fcd9c8299c173338353a75cd9fc0a7dc789ce87c8480b02b5edf1f767479903e2ef9a529146e69b8b119bf8c679b91adc820365408e82cb4d2159784859823289ceeb816079eb193f075644dda52269536649827f7de1ec65", 0xe1}, {&(0x7f0000000600)="710060cac4c7007e0c5983e57934cc106d17ed8ee53c6a8ab4d73c1dc5e22fd4fdeeff925dfc75da2a5b40a55b9b1d16b5a0c40f5dbeabb17e8e3d33a8ebcb687ab12c8a0c09535e748eca56e6956f963d12e369053aac871d093650a0c94b9a27b437683b638bbbedeacf8e06133af190fb45474b717c9d91ed2803e1bde13c42c4b06529a341d5dc0e151f9025e02a40f1c6d36724cee98dadcb88eb7f3125837312c0528d33fd7f1efaf5448a0cfda4884cf7e2db6ff91248428b7443df21de83bc9c8ebd2deb0e4a212b42e0b6ec", 0xd0}], 0x4, 0x0, 0x0, 0x20004010}}], 0x1, 0x850) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c01800000000000000000000700000000000000ecf36f8717c3e93bc8d4e2ee4871023b16a6d2c50329be6d16331930c57bb38cc122167424a5d26fbc989b770de4599f617a7b5716a01955da656e4c0641823f153014f57c3358be54a2824815f08b63bcfe4137d098b983cf925b091d596617b931642717ede4aef2d1281a47a9d972026b0b9d73091f0ab5cac851dadc6fa75c2dd942cf14e326", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000e0001000000"], 0x3c}}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000000)={0x1, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0x2f, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x122080, 0x18b) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f00000001c0)=0x3, 0x4) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x2, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000140)) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 2.860897821s ago: executing program 3 (id=6261): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8=0xffffffffffffffff], 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@random="1525c44f6bc3", @empty, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @local}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd28}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xdc, 0xa6101) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000140)={0x0, 0x29ba, 0x1, 0xfffffffe, 0x35a}, &(0x7f0000000080), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f00000000c0)={0x1}, 0x700) 2.580346617s ago: executing program 5 (id=6263): iopl(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) iopl(0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], &(0x7f0000000180)='syzkaller\x00', 0x2000004, 0xbe, &(0x7f00000001c0)=""/190, 0x40f00, 0x42, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, r2}, 0x94) 2.460228709s ago: executing program 5 (id=6264): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r1 = syz_open_dev$vbi(&(0x7f0000000280), 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000500)=ANY=[], 0x118) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x4, "d7495a0ff82388f46bd55f64feae78faf0087b850485d190d602a4b6908d71c7", 0x2}) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x765a036df77b6ac0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x0, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x28040085) write$sndseq(r0, &(0x7f0000000080)=[{0x10, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @result}], 0x1c) 2.457775415s ago: executing program 5 (id=6265): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000080)=[{0x10, 0x0, 0x0, 0xfd, @tick=0x4000000, {}, {0xe}, @result}], 0x1c) 2.42176386s ago: executing program 5 (id=6266): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000900)={'syz', 0x3}, &(0x7f0000000080)="6ebd23d5", 0x4, 0xfffffffffffffffe) keyctl$update(0x2, r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000b80)={'veth0_macvtap\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000f40)=[{{&(0x7f0000000280)=@tipc=@name, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000001080)=""/149, 0x95}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/196, 0xc4}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f0000000980)=""/191, 0xbf}], 0x9, &(0x7f0000000a80)=""/193, 0xc1}, 0x736ed50f}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000000fc0)=""/184, 0xb8}, {&(0x7f0000000540)=""/91, 0x5b}, {&(0x7f0000000cc0)=""/88, 0x58}, {&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000d80)=""/3, 0x3}, {&(0x7f0000000bc0)=""/13, 0xd}, {&(0x7f0000000e00)=""/65, 0x41}], 0x8, &(0x7f0000000f00)=""/64, 0x40}, 0x101}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x1, 0x8, 0x0, 0x2a0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x6) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r5, 0x84, 0x17, &(0x7f0000000000), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.00363828s ago: executing program 4 (id=6267): r0 = syz_create_resource$binfmt(0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0xa00) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003d80)=[{{&(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="28000000000000110000000007000000071711ac2a00388ef09bb30dd00f72b101010c4a6c7302ac14"], 0x28}}], 0x1, 0x4000) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000080)={0x9, 0x0, 0x20009, 0x0, 0x0, 0x2, "fff8000000000000c5c6ff0017c3a86d", 0x3, 0x2, 0xb, 0xff, 0x2, 0x1, 0xfb}) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.412200656s ago: executing program 2 (id=6268): socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100fec00000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}}, 0x10) 1.411888398s ago: executing program 5 (id=6269): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(0x0, 0x0, 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001800)="c5", 0x1}], 0x2, 0x3) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) 1.371558624s ago: executing program 2 (id=6270): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x6, 0x81000000, {0x2, 0x20, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2000}}, 0x1c}}, 0x48010) 1.330105325s ago: executing program 2 (id=6271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x21cb, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x267, &(0x7f00000003c0)={0x0, 0xb0d3, 0x80, 0x1, 0x2cd, 0x0, r2}, &(0x7f0000000180), &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r3, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5174004439219000", "d8a024e5", "0eabc01f7c905c00"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="15460100ef0000006d616373656300000c000280050003000100"/36], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0x14, 0x0, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 961.1878ms ago: executing program 4 (id=6272): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(0x0, 0x0, 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001800)="c5", 0x1}], 0x2, 0x3) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) 607.051746ms ago: executing program 5 (id=6273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe}}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup(r6) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) dup3(r6, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000640)='hQ', 0x2}], 0x2, 0xffffffff, 0x4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r8, 0xffffffffffffffff, &(0x7f0000002700)=0x23, 0x1c) socket$inet(0x2, 0x4000000000000001, 0x0) 430.484572ms ago: executing program 3 (id=6274): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004a00010200c621ad3c635a03ad1a79dca8545c00000000000000000a00000393b5477387000000"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="120000000c20000000000000", @ANYRES32, @ANYBLOB="8a0dc1eedba5baa36e46866dbbb8052b868cd5955525af3fb033e5206d46c571648f716a43424bb7a310517c5330db7f86cb3d23d54c7fd3538b563832a64294b410c734774801bc79ec1e6406c725e32e5182cb4659e8615ef16cb9a7b2ed357d7e9c88f72000d7d630c2d514080c16c31de729a8109b896c570f4886320050458807ca92ccb0658d8717be02b1896a26", @ANYRES64=0x0], 0x20) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() recvmmsg(r0, &(0x7f0000002a80)=[{{&(0x7f00000001c0)=@phonet, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/100, 0x64}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f00000007c0)=""/252, 0xfc}], 0x3, &(0x7f0000000740)=""/47, 0x2f}, 0x4}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000008c0)=""/146, 0x92}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/65, 0x41}, {&(0x7f0000001a00)}], 0x4, &(0x7f0000001a80)=""/4096, 0x1000}, 0x33000000}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socketpair(0x15, 0x1, 0x10000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x17, 0x0, @fd, 0x710, {}, 0x70, 0x8, 0x0, {0x0, r4}}) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="cefed22ea79f7b96abb5e0757fca384d4b90bc5d0d5b47d1307c36cb9da3181e732cdce4471fcc9b59ae35404fb15851c28218c5548eaff6142e75e5b877a01bde4308fd8a2d3088dd75f510cd50bea2d527a8eeb2e4ee949c875da787ec2b74fc8ed54a8526e3fe407448bb31395b8dc0c49f442a11127c895bb1437f0f0ed19ec19bdfb145447b5419bc4c0b6569cc52ec383c"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000040), 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) 1.528373ms ago: executing program 2 (id=6275): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) setresgid(0xffffffffffffffff, 0xee01, 0x0) migrate_pages(0x0, 0xa3, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x2, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x7f}, 0x8) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180), &(0x7f0000000400)=0x4) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000480), 0x1004) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="54010000100001000000000000000000e0000002000000000000", @ANYRES16, @ANYRES16=r0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000020000df00000000000000001c00040000004e234e230000e00000010000000000000000000000004800010073686132353600"/232], 0x154}}, 0x0) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006ded00000000000000000000000000000000000000000000005d02000000632c17b27e19f976c0fdfd74ea82302f780e91131d754264bce8f80fc4706b1a8b9cb70d35ba746c572a9ef02634931e54e96b09629cde78498c66b649d192ad40782f62df32783b3f13479b7336a7f6b8353994f4aff49f606339f9d4fc6e8380f1c55244bfb1d17b082f3cde96"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000ffff030000000000", @ANYRES32=r7, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009e0c000000210000000500"/23], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=6276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) close(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x86a5, 0x7}, 0x90) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) kernel console output (not intermixed with test programs): a0 [ 972.971263][T25273] ? putname+0x154/0x1a0 [ 972.971285][T25273] ? __x64_sys_mount+0x28d/0x310 [ 972.971304][T25273] __x64_sys_mount+0x28d/0x310 [ 972.971326][T25273] ? __pfx___x64_sys_mount+0x10/0x10 [ 972.971350][T25273] do_syscall_64+0xcd/0x4c0 [ 972.971370][T25273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.971387][T25273] RIP: 0033:0x7f3ad2f8ebe9 [ 972.971401][T25273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.971418][T25273] RSP: 002b:00007f3ad3e5a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 972.971436][T25273] RAX: ffffffffffffffda RBX: 00007f3ad31b5fa0 RCX: 00007f3ad2f8ebe9 [ 972.971447][T25273] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 972.971458][T25273] RBP: 00007f3ad3e5a090 R08: 0000200000000100 R09: 0000000000000000 [ 972.971469][T25273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.971478][T25273] R13: 00007f3ad31b6038 R14: 00007f3ad31b5fa0 R15: 00007ffe374f34f8 [ 972.971495][T25273] [ 973.066065][T13569] usb usb2-port1: attempt power cycle [ 973.102161][T25276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5660'. [ 974.071497][T13569] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 974.104550][T13569] usb 2-1: device descriptor read/8, error -71 [ 974.424169][T13569] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 974.445433][T13569] usb 2-1: device descriptor read/8, error -71 [ 974.564191][T13569] usb usb2-port1: unable to enumerate USB device [ 974.838605][T25300] input: syz0 as /devices/virtual/input/input80 [ 975.270298][T25313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5670'. [ 976.553810][T25343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 976.615397][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 976.627683][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 976.848145][T25348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.862202][T25348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.872232][ T9] usb 3-1: device descriptor read/64, error -71 [ 976.893948][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 976.901423][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 976.917738][ T10] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 976.935909][ T10] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 976.944168][ T10] usb 2-1: Product: syz [ 976.949721][ T10] usb 2-1: Manufacturer: syz [ 976.954427][ T10] usb 2-1: SerialNumber: syz [ 977.128610][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 977.191675][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5682'. [ 977.207456][ T10] usb 2-1: palm_os_3_probe - error -71 getting connection information [ 977.220842][ T10] visor 2-1:1.0: probe with driver visor failed with error -71 [ 977.239647][ T10] usb 2-1: USB disconnect, device number 95 [ 977.268626][ T9] usb 3-1: device descriptor read/64, error -71 [ 977.385648][ T9] usb usb3-port1: attempt power cycle [ 977.811383][T25360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5688'. [ 977.942558][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 977.963586][ T9] usb 3-1: device descriptor read/8, error -71 [ 978.218919][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 978.277801][ T9] usb 3-1: device descriptor read/8, error -71 [ 978.435315][ T9] usb usb3-port1: unable to enumerate USB device [ 979.272465][T25399] bridge0: port 1(team0) entered blocking state [ 979.279061][T25399] bridge0: port 1(team0) entered disabled state [ 979.286063][T25399] team0: entered allmulticast mode [ 979.296882][T25399] team0: entered promiscuous mode [ 979.656312][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 979.656342][ T30] audit: type=1400 audit(1756208834.831:2830): avc: denied { setattr } for pid=25404 comm="syz.1.5701" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 980.706146][ T30] audit: type=1400 audit(1756208835.813:2831): avc: denied { append } for pid=25423 comm="syz.1.5705" name="video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 980.874838][T25429] netlink: 'syz.2.5706': attribute type 10 has an invalid length. [ 980.884372][T25429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.893380][T25429] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 980.916623][T25429] bond0: entered promiscuous mode [ 980.921820][T25429] bond_slave_0: entered promiscuous mode [ 980.930300][T25429] bond_slave_1: entered promiscuous mode [ 980.936414][T25429] batadv0: entered promiscuous mode [ 981.270124][T25434] netlink: 'syz.2.5706': attribute type 1 has an invalid length. [ 981.287083][T25434] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5706'. [ 981.424693][T25446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5711'. [ 981.444647][T25446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.462943][T25446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.470506][T25446] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 981.481497][T25446] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 981.634259][ T30] audit: type=1326 audit(1756208836.683:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25440 comm="syz.4.5710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ad2f8ebe9 code=0x0 [ 982.169510][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 982.583473][ T30] audit: type=1400 audit(1756208837.572:2833): avc: denied { execute } for pid=25469 comm="syz.5.5717" path="/selinux/avc/cache_threshold" dev="selinuxfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 