last executing test programs: 3m27.202823259s ago: executing program 3 (id=369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000040)="ed79eb98ebc61a72b9e998dfa2c5cc2c48063b") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read$FUSE(r2, &(0x7f0000001d40)={0x2020}, 0x2020) signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffa, 0x69}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 3m25.90675328s ago: executing program 3 (id=374): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x12, r0, 0x45a1b000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000003000040"]) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)={r9, 0x1, 0x7}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="7f0d", 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='c::8\x002&\xb6E\x0f\x92\xc8,\xe0#\x13\xdb\xd0pR\xb4\xe9\xa7\xec\xc0\xce\xc7\xf8ro7\x1d]\xb2\x1b\xb8A\xe9m/\xa0)n\xc1\x10R\xfd', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/145, 0x91}], 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e0800006c3030303030303030303030303030303337323400e075902ec81c0597059a0dfad293901e0be7c1ee4806000000ed8b7f23a8fd4843271135df7975b6cc8c8e25e4be00"/83], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d"], 0x5c}}, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3m23.148792191s ago: executing program 3 (id=380): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000fff000/0x1000)=nil) brk(0x55555ede5ffe) 3m19.064909885s ago: executing program 3 (id=396): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r1 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0xd, 0x0, 0x5, 0xd, 0x8, 0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 3m18.72435443s ago: executing program 3 (id=398): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x0, 0x0) 3m18.622530706s ago: executing program 3 (id=399): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902"], 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="61e67a15cdf0531cfcf33a53a7d86bd1", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r6}, 0x10, &(0x7f00000004c0)={&(0x7f0000000580)={0x1, 0x410, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x80, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000011c0)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}}) splice(r10, 0x0, r9, 0x0, 0xffffffffffff8000, 0x0) sendmmsg$sock(r4, &(0x7f0000001ac0)=[{{&(0x7f00000001c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)="a2169db107a9692a1da7d2e267b3375689be58cc54003821bcfc73e21934b4f0b52d3fff71ef3e932f6838a3492b3a3e7c7bf5f4f9d1883f03e6d120d2b7d4cdc8018a411bb5b48ec35c8b328e9882c1125079dc80c70f4807e92b", 0x5b}, {&(0x7f0000000440)="a8435a942cdade0d12d23bde865c6065e6dd1962219721f95e01a304f5b227de759c6e62318479c35c3cd29c0c74a24cb95ce27eed90819d2a6854cbbbcb599620c419c433cef4c8cd5d7b856392bc03c4446a64a9ce17", 0x57}, {&(0x7f00000004c0)="06a50c77d4a6350136a27db70d22083d137826b83c7b6304b5c7c9e22980558071c7aad435b9cafbd9709f22ab18d9c3160739d6ee6a33723ea50deda447e87b5cae774fdd0fd801311a61f7dd76a6907d3410a9cb53ed414e2fad83c3ab1e25f6e33dfb5bce4bed0bb7", 0x6a}, {&(0x7f00000005c0)="0dbd05f863efd33d24eb67ebba03e1cf9f1ac8e4fe172c05c2d3dea1385e3ba5469edd24cc63e91dd67612bb78e8f74cff4ce446b5ab619040e451394082775429d5cd967b907a8cafa1badeb30e86b7b0427fc939c3e624b93a83a129b138501b269b2ad0adf6026c74a64a36fe248e7007b57e4d66f17c70dac6e94d1351daa2", 