982.784566][ T30] audit: type=1400 audit(1756208837.759:2834): avc: denied { mounton } for pid=25473 comm="syz.4.5718" path="/syzcgroup/unified/syz4" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 982.784576][T25479] tmpfs: Unknown parameter 'n__blo' [ 982.818230][T25480] 9pnet_fd: Insufficient options for proto=fd [ 982.841097][ T30] audit: type=1400 audit(1756208837.796:2835): avc: denied { write } for pid=25475 comm="syz.3.5719" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 982.900243][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5719'. [ 982.909260][T25480] netlink: 'syz.3.5719': attribute type 30 has an invalid length. [ 982.919951][ T3569] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.948240][ T3569] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.968725][ T3569] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.983321][ T3569] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.328902][T22919] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 983.554706][T22919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.568333][T22919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.585683][T22919] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 983.617553][T22919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.631808][T22919] usb 4-1: config 0 descriptor?? [ 984.072777][T22919] hid-led 0003:1D34:0004.001F: unknown main item tag 0x0 [ 986.995645][T25510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.018942][T22919] hid-led 0003:1D34:0004.001F: probe with driver hid-led failed with error -71 [ 987.051426][T22919] usb 4-1: USB disconnect, device number 37 [ 988.963312][T22919] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 989.134035][T22919] usb 3-1: Using ep0 maxpacket: 16 [ 989.217364][T22919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 989.258516][T22919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.297434][T22919] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 989.327731][T22919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.352089][T22919] usb 3-1: config 0 descriptor?? [ 989.430184][T25581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5745'. [ 989.818879][T22919] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 990.018523][T25599] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 990.027365][T25599] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 990.035942][T25575] netlink: 'syz.2.5743': attribute type 1 has an invalid length. [ 990.045333][T25575] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5743'. [ 990.058728][T22919] playstation 0003:054C:0DF2.0020: Invalid reportID received, expected 9 got 184 [ 990.070791][T22919] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -22 [ 990.081074][T22919] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense [ 990.116169][T22919] playstation 0003:054C:0DF2.0020: Failed to create dualsense. [ 990.131414][T22919] playstation 0003:054C:0DF2.0020: probe with driver playstation failed with error -22 [ 990.349311][ T5892] usb 3-1: USB disconnect, device number 10 [ 991.021665][T25622] overlayfs: failed to resolve './file0': -2 [ 991.074627][T25574] Process accounting resumed [ 991.440691][T25633] lo speed is unknown, defaulting to 1000 [ 991.945890][T24717] Bluetooth: hci0: command 0x0c1a tx timeout [ 992.213503][T24717] Bluetooth: hci4: command 0x0405 tx timeout [ 992.352312][ T974] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 992.581194][T25646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5761'. [ 992.649909][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 992.660317][ T974] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 992.670131][ T974] usb 4-1: config 0 has no interface number 0 [ 992.678699][ T974] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.695146][ T974] usb 4-1: config 0 interface 85 has no altsetting 0 [ 992.709642][ T974] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 992.772360][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.809095][T25648] netlink: 'syz.2.5762': attribute type 3 has an invalid length. [ 992.820720][ T974] usb 4-1: Product: syz [ 992.825986][ T974] usb 4-1: Manufacturer: syz [ 992.866116][ T974] usb 4-1: SerialNumber: syz [ 992.900410][ T974] usb 4-1: config 0 descriptor?? [ 993.520486][T25642] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5760'. [ 993.904468][ T974] appletouch 4-1:0.85: Geyser mode initialized. [ 994.037861][ T30] audit: type=1326 audit(1756208848.272:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25664 comm="syz.1.5767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4da1d8ebe9 code=0x0 [ 994.361676][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 994.426690][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 994.472967][ T974] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input81 [ 994.512644][ T974] usb 4-1: USB disconnect, device number 38 [ 994.569815][ T974] appletouch 4-1:0.85: input: appletouch disconnected [ 994.577851][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.613449][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.634516][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 994.722011][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.757475][ T9] usb 2-1: config 0 descriptor?? [ 994.885331][T25676] bond0: left promiscuous mode [ 994.890279][T25676] bond_slave_0: left promiscuous mode [ 994.896150][T25676] bond_slave_1: left promiscuous mode [ 994.902318][T25676] batadv0: left promiscuous mode [ 994.911702][T25676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.923748][T25676] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.961533][ T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 995.038916][T25676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 995.476289][T25688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.522301][T25688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.548350][T22919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 995.710341][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 995.716486][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 996.319624][T18024] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 996.941042][ T9] usb 2-1: USB disconnect, device number 96 [ 997.367843][T25747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.378832][T25747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.431244][T18024] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 997.440054][T18024] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 998.148231][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5788'. [ 998.153220][T25764] netlink: 'syz.2.5789': attribute type 4 has an invalid length. [ 998.275044][T22919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 999.188767][ T30] audit: type=1326 audit(1756208853.099:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 999.384305][ T30] audit: type=1326 audit(1756208853.174:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 999.436461][ T30] audit: type=1326 audit(1756208853.174:2839): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 999.562794][T25801] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 999.569998][T25801] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 999.635824][ T30] audit: type=1326 audit(1756208853.183:2840): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 999.740580][ T30] audit: type=1326 audit(1756208853.193:2841): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 999.742589][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5801'. [ 1000.003262][ T30] audit: type=1326 audit(1756208853.202:2842): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 1000.008480][T25816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5802'. [ 1000.475668][ T30] audit: type=1326 audit(1756208853.221:2844): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25806 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f654afc14a5 code=0x7ffc0000 [ 1000.501477][ T30] audit: type=1326 audit(1756208853.221:2843): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 1000.617739][ T30] audit: type=1326 audit(1756208853.258:2845): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 1000.708419][ T30] audit: type=1326 audit(1756208853.258:2846): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 1000.735444][ T30] audit: type=1326 audit(1756208853.258:2847): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 1000.761528][ T30] audit: type=1326 audit(1756208853.258:2848): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.3.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654af8ebe9 code=0x7ffc0000 [ 1000.819154][ T5892] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1001.215227][ T5892] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 1001.233166][T25832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5804'. [ 1001.250149][ T5892] usb 2-1: config 0 has no interface number 0 [ 1001.259629][ T5892] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1001.268958][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.429039][T25834] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5807'. [ 1001.440753][ T5892] usb 2-1: Product: syz [ 1001.444937][ T5892] usb 2-1: Manufacturer: syz [ 1001.470545][ T5892] usb 2-1: SerialNumber: syz [ 1001.584934][ T5892] usb 2-1: config 0 descriptor?? [ 1001.594757][ T5892] qmi_wwan 2-1:0.207: bogus CDC Union: master=0, slave=1 [ 1001.713402][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 1001.780931][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1001.788852][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 1001.808960][ T5892] qmi_wwan 2-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1002.111537][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5813'. [ 1002.232251][ T9] usb 2-1: USB disconnect, device number 97 [ 1002.354835][T25854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5815'. [ 1002.364505][T25854] openvswitch: netlink: Unknown nsh attribute 0 [ 1002.371102][T25854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.529294][ T5892] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1002.690785][ T5892] usb 3-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.710802][T25859] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 1002.720810][ T5892] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1002.730090][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1002.740655][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1002.750238][ T5892] usb 3-1: SerialNumber: syz [ 1002.759198][T25845] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1002.985289][T25845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.997164][T25845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.388535][ T5892] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1003.402174][ T5892] usb 3-1: USB disconnect, device number 11 [ 1003.720950][T25874] sp0: Synchronizing with TNC [ 1003.896639][T25874] netlink: 'syz.3.5820': attribute type 4 has an invalid length. [ 1003.937204][T25886] tmpfs: Bad value for 'mpol' [ 1004.389508][ T974] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1004.540893][ T974] usb 4-1: device descriptor read/64, error -71 [ 1004.635965][T25896] ./cgroup: Can't lookup blockdev [ 1004.962809][ T974] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1005.174626][ T974] usb 4-1: device descriptor read/64, error -71 [ 1005.311854][ T974] usb usb4-port1: attempt power cycle [ 1005.510341][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1005.510354][ T30] audit: type=1400 audit(1756208859.011:2900): avc: denied { read } for pid=25907 comm="syz.1.5829" dev="nsfs" ino=4026533346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1005.542061][T25909] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.5828'. [ 1005.601543][ T30] audit: type=1400 audit(1756208859.039:2901): avc: denied { open } for pid=25907 comm="syz.1.5829" path="net:[4026533346]" dev="nsfs" ino=4026533346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1005.628098][ T30] audit: type=1400 audit(1756208859.058:2902): avc: denied { setopt } for pid=25904 comm="syz.2.5828" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1005.665243][ T30] audit: type=1400 audit(1756208859.058:2903): avc: denied { read } for pid=25904 comm="syz.2.5828" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1005.689631][ T974] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1005.697558][ T30] audit: type=1400 audit(1756208859.058:2904): avc: denied { open } for pid=25904 comm="syz.2.5828" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1005.742644][ T974] usb 4-1: device descriptor read/8, error -71 [ 1005.761998][T25912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5831'. [ 1005.771521][ T30] audit: type=1400 audit(1756208859.058:2905): avc: denied { ioctl } for pid=25904 comm="syz.2.5828" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1005.797227][ T30] audit: type=1400 audit(1756208859.067:2906): avc: denied { read } for pid=25904 comm="syz.2.5828" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1005.862063][ T9] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1005.862344][ T30] audit: type=1400 audit(1756208859.095:2907): avc: denied { unmount } for pid=19104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1005.986211][ T30] audit: type=1400 audit(1756208859.254:2908): avc: denied { create } for pid=25911 comm="syz.4.5831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1006.025093][ T974] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1006.049891][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1006.050286][ T974] usb 4-1: device descriptor read/8, error -71 [ 1006.318083][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1006.339236][ T974] usb usb4-port1: unable to enumerate USB device [ 1006.350423][ T30] audit: type=1400 audit(1756208859.254:2909): avc: denied { write } for pid=25911 comm="syz.4.5831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1006.356984][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1006.440318][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1006.480055][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1006.500798][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.528001][ T9] usb 2-1: Product: syz [ 1006.539889][ T9] usb 2-1: Manufacturer: syz [ 1006.544482][ T9] usb 2-1: SerialNumber: syz [ 1006.584737][T25908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1006.596016][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 1006.711808][T25928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5835'. [ 1006.869673][T25908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1006.891709][T25908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1006.967731][T25874] [U] è [ 1007.377813][T25939] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1007.400860][T25939] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1007.425088][T25939] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1007.492520][T25939] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1007.555301][T25939] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1007.568818][T25939] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1007.590733][T25939] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1007.603291][T25939] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1007.614251][T25939] netlink: 'syz.3.5838': attribute type 3 has an invalid length. [ 1007.689345][T25941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1007.697467][T25941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1007.717376][ T9] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1007.726452][ T9] wwan wwan0: port wwan0mbim0 attached [ 1007.770976][ T9] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 1e:81:61:f3:ac:23 [ 1008.565044][ T5514] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 1008.710174][T25916] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1008.742793][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 1009.106631][T22919] usb 2-1: USB disconnect, device number 98 [ 1009.113222][T22919] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1009.212697][T22919] wwan wwan0: port wwan0mbim0 disconnected [ 1009.398852][T25916] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1010.421188][T26008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5847'. [ 1010.675502][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1010.903203][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1010.903214][ T30] audit: type=1400 audit(1756208864.062:2977): avc: denied { create } for pid=26015 comm="syz.3.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1011.376523][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 1011.765753][ T30] audit: type=1400 audit(1756208864.099:2978): avc: denied { bind } for pid=26015 comm="syz.3.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1011.787158][ T30] audit: type=1400 audit(1756208864.174:2979): avc: denied { create } for pid=26015 comm="syz.3.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1011.807306][ T30] audit: type=1400 audit(1756208864.174:2980): avc: denied { bind } for pid=26015 comm="syz.3.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1011.832351][ T30] audit: type=1400 audit(1756208864.174:2981): avc: denied { setopt } for pid=26015 comm="syz.3.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1011.929255][T26025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5852'. [ 1012.302201][ T30] audit: type=1400 audit(1756208865.334:2982): avc: denied { unlink } for pid=26027 comm="syz.4.5853" name="#41" dev="tmpfs" ino=2586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1012.441455][ T30] audit: type=1400 audit(1756208865.334:2983): avc: denied { mount } for pid=26027 comm="syz.4.5853" name="/" dev="overlay" ino=2581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1013.146508][ T30] audit: type=1400 audit(1756208865.540:2984): avc: denied { allowed } for pid=26029 comm="syz.3.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1013.166269][ T30] audit: type=1400 audit(1756208865.540:2985): avc: denied { create } for pid=26029 comm="syz.3.5854" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1013.201986][ T30] audit: type=1400 audit(1756208865.540:2986): avc: denied { map } for pid=26029 comm="syz.3.5854" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1013.932218][T26075] syz.2.5863: attempt to access beyond end of device [ 1013.932218][T26075] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1013.945214][T26075] syz.2.5863: attempt to access beyond end of device [ 1013.945214][T26075] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1013.958277][T26075] Mount JFS Failure: -5 [ 1014.029147][T26048] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1014.035606][T26048] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1015.171036][T26096] overlayfs: workdir and upperdir must be separate subtrees [ 1015.276071][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5867'. [ 1015.285754][T26098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5867'. [ 1015.553891][T26112] mkiss: ax0: crc mode is auto. [ 1016.390648][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 1016.391184][T24717] Bluetooth: hci4: command 0x0405 tx timeout [ 1016.508673][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1016.508692][ T30] audit: type=1400 audit(1756208868.674:3048): avc: denied { accept } for pid=26109 comm="syz.2.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1016.546646][ T30] audit: type=1400 audit(1756208868.674:3049): avc: denied { write } for pid=26109 comm="syz.2.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1016.568436][ T30] audit: type=1400 audit(1756208868.758:3050): avc: denied { read } for pid=26109 comm="syz.2.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1016.714915][ T30] audit: type=1400 audit(1756208869.487:3051): avc: denied { read } for pid=26127 comm="syz.1.5874" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1017.143432][ T30] audit: type=1400 audit(1756208869.487:3052): avc: denied { open } for pid=26127 comm="syz.1.5874" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1017.177378][ T30] audit: type=1400 audit(1756208869.487:3053): avc: denied { ioctl } for pid=26127 comm="syz.1.5874" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1017.207532][ T30] audit: type=1400 audit(1756208869.880:3054): avc: denied { read } for pid=26132 comm="syz.1.5875" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1017.254066][ T30] audit: type=1400 audit(1756208870.002:3055): avc: denied { watch } for pid=26108 comm="syz.4.5872" path="/490/control" dev="tmpfs" ino=2605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1017.458482][ T30] audit: type=1400 audit(1756208870.189:3056): avc: denied { bind } for pid=26143 comm="syz.1.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1017.658642][ T5892] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1017.901929][ T30] audit: type=1400 audit(1756208870.601:3057): avc: denied { create } for pid=26159 comm="syz.2.5880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1017.989977][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1018.001535][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1018.244024][ T5892] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1018.285333][ T5892] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1018.314123][ T5892] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.326707][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.349167][ T5892] usb 4-1: Product: syz [ 1018.371908][ T5892] usb 4-1: Manufacturer: syz [ 1018.400916][ T5892] usb 4-1: SerialNumber: syz [ 1018.425001][T26142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1018.535035][ T5892] cdc_mbim 4-1:1.0: skipping garbage [ 1018.996420][T26142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1019.007447][T26142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1019.768086][T26188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26188 comm=syz.2.5886 [ 1020.023873][T26198] overlayfs: failed to resolve './file1': -2 [ 1020.038272][T26198] overlayfs: failed to resolve './file1': -2 [ 1020.046536][T26201] overlayfs: failed to resolve './file1': -2 [ 1020.584895][T26212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5892'. [ 1020.807449][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5891'. [ 1021.054609][ T5892] cdc_mbim 4-1:1.0: bind() failure [ 1021.061968][ T5892] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1021.090055][T26217] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5894'. [ 1021.106011][ T5892] cdc_ncm 4-1:1.1: bind() failure [ 1021.118525][T26217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5894'. [ 1021.149792][ T5892] usb 4-1: USB disconnect, device number 43 [ 1021.188256][T26224] syz.1.5897: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1021.284460][T26224] CPU: 1 UID: 0 PID: 26224 Comm: syz.1.5897 Not tainted syzkaller #0 PREEMPT(full) [ 1021.284488][T26224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1021.284499][T26224] Call Trace: [ 1021.284505][T26224] [ 1021.284511][T26224] dump_stack_lvl+0x16c/0x1f0 [ 1021.284535][T26224] warn_alloc+0x248/0x3a0 [ 1021.284555][T26224] ? __pfx_warn_alloc+0x10/0x10 [ 1021.284571][T26224] ? __pfx_stack_trace_save+0x10/0x10 [ 1021.284595][T26224] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1021.284619][T26224] ? kasan_save_stack+0x42/0x60 [ 1021.284636][T26224] ? kasan_save_stack+0x33/0x60 [ 1021.284653][T26224] ? kasan_save_track+0x14/0x30 [ 1021.284669][T26224] ? xskq_create+0x52/0x1d0 [ 1021.284694][T26224] ? xsk_setsockopt+0x74e/0x9a0 [ 1021.284716][T26224] ? do_sock_setsockopt+0xf3/0x1d0 [ 1021.284738][T26224] ? xskq_create+0xfb/0x1d0 [ 1021.284763][T26224] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1021.284792][T26224] ? xskq_create+0xfb/0x1d0 [ 1021.284819][T26224] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1021.284848][T26224] ? xskq_create+0xfb/0x1d0 [ 1021.284873][T26224] vmalloc_user_noprof+0x9e/0xe0 [ 1021.284897][T26224] ? xskq_create+0xfb/0x1d0 [ 1021.284925][T26224] xskq_create+0xfb/0x1d0 [ 1021.284951][T26224] xsk_setsockopt+0x74e/0x9a0 [ 1021.284975][T26224] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1021.284999][T26224] ? __fget_files+0x204/0x3c0 [ 1021.285019][T26224] ? rcu_is_watching+0x12/0xc0 [ 1021.285042][T26224] ? selinux_socket_setsockopt+0x6a/0x80 [ 1021.285065][T26224] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1021.285089][T26224] do_sock_setsockopt+0xf3/0x1d0 [ 1021.285111][T26224] __sys_setsockopt+0x1a0/0x230 [ 1021.285136][T26224] __x64_sys_setsockopt+0xbd/0x160 [ 1021.285153][T26224] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1021.285174][T26224] do_syscall_64+0xcd/0x4c0 [ 1021.285194][T26224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.285212][T26224] RIP: 0033:0x7f4da1d8ebe9 [ 1021.285227][T26224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.285245][T26224] RSP: 002b:00007f4da2c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1021.285264][T26224] RAX: ffffffffffffffda RBX: 00007f4da1fb5fa0 RCX: 00007f4da1d8ebe9 [ 1021.285275][T26224] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1021.285286][T26224] RBP: 00007f4da1e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 1021.285297][T26224] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.285308][T26224] R13: 00007f4da1fb6038 R14: 00007f4da1fb5fa0 R15: 00007ffe5a646db8 [ 1021.285325][T26224] [ 1021.285343][T26224] Mem-Info: [ 1021.637512][T26224] active_anon:10191 inactive_anon:2 isolated_anon:0 [ 1021.637512][T26224] active_file:7516 inactive_file:55620 isolated_file:0 [ 1021.637512][T26224] unevictable:768 dirty:333 writeback:0 [ 1021.637512][T26224] slab_reclaimable:8197 slab_unreclaimable:115328 [ 1021.637512][T26224] mapped:33109 shmem:1407 pagetables:1783 [ 1021.637512][T26224] sec_pagetables:0 bounce:0 [ 1021.637512][T26224] kernel_misc_reclaimable:0 [ 1021.637512][T26224] free:1257397 free_pcp:18203 free_cma:0 [ 1021.764520][T26224] Node 0 active_anon:48464kB inactive_anon:8kB active_file:30064kB inactive_file:222240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132396kB dirty:1320kB writeback:0kB shmem:11192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13300kB pagetables:6972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1022.001151][T26224] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1022.080224][T26224] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1022.149523][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1022.149540][ T30] audit: type=1400 audit(1756208874.585:3073): avc: denied { read write } for pid=26240 comm="syz.4.5901" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1022.159283][T26224] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 1022.238700][T26224] Node 0 DMA32 free:1112076kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61152kB inactive_anon:8kB active_file:30064kB inactive_file:220908kB unevictable:1536kB writepending:1424kB present:3129332kB managed:2539388kB mlocked:0kB bounce:0kB free_pcp:43784kB local_pcp:25872kB free_cma:0kB [ 1022.276167][ T5892] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1022.351520][T26224] lowmem_reserve[]: 0 0 1 1 1 [ 1022.356290][T26224] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1022.403332][ T30] audit: type=1400 audit(1756208874.585:3074): avc: denied { open } for pid=26240 comm="syz.4.5901" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1022.439010][T26224] lowmem_reserve[]: 0 0 0 0 0 [ 1022.445124][T26224] Node 1 Normal free:3889348kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21476kB local_pcp:14336kB free_cma:0kB [ 1022.781990][T26224] lowmem_reserve[]: 0 0 0 0 0 [ 1022.798731][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 1022.804325][ T30] audit: type=1400 audit(1756208874.847:3075): avc: denied { append } for pid=26247 comm="syz.2.5904" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1022.809538][T26224] Node 0 [ 1022.885449][ T30] audit: type=1400 audit(1756208874.847:3076): avc: denied { write } for pid=26247 comm="syz.2.5904" name="mcfilter6" dev="proc" ino=4026533198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1023.031645][T26224] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1023.048245][T26224] Node 0 DMA32: 308*4kB (UE) 7*8kB (UE) 58*16kB (UE) 850*32kB (UME) 1094*64kB (UME) 867*128kB (UME) 641*256kB (UME) 316*512kB (UME) 173*1024kB (UME) 7*2048kB (UME) 89*4096kB (UM) = 1092328kB [ 1023.067629][ T30] audit: type=1400 audit(1756208875.418:3077): avc: denied { read write } for pid=26240 comm="syz.4.5901" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1023.634462][ T5892] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 1023.648432][T26260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.650573][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.679178][ T30] audit: type=1400 audit(1756208875.418:3078): avc: denied { open } for pid=26240 comm="syz.4.5901" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1023.705003][T26224] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1023.718362][T26260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.752217][ T30] audit: type=1400 audit(1756208875.483:3079): avc: denied { setopt } for pid=26240 comm="syz.4.5901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1023.771769][T26224] Node 1 Normal: 199*4kB (UME) 55*8kB (UE) 43*16kB (UME) 250*32kB (UE) 100*64kB (UME) 28*128kB (UME) 7*256kB (UM) 8*512kB (UME) 3*1024kB (UM) 9*2048kB (UME) 938*4096kB (UM) = 3889348kB [ 1023.771904][T26224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1023.771918][T26224] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1023.771930][T26224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1023.771943][T26224] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1023.771955][T26224] 67381 total pagecache pages [ 1023.771962][T26224] 2 pages in swap cache [ 1023.771968][T26224] Free swap = 118840kB [ 1023.771975][T26224] Total swap = 124996kB [ 1023.771982][T26224] 2097051 pages RAM [ 1023.771988][T26224] 0 pages HighMem/MovableOnly [ 1023.771994][T26224] 430242 pages reserved [ 1023.772000][T26224] 0 pages cma reserved [ 1023.874354][ T5892] usb 2-1: config 0 has no interface number 0 [ 1023.906746][ T5892] usb 2-1: config 0 interface 86 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1023.950087][ T30] audit: type=1400 audit(1756208875.483:3080): avc: denied { read } for pid=26240 comm="syz.4.5901" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1023.954651][ T5892] usb 2-1: config 0 interface 86 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1023.975457][ T30] audit: type=1400 audit(1756208875.493:3081): avc: denied { open } for pid=26240 comm="syz.4.5901" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1024.016013][ T5892] usb 2-1: config 0 interface 86 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1024.016029][ T30] audit: type=1400 audit(1756208875.493:3082): avc: denied { ioctl } for pid=26240 comm="syz.4.5901" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1024.063755][ T5892] usb 2-1: config 0 interface 86 has no altsetting 0 [ 1024.102518][ T5892] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 1024.125534][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.134082][ T5892] usb 2-1: Product: syz [ 1024.140080][ T5892] usb 2-1: Manufacturer: syz [ 1024.144828][ T5892] usb 2-1: SerialNumber: syz [ 1024.151883][ T5892] usb 2-1: config 0 descriptor?? [ 1024.180093][T26266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5907'. [ 