0x81}, {&(0x7f0000000140)="4537a1a85bf7dbe505bc8cfde479", 0xe}, {&(0x7f0000000680)="a77a2ffefd6d7d3cb6fded640fb58aafc5c82c4c0db5fbd9b7ed2c7ef0154d0bb26b7f5c4023c5ac96711196274e167792a4e0e913067248a7242aa67cb34cb3888f9db9458ed6986fbaf502d74df4acb62ae54260f686536b75c4994964def60973d180ddddfb5b5a0af4bde961d275f24b8f14e76ca3c5fb4d376249410c2afea5e5bcbea09a07b2a898949c3f702b9b0a94f7a10d38db8bfc8edd596b54d2af5ed85e311928592aefa0b5296a8c18971315c7976d10910cd7778c4a92ca095da9af419f56e71eb37f76f54471e701dd0d125ff7b7ff971eab0ad85a2a81fbf17fadd7393da8d4781ada43feca120a7ff48a", 0xf3}, {&(0x7f0000000780)="1663299418eaeb71223913faf8509e516f12e09b990fb7b46b975008e016dc16cf9ed3d8f74c66b2b98062eda6a1e87b182c5e31b189bbc2b15a7f55b738b822a2b33c180f3bfe7b1ad243eb3b01ae2dcaa6169bedf703f738af46459361feb0f2806686625f6cddf300248ad01a449699040a7998ccd65cdd04af46ef348592a5c53d848b493e5b287c4a28055a10c0dc43e8a665102560484500ec0f182efd45a8f457f0810ff8eee77a791a6df8d32799d36873346dd6a0647c7ab2c6a08048d5dced9bbfda1f4dc914f3e161b5a224216a8ee4359243f6b9dd9ace9ba98b11eaff831f91be2870fe2de2", 0xec}], 0x7, &(0x7f0000000940)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xf4}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}], 0x48}}, {{&(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @empty, 'veth1_to_hsr\x00'}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a40)="7ebdeeb782edb2b4a0a9990a7d057e98974cdc8f80ed2e7d74c21b997e4080d624f31ee79083677665591a4833b21750eda2b83f3a0f184bfcc592fea26fb50417ba7a740dc05273eb4632dc943387321380668413ebe02a764390ce7beca97d54ea7115f78db8c950d7ded03f7050f237f888e2246790702ea32f584b3e3c374e1bb29855d3ba212a11186182088468134de1c47114d0d59ea655a60595b563e959c8cf04a5a4125fbc7b637f26930f9702bc994bcdaad84dfb8fa39bdba3e0d0ab8520ad953f14a308c9cd5968206fa2f02d769e6df45ec257", 0xda}, {&(0x7f0000000b40)="92c4939817bcd12e540c09c2d970f276757b5b62a14b140951a643bc6d873d124edf806c794291b45e18d181d8ccdb60fd3a71520b0781828c4a5c64e248f0f29bb9fe0f", 0x44}, {&(0x7f0000000bc0)="7682ca3b90d3b9d299165e2be0fc4d48698c75e6243c9357f0082a312b30a08351448f0dd5fbf77f150599491d01a6ec9746d44c6b3ce5844ca61322cc23381bf0aa3be80a8c20a79d19bf8174", 0x4d}, {&(0x7f0000000240)="ce78f0a66ff2bf5ae96bce82a3c1b34a947ee7e528665c51fafe7b54468a1a2eb32717a6", 0x24}, {&(0x7f0000000c40)="452c281f1f560b50d9fc215a1568ffa4059985fc3bc649c6a6c305c92fe2790012fc83300ca764d91877507cf1c7828121496119286b1ae9e0482adf681afe1989aa9c50c7d4b3168dbee46ee06edb858b82ed861b841a27b4bf16ce852430d2441a0f48e4ce960f22b46ecd21f6830d0786e82bcd1b2b5462de7d720cb2e28e6f008168c855879d4a773b69e52b008bd401dd9b3d1da04bb9bd75b0ac0a751153c2f7e9231d88b2cc404e70843c4826880c80d4ee4a5258e6030fb0a043434b", 0xc0}, {&(0x7f0000000340)}, {&(0x7f00000003c0)="0bb928d94afb", 0x6}, {&(0x7f0000000540)="46638aca3f", 0x5}, {&(0x7f0000000d00)="b2b8081e28afaa25269ee81ef0e3759387e1a735ee55ff8a3af30c00bcbb245b00ee5aaccae4abbb65fec1b003920fc0ff27ef059a02ec8f095479b35b33a0bc8f64c5dc4bd059f9ce1ff142025026375ebe337cce1a06c14a40824d7568043046fd8007c1ab94f6dacd60859867431eb33eb4034b0a79325f9b922e046314b67787a18fb90c86c3828b21375070754ce92b5a64282d429f93516aad1fe0e68a305bef5e461b1d85", 