1024.188648][T22919] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1024.190579][T26266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5907'. [ 1024.206731][T26266] validate_nla: 42 callbacks suppressed [ 1024.206782][T26266] netlink: 'syz.2.5907': attribute type 15 has an invalid length. [ 1024.222585][T26266] netlink: 'syz.2.5907': attribute type 18 has an invalid length. [ 1024.373003][ T5892] usb 2-1: USB disconnect, device number 99 [ 1024.392948][T22919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.404554][T22919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.414581][T22919] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1024.423691][T22919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.432594][T22919] usb 4-1: config 0 descriptor?? [ 1025.323347][ T5892] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1025.367457][T22919] usb 4-1: language id specifier not provided by device, defaulting to English [ 1025.471269][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1025.605114][T26263] openvswitch: netlink: IP tunnel dst address not specified [ 1025.730289][T26284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.895172][T22919] uclogic 0003:256C:006D.0021: interface is invalid, ignoring [ 1026.006001][ T5892] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1026.144784][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1026.167422][T22919] usb 4-1: USB disconnect, device number 44 [ 1026.273199][ T5892] usb usb2-port1: attempt power cycle [ 1026.378321][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5914'. [ 1026.601593][T26294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5916'. [ 1026.799112][ T5892] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1026.819722][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1027.088650][ T5892] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1027.132988][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1027.349585][ T5892] usb usb2-port1: unable to enumerate USB device [ 1027.406277][T22919] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1027.603226][T22919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.681917][T22919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1027.701329][T22919] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1027.715467][T22919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.817399][T22919] usb 4-1: config 0 descriptor?? [ 1028.268251][T22919] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 1028.285820][T26328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5928'. [ 1028.285832][T22919] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 1028.377102][T22919] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 1028.449604][T22919] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 1028.465415][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1028.539498][T22919] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 1028.549209][T22919] kovaplus 0003:1E7D:2D50.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 1028.662310][T22919] kovaplus 0003:1E7D:2D50.0022: couldn't init struct kovaplus_device [ 1028.671184][T22919] kovaplus 0003:1E7D:2D50.0022: couldn't install mouse [ 1028.682035][T22919] kovaplus 0003:1E7D:2D50.0022: probe with driver kovaplus failed with error -71 [ 1028.688709][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1028.688725][ T30] audit: type=1400 audit(1756208880.693:3092): avc: denied { ioctl } for pid=26334 comm="syz.5.5931" path="socket:[91443]" dev="sockfs" ino=91443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1028.699929][T22919] usb 4-1: USB disconnect, device number 45 [ 1028.723571][ C0] vkms_vblank_simulate: vblank timer overrun [ 1028.728936][T26335] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1028.748480][T26335] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1028.757434][T26335] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.783267][T26335] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1028.831565][ T30] audit: type=1400 audit(1756208880.834:3093): avc: denied { create } for pid=26336 comm="syz.5.5932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1028.851856][T13569] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1029.057964][T13569] usb 3-1: Using ep0 maxpacket: 8 [ 1029.063100][ T974] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1029.089177][T13569] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1029.114751][T13569] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1029.141125][T13569] usb 3-1: Product: syz [ 1029.146753][T13569] usb 3-1: Manufacturer: syz [ 1029.165589][T13569] usb 3-1: SerialNumber: syz [ 1029.202800][T13569] usb 3-1: config 0 descriptor?? [ 1029.267627][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1029.296024][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1029.314017][ T974] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1029.327304][ T974] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1029.360581][ T974] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1029.391579][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.435767][ T974] usb 2-1: Product: syz [ 1029.457628][ T974] usb 2-1: Manufacturer: syz [ 1029.483208][ T974] usb 2-1: SerialNumber: syz [ 1029.568474][T26333] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1029.576032][ T30] audit: type=1400 audit(1756208881.526:3094): avc: denied { bind } for pid=26329 comm="syz.2.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1029.647981][ T974] cdc_mbim 2-1:1.0: skipping garbage [ 1029.655383][ T30] audit: type=1400 audit(1756208881.526:3095): avc: denied { name_bind } for pid=26329 comm="syz.2.5929" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1029.685185][ T30] audit: type=1400 audit(1756208881.526:3096): avc: denied { node_bind } for pid=26329 comm="syz.2.5929" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1029.725711][ T30] audit: type=1400 audit(1756208881.526:3097): avc: denied { listen } for pid=26329 comm="syz.2.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1029.798084][ T30] audit: type=1400 audit(1756208881.526:3098): avc: denied { write } for pid=26329 comm="syz.2.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1029.828055][T26333] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1029.831582][ T30] audit: type=1400 audit(1756208881.526:3099): avc: denied { connect } for pid=26329 comm="syz.2.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1029.861246][T26333] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1029.895627][ T30] audit: type=1400 audit(1756208881.526:3100): avc: denied { name_connect } for pid=26329 comm="syz.2.5929" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1030.060296][ T30] audit: type=1400 audit(1756208881.591:3101): avc: denied { execute_no_trans } for pid=26329 comm="syz.2.5929" path="/477/file2" dev="tmpfs" ino=2582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1030.576488][T26359] lo speed is unknown, defaulting to 1000 [ 1030.804985][T26367] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1030.829822][T26367] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1030.860886][ T974] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1030.927503][ T974] wwan wwan0: port wwan0mbim0 attached [ 1031.055090][ T974] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 76:fe:d9:59:06:09 [ 1031.229860][T26377] can: request_module (can-proto-0) failed. [ 1031.780649][ T5514] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 1032.036982][T26404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5944'. [ 1032.042578][T13569] usb 3-1: USB disconnect, device number 12 [ 1032.080401][T15430] udevd[15430]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.206919][ T974] usb 2-1: USB disconnect, device number 104 [ 1032.235831][ T974] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1032.666886][ T974] wwan wwan0: port wwan0mbim0 disconnected [ 1034.256620][T26459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5956'. [ 1034.344504][ T5892] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1034.569250][ T5892] usb 4-1: device descriptor read/64, error -71 [ 1034.825718][ T5892] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1034.975267][ T974] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1035.018098][ T5892] usb 4-1: device descriptor read/64, error -71 [ 1035.138847][ T5892] usb usb4-port1: attempt power cycle [ 1035.204235][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1035.245383][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1035.256272][ T30] audit: type=1326 audit(1756208886.820:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a18ebe9 code=0x7ffc0000 [ 1035.354159][ T30] audit: type=1326 audit(1756208886.820:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f158a18ebe9 code=0x7ffc0000 [ 1035.438990][ T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1035.757839][ T974] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1035.916707][T26491] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1035.928323][ T30] audit: type=1326 audit(1756208886.830:3118): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a18ebe9 code=0x7ffc0000 [ 1035.954685][T26496] smc: net device bond0 applied user defined pnetid SYZ2 [ 1035.964849][ T974] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1035.976809][T26496] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5961'. [ 1035.985581][T26497] syz.5.5959 (26497): drop_caches: 2 [ 1035.993712][ T5892] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1036.030272][ T5892] usb 4-1: device descriptor read/8, error -71 [ 1036.043401][ T30] audit: type=1326 audit(1756208886.830:3119): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f158a18ebe9 code=0x7ffc0000 [ 1036.072853][T26497] syz.5.5959 (26497): drop_caches: 2 [ 1036.078376][ T30] audit: type=1326 audit(1756208886.839:3120): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a18ebe9 code=0x7ffc0000 [ 1036.106149][ T30] audit: type=1326 audit(1756208886.839:3121): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f158a18ebe9 code=0x7ffc0000 [ 1036.107256][ T974] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1036.152927][ T30] audit: type=1326 audit(1756208886.848:3122): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a18ebe9 code=0x7ffc0000 [ 1036.184537][T26496] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1036.192337][T26496] bond0 (unregistering): Released all slaves [ 1036.232577][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.234984][ T30] audit: type=1326 audit(1756208886.933:3124): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f158a1c14a5 code=0x7ffc0000 [ 1036.272736][ T974] usb 2-1: Product: syz [ 1036.276947][ T974] usb 2-1: Manufacturer: syz [ 1036.289941][ T974] usb 2-1: SerialNumber: syz [ 1036.296684][ T30] audit: type=1326 audit(1756208886.933:3123): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f158a18ebe9 code=0x7ffc0000 [ 1036.323009][T26467] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1036.330432][ T5892] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1036.331131][ T974] cdc_mbim 2-1:1.0: skipping garbage [ 1036.351226][ T30] audit: type=1326 audit(1756208886.942:3125): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26479 comm="syz.2.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158a18ebe9 code=0x7ffc0000 [ 1036.377430][ T5892] usb 4-1: device descriptor read/8, error -71 [ 1036.490339][T26509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5964'. [ 1036.505927][ T5892] usb usb4-port1: unable to enumerate USB device [ 1037.075195][T26511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5963'. [ 1037.087989][T26511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5963'. [ 1037.128341][T26467] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1037.197662][T26467] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1037.373721][ T974] cdc_mbim 2-1:1.0: bind() failure [ 1037.380322][ T974] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1037.398357][ T974] cdc_ncm 2-1:1.1: bind() failure [ 1037.539902][ T974] usb 2-1: USB disconnect, device number 105 [ 1037.767200][T26523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1038.128993][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 1038.321520][ T974] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1038.880084][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1038.890830][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 1038.896169][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1038.907146][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1038.918525][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1039.293980][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1039.308154][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1039.316704][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1039.334503][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1039.346531][ T974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.370733][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1039.379262][ T974] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1039.393427][T26552] netlink: 'syz.3.5978': attribute type 3 has an invalid length. [ 1039.503221][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.751149][ T974] usb 2-1: config 0 descriptor?? [ 1039.767621][ T974] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1039.858218][T26562] lo speed is unknown, defaulting to 1000 [ 1040.098559][T26579] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5983'. [ 1040.423692][T26530] geneve1: entered allmulticast mode [ 1040.445715][T26530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.540710][T26530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.625134][T26582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1040.631803][T26582] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1040.641409][T26582] vhci_hcd vhci_hcd.0: Device attached [ 1041.477753][ T974] gspca_vc032x: reg_r err -110 [ 1042.131235][ T974] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1042.179245][ T974] usb 2-1: USB disconnect, device number 106 [ 1042.443824][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1042.443856][ T30] audit: type=1400 audit(1756208893.359:3165): avc: denied { read } for pid=26601 comm="syz.5.5994" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1042.530952][ T30] audit: type=1400 audit(1756208893.443:3166): avc: denied { open } for pid=26601 comm="syz.5.5994" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1042.630376][ T9] usb 37-1: new high-speed USB device number 10 using vhci_hcd [ 1043.068574][T26619] input: syz0 as /devices/virtual/input/input82 [ 1043.103996][ T30] audit: type=1400 audit(1756208894.098:3167): avc: denied { read } for pid=26601 comm="syz.5.5994" name="usbmon4" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1043.135199][ T30] audit: type=1400 audit(1756208894.098:3168): avc: denied { open } for pid=26601 comm="syz.5.5994" path="/dev/usbmon4" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1043.201386][ T30] audit: type=1400 audit(1756208894.126:3169): avc: denied { write } for pid=26601 comm="syz.5.5994" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1043.237509][ T30] audit: type=1400 audit(1756208894.135:3170): avc: denied { ioctl } for pid=26601 comm="syz.5.5994" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1043.299609][ T30] audit: type=1400 audit(1756208894.201:3171): avc: denied { read } for pid=5204 comm="acpid" name="js0" dev="devtmpfs" ino=4140 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1043.321860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.331800][ T30] audit: type=1400 audit(1756208894.201:3172): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4140 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1043.355260][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.362575][ T30] audit: type=1400 audit(1756208894.201:3173): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4140 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1043.388108][ T30] audit: type=1400 audit(1756208894.360:3174): avc: denied { connect } for pid=26616 comm="syz.1.5997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1043.422612][T26593] vhci_hcd: connection reset by peer [ 1043.433620][ T7733] vhci_hcd: stop threads [ 1043.438032][ T7733] vhci_hcd: release socket [ 1043.444392][ T7733] vhci_hcd: disconnect device [ 1043.815576][T26639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.828242][T26639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.689650][T26656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6007'. [ 1045.722561][T26663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6009'. [ 1046.306766][T26677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6014'. [ 1046.335199][T26677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.354678][T26677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.235860][ T974] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1047.498997][ T974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.513714][ T974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.524248][ T974] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1047.533456][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1047.541533][ T974] usb 4-1: SerialNumber: syz [ 1047.626895][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1047.776466][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1048.115333][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1048.124247][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1048.142631][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1048.155095][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1048.173619][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1048.187057][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1048.476853][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.503915][ T10] usb 3-1: config 0 descriptor?? [ 1048.514818][T26696] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1048.542110][ T9] vhci_hcd: vhci_device speed not set [ 1049.740783][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1049.740862][ T30] audit: type=1400 audit(1756208899.373:3187): avc: denied { setopt } for pid=26688 comm="syz.3.6018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1049.996728][T26719] 9pnet_fd: Insufficient options for proto=fd [ 1050.048375][T26724] tipc: Enabled bearer , priority 0 [ 1050.063979][ T30] audit: type=1400 audit(1756208900.693:3188): avc: denied { watch_reads } for pid=26723 comm="syz.5.6028" path="/458" dev="tmpfs" ino=2467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1050.069723][T26724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.086537][ C1] vkms_vblank_simulate: vblank timer overrun [ 1050.103359][T26724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.132780][T26723] tipc: Disabling bearer [ 1050.162110][T26727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1050.171509][T26727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1050.182752][T26727] validate_nla: 42 callbacks suppressed [ 1050.182788][T26727] netlink: 'syz.1.6029': attribute type 19 has an invalid length. [ 1050.198020][T26727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1050.198870][ T10] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1050.533007][ T10] usb 3-1: USB disconnect, device number 13 [ 1050.551061][ T974] usb 4-1: 0:2 : does not exist [ 1050.566010][ T974] usb 4-1: unit 5: unexpected type 0x03 [ 1050.628941][T26736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6031'. [ 1050.671145][ T974] usb 4-1: USB disconnect, device number 50 [ 1050.785029][T26739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1050.822302][T26739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1050.853825][T26739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1050.861541][T26739] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1050.886758][T26739] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1050.925628][ T30] audit: type=1400 audit(1756208901.478:3189): avc: denied { accept } for pid=26738 comm="syz.5.6034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1050.962625][ T30] audit: type=1400 audit(1756208901.478:3190): avc: denied { getopt } for pid=26738 comm="syz.5.6034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1051.336609][T26746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6036'. [ 1051.816679][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1051.994791][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1052.001693][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1052.009973][ T9] usb 2-1: config 0 has no interface number 0 [ 1052.056823][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1052.066151][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.074251][ T9] usb 2-1: Product: syz [ 1052.083437][ T30] audit: type=1400 audit(1756208902.479:3191): avc: denied { write } for pid=26762 comm="syz.4.6043" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1052.084185][ T9] usb 2-1: Manufacturer: syz [ 1052.172290][T26776] comedi comedi3: pcl724: I/O port conflict (0x4f27,4) [ 1052.199345][ T9] usb 2-1: SerialNumber: syz [ 1052.205241][ T9] usb 2-1: config 0 descriptor?? [ 1052.243670][ T9] smsc95xx v2.0.0 [ 1052.258214][ T30] audit: type=1400 audit(1756208902.657:3192): avc: denied { ioctl } for pid=26775 comm="syz.3.6044" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=93411 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1052.292538][ T30] audit: type=1400 audit(1756208902.676:3193): avc: denied { getopt } for pid=26775 comm="syz.3.6044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1052.371396][ T30] audit: type=1400 audit(1756208902.797:3194): avc: denied { shutdown } for pid=26778 comm="syz.3.6046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1052.466384][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1052.601031][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1052.625479][ T5892] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1052.683328][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1052.704293][ T30] audit: type=1400 audit(1756208902.797:3195): avc: denied { getopt } for pid=26778 comm="syz.3.6046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1052.764503][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1052.780819][ T9] usb 2-1: USB disconnect, device number 107 [ 1052.839422][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 1052.846052][ T5892] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1052.856983][ T5892] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1052.903458][ T5892] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1052.913410][ T5892] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1052.926630][ T5892] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1052.939957][ T5892] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1052.953784][T26794] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1052.974365][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.044461][T26796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1053.066045][ T30] audit: type=1400 audit(1756208903.499:3196): avc: denied { read } for pid=26795 comm="syz.1.6051" path="socket:[92866]" dev="sockfs" ino=92866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1053.485281][T26807] netlink: 'syz.4.6054': attribute type 10 has an invalid length. [ 1053.928668][ T5892] usb 4-1: usb_control_msg returned -71 [ 1054.621003][ T5892] usbtmc 4-1:16.0: can't read capabilities [ 1054.630650][ T5892] usb 4-1: USB disconnect, device number 51 [ 1055.381186][ T30] audit: type=1400 audit(1756208905.660:3197): avc: denied { bind } for pid=26829 comm="syz.1.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1055.527404][ T30] audit: type=1400 audit(1756208905.660:3198): avc: denied { write } for pid=26829 comm="syz.1.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1055.603390][T26832] syz.3.6059: attempt to access beyond end of device [ 1055.603390][T26832] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1055.618796][ T30] audit: type=1400 audit(1756208905.865:3199): avc: denied { mount } for pid=26825 comm="syz.3.6059" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1055.644188][ T30] audit: type=1400 audit(1756208905.875:3200): avc: denied { search } for pid=26825 comm="syz.3.6059" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1055.728411][ T30] audit: type=1400 audit(1756208905.875:3201): avc: denied { search } for pid=26825 comm="syz.3.6059" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1055.750575][ C1] vkms_vblank_simulate: vblank timer overrun [ 1056.511735][ T30] audit: type=1400 audit(1756208905.912:3202): avc: denied { search } for pid=26825 comm="syz.3.6059" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1056.574929][ T30] audit: type=1400 audit(1756208906.006:3203): avc: denied { write } for pid=26834 comm="syz.4.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1056.594975][ T30] audit: type=1400 audit(1756208906.707:3204): avc: denied { bind } for pid=26846 comm="syz.5.6063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1056.962166][T26856] lo speed is unknown, defaulting to 1000 [ 1057.036324][ T30] audit: type=1400 audit(1756208907.212:3205): avc: denied { mount } for pid=26853 comm="syz.4.6065" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1057.790436][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1057.814261][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1057.824956][ T30] audit: type=1400 audit(1756208907.942:3206): avc: denied { name_bind } for pid=26859 comm="syz.3.6069" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1057.851846][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1057.917587][T26871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=26871 comm=syz.5.6068 [ 1058.135826][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1058.145365][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1058.155782][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1058.164105][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1058.174010][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1058.184050][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1058.193477][T26863] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1059.550808][T26884] tipc: Started in network mode [ 1059.566580][T26884] tipc: Node identity 267f0b225467, cluster identity 4711 [ 1059.627949][T26884] tipc: Enabled bearer , priority 0 [ 1059.674230][T26893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6076'. [ 1060.055689][ T974] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1060.227606][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 1060.236829][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1060.271602][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1060.652196][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1060.691305][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1060.728313][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1060.752658][ T974] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1060.762059][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.789178][ T974] usb 4-1: Product: syz [ 1060.795052][T26896] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1060.815468][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1060.815490][ T30] audit: type=1326 audit(1756208910.730:3242): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ad2f2add9 code=0x7ffc0000 [ 1060.825444][ T9] tipc: Node number set to 1914178338 [ 1060.865995][ T974] usb 4-1: Manufacturer: syz [ 1060.872890][ T974] usb 4-1: SerialNumber: syz [ 1060.881694][ T30] audit: type=1326 audit(1756208910.730:3243): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad2f8ebe9 code=0x7ffc0000 [ 1060.882060][T26910] bond_slave_0: left promiscuous mode [ 1060.913390][ T30] audit: type=1326 audit(1756208910.730:3244): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26885 comm="syz.4.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad2f8ebe9 code=0x7ffc0000 [ 1060.968974][ T974] usb 4-1: config 0 descriptor?? [ 1061.027712][T26910] bond_slave_1: left promiscuous mode [ 1061.044708][T26910] mac80211_hwsim hwsim23 wlan1: left promiscuous mode [ 1061.063078][T26910] bridge0: left promiscuous mode [ 1061.086662][T26910] bond_slave_0: entered promiscuous mode [ 1061.092416][T26910] bond_slave_1: entered promiscuous mode [ 1061.098063][T26910] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 1061.105135][T26910] bridge0: entered promiscuous mode [ 1061.243874][ T30] audit: type=1326 audit(1756208911.104:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26913 comm="syz.5.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716518ebe9 code=0x7ffc0000 [ 1061.289730][ T30] audit: type=1326 audit(1756208911.179:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26913 comm="syz.5.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f716518ebe9 code=0x7ffc0000 [ 1061.315097][T26910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.330874][T26920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6082'. [ 1061.362333][T26910] team0: Port device bond0 added [ 1061.384136][T26920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26920 comm=syz.2.6082 [ 1061.400822][T26920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26920 comm=syz.2.6082 [ 1061.425355][ T30] audit: type=1326 audit(1756208911.179:3247): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26913 comm="syz.5.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716518ebe9 code=0x7ffc0000 [ 1061.450934][ T30] audit: type=1326 audit(1756208911.179:3248): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26913 comm="syz.5.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716518ebe9 code=0x7ffc0000 [ 1061.478439][ T30] audit: type=1326 audit(1756208911.253:3249): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26913 comm="syz.5.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f716518ebe9 code=0x7ffc0000 [ 1061.512521][ T974] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1061.518607][ T974] input input84: Device does not respond to id packet M [ 1061.540834][ T974] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1061.548601][ T974] input input84: Device does not respond to id packet P [ 1061.561149][ T30] audit: type=1326 audit(1756208911.253:3250): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26913 comm="syz.5.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716518ebe9 code=0x7ffc0000 [ 1061.586575][ T974] input input84: Device does not respond to id packet B [ 1061.598022][ T30] audit: type=1326 audit(1756208911.253:3251): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26913 comm="syz.5.