0xa8}, {&(0x7f0000000dc0)="29c9fb78a14b02f71e9216147bb0e8d721f00ab982fd3cb86b9a2c3cb93ccf67c6713355d9727a0dca7e73867b6887c83e524bc4689cbc1ee6912df1c38538d6ec0040688de30c441be032790f1fab61e72032240e8c3bb523a75f573ef539ff44c84e38fff5283bd259b88364f8bfb5474ad1e0c2dbf06d1c1c139192e12bfb3631e8ebc4de5233e9ba9fdfa23a7b045bf92094b5ac966ec352063ed21455fa8cd62756d8d77f0f00c5565d79a16b39b1c477f0775b2d3623223e0cc61b33ac50cf1829b87ada7c67ecea11f048d4cbdbd9def25d4c6665cba9a93739788bc4b24e", 0xe2}], 0xa}}, {{&(0x7f0000000f80)=@can={0x1d, r6}, 0x80, &(0x7f0000001000)=[{&(0x7f00000010c0)="f7346458cd51cc249d72ee85720289fc0c221c824c9427e89c7777adeeb8497f7b918e0da96dda5d2bbaa60a03f78216e8b36678e38c071381369f11184c8b67953a7631d8d50a4fae5a27f678c2fb", 0x4f}], 0x1, &(0x7f0000001140)=[@timestamping={{0x14, 0x1, 0x25, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}}, {{&(0x7f0000001200)=@nfc_llcp={0x27, r7, 0x0, 0x4, 0x71, 0x4, "b016ebbf224152bc939b740fac59921bcfe835794e33bc3203f1461e46bb4c21294f43e5b866ad792266252537b6f89bf230dcf474a411e3a7d7e1f6b82a24", 0xc}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001280)="fcb9bb2aac3295dae9708620c173a904da4616458583ef002608c12a9669f9f76b0fd2b989bad72aef926e78b238475fe563fd3238735d2235f596e4c3593b2be9d7904e9e6e63f00cd9a506965827f5600aef51fe36", 0x56}, {&(0x7f0000001300)="8471783b1afbefb2eafaccac41a5caee452b4baab33c7356b5dab9701c850bb0d43d8d9210f659e4b96aa056a79b65a151006359f14d39715cc916f5a906f408a7f1ba846ff92104d2a9a59e5f163d002e1c94e23effcc028cf285ad7c025de2194bb48d5b05515deabd2b2f31a6f5c15fc2bdccc777e56f441cab49ef4745aa943e44d8f28dbe59e2df2209bb87e3cf1deeed5037cf7f0f119e1e7cbadf36f2c311b09370e3f94fa07e6793236e827f95bd2a3d84fe5b0285e2", 0xba}], 0x2, &(0x7f0000001480)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001400)="300e24a088619770b701a1772992ad574d9a", 0x12}, {&(0x7f0000001500)="bbd474f73f5579085689628bdf322af3c4a3105d5352a07aa1d059b18123d61ccee2111bf00936bcf096c4ea35a8625493cba8a2c9ec9707825560c2f9086850e9637e2609b23083e5de56bbf39c62c9b8e7eee5274cf669c5e75f151295703b9502b215cb17b02a9f2b08c92cbc86127db5e4bb23a763749fdd1bd87ded43b7798fbaef55043bb62c48d6acb96d0c10bd7f7d958f95e9c8a14c9c6259bbf27bee9ae61beef66d99ef93f7cb9f45f33701d73ec1d0d62bc4ff39f6289772f8785e21be7a7340ef784459d5ce2e7e7fe391c3d25250c5b294aab495a1b17f245126a151889f1a8a802ed7abffd0fb0640de074f", 0xf3}, {&(0x7f0000001600)="25ca2459eead233e0194fc05a8545fd9836de2bcd10efc4649d86346416efcd59dd0040f458c3712c805dc3529311ec6fba554e8e79e360513d7", 0x3a}, {&(0x7f0000001640)="3cb15a032d2800687e74ef808c44263921550133f6ede65392fb6d668b85def962e963ed5c6cbd6ea55a620052d5928cf47b8073ebc9d0d7b0144860e4f51a742b50e513a0dc8a25d5766d625101c2e12f65d7e4d7cb54b8d44999724f684ecc488166fb959ae6b37603600871b10f80e1ee80e22339fe15b25703c2e684968ba19f5def8f9ec23c9d6afe5c303830f4d2a30fd6f7c78b2b7bd51475555b786c7307cf", 0xa3}, {&(0x7f0000001700)="2f1701fe602474a4f0858f1f173c9703efd140eba0c769fbbbdf956192a849d911b7ce098c83ea0ffcf63d67cb09a5da35f80c2add1e3887c01659e7cfbd7cbd823b39a21fb4cb57f9036bac81d4f9d28af2db7c0fea369933d1527580ae1804328f9261912ab479e049773c5747a6233a3076a21478e123b4dd3bc2cd2bc5a44433edba7360215ff9d639b8636b43e5ce484ed88556c5f5e6efe0471cfa15bc228158d4eb652fc60736643587a10336a0755b7dd8c2f51ca965aa1bfcde672c2b16b2ddb1ea5cb2e674d6fab2e9e173f1a2a713652a", 0xd6}], 0x5, &(0x7f00000019c0)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3d}}, @timestamping={{0x14, 0x1, 0x25, 0x8e7b}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14}}], 