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716518ebe9 code=0x7ffc0000 [ 1061.803683][ T974] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1061.812544][ T974] input input84: Device does not respond to id packet N [ 1061.823785][ T974] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1061.833798][ T974] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1061.840144][ T974] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1061.847218][ T974] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1061.868162][ T974] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input84 [ 1061.884809][T26879] tipc: Disabling bearer [ 1061.899946][ T974] usb 4-1: USB disconnect, device number 52 [ 1062.439513][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1062.601498][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.617747][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1062.628730][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.640647][ T9] usb 2-1: config 0 descriptor?? [ 1062.766391][T26944] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1062.772941][T26944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1062.780942][T26944] vhci_hcd vhci_hcd.0: Device attached [ 1062.902681][ T9] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 1062.913598][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0024/input/input85 [ 1062.994033][ T9] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1063.016718][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 1063.084152][ T974] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 1063.465126][T22919] usb 2-1: USB disconnect, device number 108 [ 1063.578737][T26954] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1063.700190][T26962] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1063.706837][T26962] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1063.725325][T26962] vhci_hcd vhci_hcd.0: Device attached [ 1063.735450][T26962] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 1063.742087][T26962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1063.751832][T26962] vhci_hcd vhci_hcd.0: Device attached [ 1063.760190][T26962] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 1063.766824][T26962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1063.774704][T26962] vhci_hcd vhci_hcd.0: Device attached [ 1063.841905][T26962] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 1063.848557][T26962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1063.858532][T26962] vhci_hcd vhci_hcd.0: Device attached [ 1063.868549][T26962] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 1063.871967][T22919] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1063.875175][T26962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1063.878493][T26962] vhci_hcd vhci_hcd.0: Device attached [ 1063.905073][T26962] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(22) [ 1063.911680][T26962] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1063.921274][ T9] vhci_hcd: vhci_device speed not set [ 1063.927135][T26962] vhci_hcd vhci_hcd.0: Device attached [ 1063.934112][T26962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1063.947015][T26962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1063.976154][T26981] vhci_hcd: connection closed [ 1063.976287][T26979] vhci_hcd: connection closed [ 1063.976479][T26970] vhci_hcd: connection closed [ 1063.981468][T26976] vhci_hcd: connection closed [ 1063.989267][T26963] vhci_hcd: connection closed [ 1063.990870][T26967] vhci_hcd: connection closed [ 1063.995526][ T9] usb 41-1: new full-speed USB device number 7 using vhci_hcd [ 1064.021760][ T1898] vhci_hcd: stop threads [ 1064.026116][ T1898] vhci_hcd: release socket [ 1064.030579][ T1898] vhci_hcd: disconnect device [ 1064.037474][ T1898] vhci_hcd: stop threads [ 1064.041735][ T1898] vhci_hcd: release socket [ 1064.047460][ T1898] vhci_hcd: disconnect device [ 1064.054132][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1064.063837][T22919] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1064.073413][T26964] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1064.075408][ T1898] vhci_hcd: stop threads [ 1064.083839][ T1898] vhci_hcd: release socket [ 1064.089120][T22919] usb 2-1: config 0 has no interface number 0 [ 1064.095350][T22919] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.112682][ T1898] vhci_hcd: disconnect device [ 1064.117598][ T1898] vhci_hcd: stop threads [ 1064.203770][ T1898] vhci_hcd: release socket [ 1064.208589][ T1898] vhci_hcd: disconnect device [ 1064.214703][ T1898] vhci_hcd: stop threads [ 1064.227812][T26945] vhci_hcd: connection reset by peer [ 1064.233699][ T1898] vhci_hcd: release socket [ 1064.238658][ T1898] vhci_hcd: disconnect device [ 1064.243473][ T1898] vhci_hcd: stop threads [ 1064.248237][ T1898] vhci_hcd: release socket [ 1064.252744][ T1898] vhci_hcd: disconnect device [ 1064.326490][T26989] ip6erspan0: entered promiscuous mode [ 1064.336276][ T1898] vhci_hcd: stop threads [ 1064.340544][ T1898] vhci_hcd: release socket [ 1064.346692][ T1898] vhci_hcd: disconnect device [ 1064.470891][ T5892] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1064.500357][T22919] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.512548][T22919] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.526216][T22919] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1064.543099][T22919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.553448][T22919] usb 2-1: config 0 descriptor?? [ 1064.631007][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 1064.638042][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1064.648854][ T5892] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 1064.657148][ T10] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1064.666089][ T5892] usb 3-1: config 8 has no interface number 0 [ 1064.672415][ T5892] usb 3-1: config 8 interface 255 has no altsetting 0 [ 1064.686199][ T5892] usb 3-1: string descriptor 0 read error: -22 [ 1064.692459][ T5892] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1064.701736][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.753629][T26997] pimreg: entered allmulticast mode [ 1064.759286][T26997] pimreg: left allmulticast mode [ 1064.838981][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.849323][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1064.859022][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1064.872077][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.881294][ T10] usb 4-1: config 0 descriptor?? [ 1064.888191][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1064.894826][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1064.903162][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1064.912160][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1064.919222][ T10] usb 4-1: media controller created [ 1064.925627][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1064.946789][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1064.953327][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1064.962013][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input86 [ 1064.977585][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1064.984631][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1065.075851][T27008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6105'. [ 1065.156332][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1065.163547][ T10] dvb-usb: error while querying for an remote control event. [ 1065.250679][T27011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6107'. [ 1065.259953][T27011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6107'. [ 1065.264484][T22919] uclogic 0003:28BD:0042.0025: failed retrieving string descriptor #100: -71 [ 1065.338645][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1065.340441][T22919] uclogic 0003:28BD:0042.0025: failed retrieving pen parameters: -71 [ 1065.355711][T22919] uclogic 0003:28BD:0042.0025: pen probing failed: -71 [ 1065.366781][T22919] uclogic 0003:28BD:0042.0025: failed probing parameters: -71 [ 1065.499615][ T10] dvb-usb: error while querying for an remote control event. [ 1065.515014][T26990] dvb-usb: bulk message failed: -22 (2/0) [ 1065.515473][T22919] uclogic 0003:28BD:0042.0025: probe with driver uclogic failed with error -71 [ 1065.560763][T22919] usb 2-1: USB disconnect, device number 109 [ 1065.603869][T13569] usb 4-1: USB disconnect, device number 53 [ 1065.617051][T13569] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1065.644116][T27016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6109'. [ 1065.975635][T27018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.985612][T27018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.136988][ T5892] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 1066.231095][T27029] mac80211_hwsim hwsim20 »»»»»»: renamed from wlan0 [ 1066.489331][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 1066.489348][ T30] audit: type=1326 audit(1756208916.052:3366): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27026 comm="syz.1.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4da1d8ebe9 code=0x7ffc0000 [ 1066.612303][T27021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1066.618534][ T30] audit: type=1326 audit(1756208916.174:3367): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27019 comm="syz.1.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4da1d2add9 code=0x7ffc0000 [ 1066.642913][ T30] audit: type=1326 audit(1756208916.202:3368): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27019 comm="syz.1.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da1d8ebe9 code=0x7ffc0000 [ 1066.668417][ T30] audit: type=1326 audit(1756208916.202:3369): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27019 comm="syz.1.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da1d8ebe9 code=0x7ffc0000 [ 1067.102846][T27035] validate_nla: 41 callbacks suppressed [ 1067.102863][T27035] netlink: 'syz.4.6114': attribute type 1 has an invalid length. [ 1067.132782][ T5892] usb 3-1: USB disconnect, device number 14 [ 1067.151664][T27035] smc: adding net device bond0 with user defined pnetid SYZ2 [ 1067.242025][T27035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6114'. [ 1067.243373][T27040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6115'. [ 1067.481732][T27035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.606735][ T30] audit: type=1400 audit(1756208917.100:3370): avc: denied { append } for pid=27046 comm="syz.2.6118" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1067.607203][T27047] loop6: detected capacity change from 0 to 524287999 [ 1067.886224][ T30] audit: type=1400 audit(1756208917.362:3371): avc: denied { write } for pid=27051 comm="syz.4.6119" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1067.911429][ T30] audit: type=1400 audit(1756208917.362:3372): avc: denied { create } for pid=27046 comm="syz.2.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1067.934000][ T30] audit: type=1400 audit(1756208917.362:3373): avc: denied { write } for pid=27046 comm="syz.2.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1068.591853][T27058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.602760][T27058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.618643][ T974] vhci_hcd: vhci_device speed not set [ 1068.661733][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 1068.872558][T27067] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 1068.887044][ T30] audit: type=1400 audit(1756208918.297:3374): avc: denied { ioctl } for pid=27063 comm="syz.2.6123" path="socket:[94120]" dev="sockfs" ino=94120 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1069.095635][T27072] Invalid source name [ 1069.102033][T27072] UBIFS error (pid: 27072): cannot open "/dev/sg0", error -22 [ 1069.125023][ T30] audit: type=1326 audit(1756208918.521:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27071 comm="syz.1.6124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4da1d8ebe9 code=0x0 [ 1069.165383][T13569] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1069.242546][T27075] Invalid logical block size (16777216) [ 1069.366517][T13569] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.562429][T13569] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1069.569824][T13569] usb 3-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 1069.579338][T13569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.588486][T13569] usb 3-1: config 0 descriptor?? [ 1069.682683][ T9] vhci_hcd: vhci_device speed not set [ 1069.778815][T27084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6128'. [ 1069.988619][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1070.078607][T13569] wacom 0003:056A:0309.0026: item fetching failed at offset 2/3 [ 1070.104912][T13569] wacom 0003:056A:0309.0026: parse failed [ 1070.129335][T13569] wacom 0003:056A:0309.0026: probe with driver wacom failed with error -22 [ 1070.138323][ T10] usb 4-1: device descriptor read/64, error -71 [ 1070.642854][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1070.662777][T13569] usb 3-1: USB disconnect, device number 15 [ 1070.788823][ T10] usb 4-1: device descriptor read/64, error -71 [ 1070.908381][ T10] usb usb4-port1: attempt power cycle [ 1071.091599][T27101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.099105][T27101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.108887][T27101] bridge0: entered allmulticast mode [ 1071.537238][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1071.570201][ T10] usb 4-1: device descriptor read/8, error -71 [ 1071.838475][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1072.066814][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1072.066834][ T30] audit: type=1400 audit(1756208921.272:3378): avc: denied { write } for pid=27123 comm="syz.5.6138" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1072.103706][ T10] usb 4-1: device descriptor read/8, error -71 [ 1072.106994][T27124] syzkaller1: entered promiscuous mode [ 1072.117416][T27124] syzkaller1: entered allmulticast mode [ 1072.169484][T27126] netlink: 'syz.1.6139': attribute type 10 has an invalid length. [ 1072.181910][T27126] bridge0: left allmulticast mode [ 1072.222517][ T10] usb usb4-port1: unable to enumerate USB device [ 1072.538915][T27137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.549495][T27137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.811039][T27161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6148'. [ 1073.829239][T27161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6148'. [ 1074.257961][ T30] audit: type=1400 audit(1756208923.311:3379): avc: denied { ioctl } for pid=27150 comm="syz.3.6146" path="socket:[95298]" dev="sockfs" ino=95298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1074.801918][ T30] audit: type=1400 audit(1756208923.816:3380): avc: denied { mount } for pid=27171 comm="syz.1.6153" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1075.064119][ T30] audit: type=1400 audit(1756208923.816:3381): avc: denied { write } for pid=27171 comm="syz.1.6153" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1075.231879][ T30] audit: type=1400 audit(1756208923.816:3382): avc: denied { open } for pid=27171 comm="syz.1.6153" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1075.289503][ T30] audit: type=1400 audit(1756208923.825:3383): avc: denied { read append } for pid=27171 comm="syz.1.6153" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1075.367468][ T30] audit: type=1400 audit(1756208924.349:3384): avc: denied { unmount } for pid=16065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1075.705872][T27181] can: request_module (can-proto-0) failed. [ 1075.882720][T27189] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6158'. [ 1075.968772][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6159'. [ 1076.303933][ T30] audit: type=1400 audit(1756208925.228:3385): avc: denied { remount } for pid=27194 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1076.454263][ T30] audit: type=1400 audit(1756208925.369:3386): avc: denied { ioctl } for pid=27200 comm="syz.3.6163" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1076.505460][T27203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6164'. [ 1076.581439][T27203] bridge_slave_1: left allmulticast mode [ 1076.587382][T21597] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 1076.598942][T27203] bridge_slave_1: left promiscuous mode [ 1076.606209][T27203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.916310][T21597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1076.983892][T21597] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 1076.996767][T21597] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1077.066204][T21597] usb 3-1: config 9 has an invalid descriptor of length 119, skipping remainder of the config [ 1077.089803][T21597] usb 3-1: config 9 has no interface number 0 [ 1077.106610][T21597] usb 3-1: config 9 interface 129 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1077.123584][T21597] usb 3-1: config 9 interface 129 has no altsetting 0 [ 1077.909123][T27172] Set syz1 is full, maxelem 65536 reached [ 1078.262474][T27233] tipc: Enabling of bearer rejected, already enabled [ 1078.373112][T27236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6172'. [ 1078.835496][T27248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.847214][T27248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.873178][ T30] audit: type=1400 audit(1756208927.642:3387): avc: denied { create } for pid=27247 comm="syz.5.6177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1079.304647][ T30] audit: type=1400 audit(1756208928.044:3388): avc: denied { create } for pid=27253 comm="syz.1.6180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1079.324135][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.331719][ T30] audit: type=1400 audit(1756208928.044:3389): avc: denied { ioctl } for pid=27253 comm="syz.1.6180" path="socket:[94791]" dev="sockfs" ino=94791 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1079.358467][ T30] audit: type=1400 audit(1756208928.044:3390): avc: denied { create } for pid=27253 comm="syz.1.6180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1079.378013][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.385517][ T30] audit: type=1400 audit(1756208928.044:3391): avc: denied { ioctl } for pid=27253 comm="syz.1.6180" path="socket:[94792]" dev="sockfs" ino=94792 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1079.411655][ T30] audit: type=1400 audit(1756208928.119:3392): avc: denied { setopt } for pid=27253 comm="syz.1.6180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1079.432184][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.548909][T21597] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a88, bcdDevice= d.5e [ 1079.559078][T21597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.601041][T21597] usb 3-1: can't set config #9, error -71 [ 1079.631517][T21597] usb 3-1: USB disconnect, device number 16 [ 1080.129724][T27259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6181'. [ 1080.471456][ T30] audit: type=1400 audit(1756208929.129:3393): avc: denied { read } for pid=27265 comm="syz.1.6184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1080.542841][T27268] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1080.589094][T27268] kvm: Disabled LAPIC found during irq injection [ 1080.654079][T27277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.665422][T27277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.709388][T27277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.806275][T27277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.916197][T27281] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1081.396958][T27281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.441683][T27281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.906536][ T30] audit: type=1326 audit(1756208930.392:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27296 comm="syz.2.6193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158a18ebe9 code=0x0 [ 1082.662925][ T30] audit: type=1400 audit(1756208931.177:3395): avc: denied { write } for pid=27307 comm="syz.1.6194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1082.792151][T27312] can: request_module (can-proto-0) failed. [ 1083.020884][T21597] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1083.055308][T27322] netlink: 'syz.2.6198': attribute type 10 has an invalid length. [ 1083.666398][T27322] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1083.682427][T27324] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6199'. [ 1083.778670][T21597] usb 2-1: Using ep0 maxpacket: 8 [ 1083.785457][T21597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.798982][T21597] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1083.808726][T21597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.822404][ T30] audit: type=1400 audit(1756209188.272:3396): avc: denied { name_bind } for pid=27325 comm="syz.3.6200" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1083.844084][T21597] usb 2-1: Product: syz [ 1083.848272][T21597] usb 2-1: Manufacturer: syz [ 1083.854638][T21597] usb 2-1: SerialNumber: syz [ 1083.861660][T21597] usb 2-1: config 0 descriptor?? [ 1083.868170][T21597] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1084.023955][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1084.216244][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1084.267203][T27334] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6203'. [ 1084.312558][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1084.319450][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.332238][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1084.345449][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.354649][ T10] usb 3-1: config 0 descriptor?? [ 1084.378616][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1084.385833][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1084.395185][ T9] usb 4-1: config 1 has an invalid interface number: 252 but max is 0 [ 1084.406087][ T9] usb 4-1: config 1 has no interface number 0 [ 1084.413712][ T9] usb 4-1: config 1 interface 252 has no altsetting 0 [ 1084.422695][ T9] usb 4-1: New USB device found, idVendor=0bdb, idProduct=0987, bcdDevice=92.49 [ 1084.433822][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.441952][ T9] usb 4-1: Product: syz [ 1084.442748][T27344] can: request_module (can-proto-0) failed. [ 1084.446245][ T9] usb 4-1: Manufacturer: syz [ 1084.457328][ T9] usb 4-1: SerialNumber: syz [ 1084.606794][T27348] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6208'. [ 1084.957316][ T30] audit: type=1400 audit(1756209189.329:3397): avc: denied { setopt } for pid=27353 comm="syz.4.6210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1084.983256][ T30] audit: type=1400 audit(1756209189.329:3398): avc: denied { read } for pid=27353 comm="syz.4.6210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1085.037200][ T30] audit: type=1400 audit(1756209189.385:3399): avc: denied { map } for pid=27327 comm="syz.2.6201" path="socket:[94999]" dev="sockfs" ino=94999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1085.063821][ T30] audit: type=1400 audit(1756209189.385:3400): avc: denied { read } for pid=27327 comm="syz.2.6201" path="socket:[94999]" dev="sockfs" ino=94999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1085.820051][ T974] usb 2-1: USB disconnect, device number 110 [ 1086.275892][ T30] audit: type=1400 audit(1756209190.564:3401): avc: denied { create } for pid=27366 comm="syz.4.6214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1086.836153][T27377] netlink: 'syz.4.6215': attribute type 10 has an invalid length. [ 1087.679426][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1087.691293][ T9] usb 4-1: USB disconnect, device number 58 [ 1087.698004][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1087.733035][ T10] usb 3-1: USB disconnect, device number 17 [ 1087.877298][ T30] audit: type=1400 audit(1756209192.051:3402): avc: denied { accept } for pid=27384 comm="syz.4.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1088.387079][T27405] kAFS: No cell specified [ 1088.499500][ T30] audit: type=1400 audit(1756209192.640:3403): avc: denied { nlmsg_read } for pid=27406 comm="syz.2.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1088.823869][T13569] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1089.004860][T13569] usb 3-1: Using ep0 maxpacket: 32 [ 1089.027879][T13569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.059073][T13569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.073036][T13569] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1089.082448][T13569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.092493][T13569] usb 3-1: config 0 descriptor?? [ 1089.475145][T27428] netlink: 'syz.4.6230': attribute type 10 has an invalid length. [ 1089.483200][ T30] audit: type=1400 audit(1756209193.557:3404): avc: denied { link } for pid=27425 comm="syz.1.6231" name="#47" dev="tmpfs" ino=3154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1089.555251][T13569] ft260 0003:0403:6030.0027: unknown main item tag 0x7 [ 1089.563552][ T30] audit: type=1400 audit(1756209193.557:3405): avc: denied { rename } for pid=27425 comm="syz.1.6231" name="#48" dev="tmpfs" ino=3154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1089.842350][T13569] ft260 0003:0403:6030.0027: chip code: 0000 0000 [ 1090.063436][T13569] ft260 0003:0403:6030.0027: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1090.094006][T27439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.104314][T27439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.494672][T13569] ft260 0003:0403:6030.0027: failed to retrieve status: -71 [ 1090.503122][T13569] ft260 0003:0403:6030.0027: failed to reset I2C controller: -71 [ 1090.554349][T13569] usb 3-1: USB disconnect, device number 18 [ 1090.635472][ T30] audit: type=1400 audit(1756209194.623:3406): avc: denied { ioctl } for pid=27453 comm="syz.3.6239" path="socket:[96270]" dev="sockfs" ino=96270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1090.660353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.866084][ T974] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1091.034072][T27460] tmpfs: Unknown parameter 'grpqœ€>ˆ_block_¬ºrdlimit' [ 1091.042095][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 1091.066309][ T974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.108784][ T974] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1091.124241][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.146788][ T974] usb 2-1: config 0 descriptor?? [ 1091.263861][ T974] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1091.791673][T27460] netlink: 'syz.5.6242': attribute type 10 has an invalid length. [ 1091.799604][T27460] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6242'. [ 1091.808701][T27460] dummy0: entered promiscuous mode [ 1091.814193][T27460] bridge0: port 2(dummy0) entered blocking state [ 1091.820599][T27460] bridge0: port 2(dummy0) entered disabled state [ 1091.827188][T27460] dummy0: entered allmulticast mode [ 1091.833089][T27460] bridge0: port 2(dummy0) entered blocking state [ 1091.839525][T27460] bridge0: port 2(dummy0) entered forwarding state [ 1092.394891][T27457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.404525][T27457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.763552][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1092.774140][ T974] gspca_vc032x: reg_r err -110 [ 1092.781282][ T974] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1092.811009][T27487] input: syz0 as /devices/virtual/input/input88 [ 1093.034183][ T10] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1093.095321][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.233968][ T10] usb 4-1: Product: syz [ 1093.244750][ T10] usb 4-1: Manufacturer: syz [ 1093.264792][ T10] usb 4-1: SerialNumber: syz [ 1093.271330][ T10] usb 4-1: config 0 descriptor?? [ 1093.289586][ T5845] Bluetooth: hci5: urb ffff88814cc26f00 submission failed (2) [ 1093.569291][ T974] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1093.637971][T27506] comedi comedi3: pcl724: I/O port conflict (0x4f27,4) [ 1093.675757][ T30] audit: type=1400 audit(1756209197.486:3407): avc: denied { bind } for pid=27510 comm="syz.4.6254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1093.695519][ T30] audit: type=1400 audit(1756209197.486:3408): avc: denied { listen } for pid=27510 comm="syz.4.6254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1093.817537][ T974] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1093.833354][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.844579][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1093.858474][ T974] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1093.867894][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.882269][ T10] usb 2-1: USB disconnect, device number 111 [ 1093.900926][ T974] usb 3-1: config 0 descriptor?? [ 1093.913040][ T974] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1093.928566][ T30] audit: type=1400 audit(1756209197.720:3409): avc: denied { write } for pid=27516 comm="syz.1.6255" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1093.960749][T27517] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1093.973567][T27517] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1093.974285][ T974] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1094.709596][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1095.096702][T27528] netlink: 'syz.4.6258': attribute type 1 has an invalid length. [ 1095.111468][T27528] nbd: error processing sock list [ 1095.116825][T27528] block nbd0: shutting down sockets [ 1095.291499][ T10] usb 4-1: USB disconnect, device number 59 [ 1095.338975][T27538] pim6reg: entered allmulticast mode [ 1095.344522][ T30] audit: type=1400 audit(1756209199.029:3410): avc: denied { getopt } for pid=27534 comm="syz.4.6260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1095.577481][T16068] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1095.586256][T16068] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1095.596158][T16068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1095.605105][T16068] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1095.617527][T16068] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1095.627930][ T30] audit: type=1400 audit(1756209199.310:3411): avc: denied { mounton } for pid=27544 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1095.664178][T27544] lo speed is unknown, defaulting to 1000 [ 1095.710009][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1095.767210][T27544] chnl_net:caif_netlink_parms(): no params data found [ 1095.791136][ T7733] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.803498][ T7733] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.853003][T27544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.860449][T27544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.867647][T27544] bridge_slave_0: entered allmulticast mode [ 1095.874455][T27544] bridge_slave_0: entered promiscuous mode [ 1095.881877][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.882717][T27544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.899944][T27544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.909843][T27544] bridge_slave_1: entered allmulticast mode [ 1095.918309][T27544] bridge_slave_1: entered promiscuous mode [ 1095.919450][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.936698][ T7733] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.947417][ T7733] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.957330][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1095.972228][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1095.981622][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.991120][ T10] usb 4-1: config 0 descriptor?? [ 1095.999614][T27544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.012968][T27544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.032007][ T7733] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.042008][ T7733] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.060748][T27534] pim6reg: left allmulticast mode [ 1096.073608][T27544] team0: Port device team_slave_0 added [ 1096.080699][T27544] team0: Port device team_slave_1 added [ 1096.097768][ T7733] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.107827][ T7733] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.131471][T27544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.140233][T27544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.166151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1096.173722][T27544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.259632][T27544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.266698][T27544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.292618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1096.299175][T27544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.713274][ T974] usb 3-1: USB disconnect, device number 19 [ 1096.785205][T27544] hsr_slave_0: entered promiscuous mode [ 1096.794991][T27544] hsr_slave_1: entered promiscuous mode [ 1096.810318][T27544] debugfs: 'hsr0' already exists in 'hsr' [ 1096.816142][T27544] Cannot create hsr debugfs directory [ 1097.084171][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1097.091973][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1097.101773][ T10] usb 4-1: USB disconnect, device number 60 [ 1097.194604][ T30] audit: type=1400 audit(1756209200.750:3412): avc: denied { getopt } for pid=27572 comm="syz.2.6271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1097.221168][ T7733] bridge_slave_0: left allmulticast mode [ 1097.227432][ T7733] bridge_slave_0: left promiscuous mode [ 1097.233136][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.242456][ T30] audit: type=1400 audit(1756209200.825:3413): avc: denied { create } for pid=27572 comm="syz.2.6271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1097.841628][T16068] Bluetooth: hci5: command tx timeout [ 1098.140713][ T7733] bond_slave_0: left promiscuous mode [ 1098.161196][ T7733] bond_slave_1: left promiscuous mode [ 1098.166687][ T7733] mac80211_hwsim hwsim23 wlan1: left promiscuous mode [ 1098.191965][ T30] audit: type=1400 audit(1756209201.704:3414): avc: denied { ioctl } for pid=27587 comm="syz.2.6275" path="socket:[96668]" dev="sockfs" ino=96668 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1098.322380][ T7733] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1098.337217][ T7733] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1098.791486][ T7733] team0: Port device bond0 removed [ 1098.797848][ T7733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.807610][ T7733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.817328][ T7733] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1098.828808][ T7733] ------------[ cut here ]------------ [ 1098.834322][ T7733] WARNING: CPU: 1 PID: 7733 at net/mac80211/tx.c:6202 ieee80211_tx_skb_tid+0x3ef/0x4f0 [ 1098.843980][ T7733] Modules linked in: [ 1098.847863][ T7733] CPU: 1 UID: 0 PID: 7733 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1098.857402][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1098.867485][ T7733] Workqueue: netns cleanup_net [ 1098.872259][ T7733] RIP: 0010:ieee80211_tx_skb_tid+0x3ef/0x4f0 [ 1098.878241][ T7733] Code: c7 c0 24 09 8d c6 05 75 23 80 05 01 e8 8a 0e 84 f6 e9 2d fd ff ff e8 a0 29 a8 f6 90 0f 0b 90 e9 d7 fc ff ff e8 92 29 a8 f6 90 <0f> 0b 90 e8 a9 29 80 00 31 ff 89 c3 89 c6 e8 be 24 a8 f6 85 db 75 [ 1098.897903][ T7733] RSP: 0018:ffffc9000495ef88 EFLAGS: 00010293 [ 1098.903959][ T7733] RAX: 0000000000000000 RBX: ffff888034250d80 RCX: ffffffff8b1364bf [ 1098.911933][ T7733] RDX: ffff8880343b2440 RSI: ffffffff8b1367ae RDI: 0000000000000005 [ 1098.919903][ T7733] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1098.927915][ T7733] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1098.935898][ T7733] R13: ffff8880287508c0 R14: 0000000000000007 R15: 0000000000000000 [ 1098.943872][ T7733] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 1098.952799][ T7733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1098.959390][ T7733] CR2: 00007f3ad3e18d58 CR3: 000000000e380000 CR4: 00000000003526f0 [ 1098.967367][ T7733] DR0: 0000000000000046 DR1: 0000000000008aca DR2: 00000000000000d0 [ 1098.975337][ T7733] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1098.983314][ T7733] Call Trace: [ 1098.986596][ T7733] [ 1098.989518][ T7733] mesh_plink_frame_tx.isra.0+0x8a5/0xc60 [ 1098.995255][ T7733] ? __pfx_mesh_plink_frame_tx.isra.0+0x10/0x10 [ 1099.001511][ T7733] ? mesh_path_sel_frame_tx.isra.0+0xbe0/0xd00 [ 1099.007679][ T7733] mesh_plink_deactivate+0x271/0x340 [ 1099.012981][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.017738][ T7733] mesh_sta_cleanup+0x35/0x70 [ 1099.022409][ T7733] __cleanup_single_sta+0x5c0/0x730 [ 1099.027633][ T7733] __sta_info_destroy_part2+0x389/0x540 [ 1099.033176][ T7733] __sta_info_flush+0x521/0x740 [ 1099.038021][ T7733] ? __pfx___sta_info_flush+0x10/0x10 [ 1099.043373][ T7733] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1099.048657][ T7733] ? ieee80211_roc_purge+0x6b/0x4a0 [ 1099.053848][ T7733] ieee80211_do_stop+0x269/0x2520 [ 1099.058872][ T7733] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1099.064757][ T7733] ? __mutex_lock+0x1c5/0x1060 [ 1099.069507][ T7733] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1099.074958][ T7733] ? do_raw_spin_lock+0x12c/0x2b0 [ 1099.079980][ T7733] ? ieee80211_stop+0x116/0x320 [ 1099.084830][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.089590][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.094342][ T7733] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1099.100333][ T7733] ? __pfx_ieee80211_stop+0x10/0x10 [ 1099.105538][ T7733] ieee80211_stop+0x169/0x320 [ 1099.110218][ T7733] ? __pfx_ieee80211_stop+0x10/0x10 [ 1099.115418][ T7733] __dev_close_many+0x29b/0x760 [ 1099.120283][ T7733] ? __pfx___dev_close_many+0x10/0x10 [ 1099.125659][ T7733] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 1099.131388][ T7733] netif_close_many+0x233/0x630 [ 1099.136230][ T7733] ? netdev_change_features+0x81/0xb0 [ 1099.141614][ T7733] ? __pfx_netdev_change_features+0x10/0x10 [ 1099.147508][ T7733] ? ndisc_netdev_event+0xa1/0x560 [ 1099.152641][ T7733] ? __pfx_netif_close_many+0x10/0x10 [ 1099.158004][ T7733] ? netif_set_tso_max_size+0xd1/0x180 [ 1099.163462][ T7733] ? netif_set_tso_max_segs+0x7f/0xb0 [ 1099.168836][ T7733] ? bond_compute_features+0x549/0x8d0 [ 1099.174293][ T7733] netif_close+0x17f/0x230 [ 1099.178699][ T7733] ? __pfx_netif_close+0x10/0x10 [ 1099.183641][ T7733] ? mutex_is_locked+0x17/0x60 [ 1099.188394][ T7733] ? rtnl_is_locked+0x15/0x20 [ 1099.193064][ T7733] dev_close+0xaa/0x240 [ 1099.197212][ T7733] __bond_release_one+0xb08/0x1a00 [ 1099.202317][ T7733] ? __pfx___bond_release_one+0x10/0x10 [ 1099.207869][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.212636][ T7733] ? ib_device_get_by_netdev+0x1b8/0x520 [ 1099.218262][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.223029][ T7733] ? __pfx_bond_netpoll_cleanup+0x10/0x10 [ 1099.228777][ T7733] ? udp_tunnel_nic_netdevice_event+0x158/0x1fa0 [ 1099.235107][ T7733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1099.240997][ T7733] bond_uninit+0x124/0x320 [ 1099.245400][ T7733] ? __pfx_bond_uninit+0x10/0x10 [ 1099.250338][ T7733] ? unregister_netdevice_many_notify+0x1039/0x24c0 [ 1099.256929][ T7733] ? __pfx_bond_uninit+0x10/0x10 [ 1099.261893][ T7733] unregister_netdevice_many_notify+0x1419/0x24c0 [ 1099.268318][ T7733] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1099.275174][ T7733] ? bond_net_exit_rtnl+0xff/0x3a0 [ 1099.280283][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.285033][ T7733] ? __pfx___might_resched+0x10/0x10 [ 1099.290333][ T7733] ops_undo_list+0x8fc/0xab0 [ 1099.294935][ T7733] ? __pfx_ops_undo_list+0x10/0x10 [ 1099.300039][ T7733] ? cleanup_net+0x334/0x890 [ 1099.304625][ T7733] ? lock_release+0x201/0x2f0 [ 1099.309289][ T7733] ? idr_destroy+0x62/0x2e0 [ 1099.313808][ T7733] cleanup_net+0x408/0x890 [ 1099.318232][ T7733] ? __pfx_cleanup_net+0x10/0x10 [ 1099.323172][ T7733] ? lock_acquire+0x2cd/0x350 [ 1099.327840][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.332598][ T7733] process_one_work+0x9cf/0x1b70 [ 1099.337567][ T7733] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1099.342957][ T7733] ? __pfx_process_one_work+0x10/0x10 [ 1099.348336][ T7733] ? assign_work+0x1a0/0x250 [ 1099.352908][ T7733] worker_thread+0x6c8/0xf10 [ 1099.357506][ T7733] ? __kthread_parkme+0x19e/0x250 [ 1099.362537][ T7733] ? __pfx_worker_thread+0x10/0x10 [ 1099.367644][ T7733] kthread+0x3c2/0x780 [ 1099.371694][ T7733] ? __pfx_kthread+0x10/0x10 [ 1099.376287][ T7733] ? ret_from_fork+0x25/0x6f0 [ 1099.380979][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.385746][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.390515][ T7733] ? __pfx_kthread+0x10/0x10 [ 1099.395093][ T7733] ret_from_fork+0x5d7/0x6f0 [ 1099.399688][ T7733] ? __pfx_kthread+0x10/0x10 [ 1099.404278][ T7733] ret_from_fork_asm+0x1a/0x30 [ 1099.409048][ T7733] [ 1099.412066][ T7733] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1099.419318][ T7733] CPU: 1 UID: 0 PID: 7733 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1099.428834][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1099.438882][ T7733] Workqueue: netns cleanup_net [ 1099.443627][ T7733] Call Trace: [ 1099.446880][ T7733] [ 1099.449790][ T7733] dump_stack_lvl+0x3d/0x1f0 [ 1099.454366][ T7733] vpanic+0x6e8/0x7a0 [ 1099.458333][ T7733] ? __pfx_vpanic+0x10/0x10 [ 1099.462816][ T7733] ? ieee80211_tx_skb_tid+0x3ef/0x4f0 [ 1099.468160][ T7733] panic+0xca/0xd0 [ 1099.471881][ T7733] ? __pfx_panic+0x10/0x10 [ 1099.476295][ T7733] ? check_panic_on_warn+0x1f/0xb0 [ 1099.481382][ T7733] check_panic_on_warn+0xab/0xb0 [ 1099.486291][ T7733] __warn+0xf6/0x3c0 [ 1099.490157][ T7733] ? ieee80211_tx_skb_tid+0x3ef/0x4f0 [ 1099.495527][ T7733] report_bug+0x3c3/0x580 [ 1099.499841][ T7733] ? ieee80211_tx_skb_tid+0x3ef/0x4f0 [ 1099.505192][ T7733] handle_bug+0x184/0x210 [ 1099.509505][ T7733] exc_invalid_op+0x17/0x50 [ 1099.513981][ T7733] asm_exc_invalid_op+0x1a/0x20 [ 1099.518805][ T7733] RIP: 0010:ieee80211_tx_skb_tid+0x3ef/0x4f0 [ 1099.524775][ T7733] Code: c7 c0 24 09 8d c6 05 75 23 80 05 01 e8 8a 0e 84 f6 e9 2d fd ff ff e8 a0 29 a8 f6 90 0f 0b 90 e9 d7 fc ff ff e8 92 29 a8 f6 90 <0f> 0b 90 e8 a9 29 80 00 31 ff 89 c3 89 c6 e8 be 24 a8 f6 85 db 75 [ 1099.544376][ T7733] RSP: 0018:ffffc9000495ef88 EFLAGS: 00010293 [ 1099.550433][ T7733] RAX: 0000000000000000 RBX: ffff888034250d80 RCX: ffffffff8b1364bf [ 1099.558391][ T7733] RDX: ffff8880343b2440 RSI: ffffffff8b1367ae RDI: 0000000000000005 [ 1099.566335][ T7733] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1099.574278][ T7733] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1099.582224][ T7733] R13: ffff8880287508c0 R14: 0000000000000007 R15: 0000000000000000 [ 1099.590175][ T7733] ? ieee80211_tx_skb_tid+0xff/0x4f0 [ 1099.595439][ T7733] ? ieee80211_tx_skb_tid+0x3ee/0x4f0 [ 1099.600807][ T7733] ? ieee80211_tx_skb_tid+0x3ee/0x4f0 [ 1099.606160][ T7733] mesh_plink_frame_tx.isra.0+0x8a5/0xc60 [ 1099.611856][ T7733] ? __pfx_mesh_plink_frame_tx.isra.0+0x10/0x10 [ 1099.618079][ T7733] ? mesh_path_sel_frame_tx.isra.0+0xbe0/0xd00 [ 1099.624219][ T7733] mesh_plink_deactivate+0x271/0x340 [ 1099.629478][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.634216][ T7733] mesh_sta_cleanup+0x35/0x70 [ 1099.638872][ T7733] __cleanup_single_sta+0x5c0/0x730 [ 1099.644055][ T7733] __sta_info_destroy_part2+0x389/0x540 [ 1099.649589][ T7733] __sta_info_flush+0x521/0x740 [ 1099.654409][ T7733] ? __pfx___sta_info_flush+0x10/0x10 [ 1099.659751][ T7733] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1099.665011][ T7733] ? ieee80211_roc_purge+0x6b/0x4a0 [ 1099.670199][ T7733] ieee80211_do_stop+0x269/0x2520 [ 1099.675199][ T7733] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1099.681082][ T7733] ? __mutex_lock+0x1c5/0x1060 [ 1099.685842][ T7733] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1099.691314][ T7733] ? do_raw_spin_lock+0x12c/0x2b0 [ 1099.696318][ T7733] ? ieee80211_stop+0x116/0x320 [ 1099.701145][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.705882][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.710626][ T7733] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1099.716585][ T7733] ? __pfx_ieee80211_stop+0x10/0x10 [ 1099.721769][ T7733] ieee80211_stop+0x169/0x320 [ 1099.726421][ T7733] ? __pfx_ieee80211_stop+0x10/0x10 [ 1099.731594][ T7733] __dev_close_many+0x29b/0x760 [ 1099.736421][ T7733] ? __pfx___dev_close_many+0x10/0x10 [ 1099.741768][ T7733] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 1099.747465][ T7733] netif_close_many+0x233/0x630 [ 1099.752301][ T7733] ? netdev_change_features+0x81/0xb0 [ 1099.757646][ T7733] ? __pfx_netdev_change_features+0x10/0x10 [ 1099.763506][ T7733] ? ndisc_netdev_event+0xa1/0x560 [ 1099.768589][ T7733] ? __pfx_netif_close_many+0x10/0x10 [ 1099.773945][ T7733] ? netif_set_tso_max_size+0xd1/0x180 [ 1099.779379][ T7733] ? netif_set_tso_max_segs+0x7f/0xb0 [ 1099.784733][ T7733] ? bond_compute_features+0x549/0x8d0 [ 1099.790169][ T7733] netif_close+0x17f/0x230 [ 1099.794565][ T7733] ? __pfx_netif_close+0x10/0x10 [ 1099.799482][ T7733] ? mutex_is_locked+0x17/0x60 [ 1099.804216][ T7733] ? rtnl_is_locked+0x15/0x20 [ 1099.808871][ T7733] dev_close+0xaa/0x240 [ 1099.813023][ T7733] __bond_release_one+0xb08/0x1a00 [ 1099.818110][ T7733] ? __pfx___bond_release_one+0x10/0x10 [ 1099.823626][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.828365][ T7733] ? ib_device_get_by_netdev+0x1b8/0x520 [ 1099.833973][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.838709][ T7733] ? __pfx_bond_netpoll_cleanup+0x10/0x10 [ 1099.844399][ T7733] ? udp_tunnel_nic_netdevice_event+0x158/0x1fa0 [ 1099.850721][ T7733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1099.856611][ T7733] bond_uninit+0x124/0x320 [ 1099.861000][ T7733] ? __pfx_bond_uninit+0x10/0x10 [ 1099.865908][ T7733] ? unregister_netdevice_many_notify+0x1039/0x24c0 [ 1099.872482][ T7733] ? __pfx_bond_uninit+0x10/0x10 [ 1099.877663][ T7733] unregister_netdevice_many_notify+0x1419/0x24c0 [ 1099.884063][ T7733] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1099.890831][ T7733] ? bond_net_exit_rtnl+0xff/0x3a0 [ 1099.895924][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.900670][ T7733] ? __pfx___might_resched+0x10/0x10 [ 1099.905946][ T7733] ops_undo_list+0x8fc/0xab0 [ 1099.910522][ T7733] ? __pfx_ops_undo_list+0x10/0x10 [ 1099.915603][ T7733] ? cleanup_net+0x334/0x890 [ 1099.920164][ T7733] ? lock_release+0x201/0x2f0 [ 1099.924821][ T7733] ? idr_destroy+0x62/0x2e0 [ 1099.929304][ T7733] cleanup_net+0x408/0x890 [ 1099.933705][ T7733] ? __pfx_cleanup_net+0x10/0x10 [ 1099.938618][ T7733] ? lock_acquire+0x2cd/0x350 [ 1099.943284][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1099.948021][ T7733] process_one_work+0x9cf/0x1b70 [ 1099.952950][ T7733] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1099.958300][ T7733] ? __pfx_process_one_work+0x10/0x10 [ 1099.963646][ T7733] ? assign_work+0x1a0/0x250 [ 1099.968217][ T7733] worker_thread+0x6c8/0xf10 [ 1099.972780][ T7733] ? __kthread_parkme+0x19e/0x250 [ 1099.977787][ T7733] ? __pfx_worker_thread+0x10/0x10 [ 1099.982888][ T7733] kthread+0x3c2/0x780 [ 1099.986929][ T7733] ? __pfx_kthread+0x10/0x10 [ 1099.991507][ T7733] ? ret_from_fork+0x25/0x6f0 [ 1099.996156][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1100.000900][ T7733] ? rcu_is_watching+0x12/0xc0 [ 1100.005638][ T7733] ? __pfx_kthread+0x10/0x10 [ 1100.010212][ T7733] ret_from_fork+0x5d7/0x6f0 [ 1100.014772][ T7733] ? __pfx_kthread+0x10/0x10 [ 1100.019332][ T7733] ret_from_fork_asm+0x1a/0x30 [ 1100.024080][ T7733] [ 1100.027296][ T7733] Kernel Offset: disabled [ 1100.031594][ T7733] Rebooting in 86400 seconds..