0xf0}}], 0x5, 0x40) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2}}) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r12, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r3, &(0x7f0000000080)='=', 0x11}]) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0xa000000}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 3m2.939268749s ago: executing program 32 (id=399): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902"], 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="61e67a15cdf0531cfcf33a53a7d86bd1", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r6}, 0x10, &(0x7f00000004c0)={&(0x7f0000000580)={0x1, 0x410, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x80, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000011c0)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}}) splice(r10, 0x0, r9, 0x0, 0xffffffffffff8000, 0x0) sendmmsg$sock(r4, &(0x7f0000001ac0)=[{{&(0x7f00000001c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)="a2169db107a9692a1da7d2e267b3375689be58cc54003821bcfc73e21934b4f0b52d3fff71ef3e932f6838a3492b3a3e7c7bf5f4f9d1883f03e6d120d2b7d4cdc8018a411bb5b48ec35c8b328e9882c1125079dc80c70f4807e92b", 0x5b}, {&(0x7f0000000440)="a8435a942cdade0d12d23bde865c6065e6dd1962219721f95e01a304f5b227de759c6e62318479c35c3cd29c0c74a24cb95ce27eed90819d2a6854cbbbcb599620c419c433cef4c8cd5d7b856392bc03c4446a64a9ce17", 0x57}, {&(0x7f00000004c0)="06a50c77d4a6350136a27db70d22083d137826b83c7b6304b5c7c9e22980558071c7aad435b9cafbd9709f22ab18d9c3160739d6ee6a33723ea50deda447e87b5cae774fdd0fd801311a61f7dd76a6907d3410a9cb53ed414e2fad83c3ab1e25f6e33dfb5bce4bed0bb7", 0x6a}, {&(0x7f00000005c0)="0dbd05f863efd33d24eb67ebba03e1cf9f1ac8e4fe172c05c2d3dea1385e3ba5469edd24cc63e91dd67612bb78e8f74cff4ce446b5ab619040e451394082775429d5cd967b907a8cafa1badeb30e86b7b0427fc939c3e624b93a83a129b138501b269b2ad0adf6026c74a64a36fe248e7007b57e4d66f17c70dac6e94d1351daa2", 0x81}, {&(0x7f0000000140)="4537a1a85bf7dbe505bc8cfde479", 0xe}, {&(0x7f0000000680)="a77a2ffefd6d7d3cb6fded640fb58aafc5c82c4c0db5fbd9b7ed2c7ef0154d0bb26b7f5c4023c5ac96711196274e167792a4e0e913067248a7242aa67cb34cb3888f9db9458ed6986fbaf502d74df4acb62ae54260f686536b75c4994964def60973d180ddddfb5b5a0af4bde961d275f24b8f14e76ca3c5fb4d376249410c2afea5e5bcbea09a07b2a898949c3f702b9b0a94f7a10d38db8bfc8edd596b54d2af5ed85e311928592aefa0b5296a8c18971315c7976d10910cd7778c4a92ca095da9af419f56e71eb37f76f54471e701dd0d125ff7b7ff971eab0ad85a2a81fbf17fadd7393da8d4781ada43feca120a7ff48a", 0xf3}, {&(0x7f0000000780)="1663299418eaeb71223913faf8509e516f12e09b990fb7b46b975008e016dc16cf9ed3d8f74c66b2b98062eda6a1e87b182c5e31b189bbc2b15a7f55b738b822a2b33c180f3bfe7b1ad243eb3b01ae2dcaa6169bedf703f738af46459361feb0f2806686625f6cddf300248ad01a449699040a7998ccd65cdd04af46ef348592a5c53d848b493e5b287c4a28055a10c0dc43e8a665102560484500ec0f182efd45a8f457f0810ff8eee77a791a6df8d32799d36873346dd6a0647c7ab2c6a08048d5dced9bbfda1f4dc914f3e161b5a224216a8ee4359243f6b9dd9ace9ba98b11eaff831f91be2870fe2de2", 0xec}], 0x7, &(0x7f0000000940)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xf4}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}], 0x48}}, {{&(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @empty, 'veth1_to_hsr\x00'}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a40)="7ebdeeb782edb2b4a0a9990a7d057e98974cdc8f80ed2e7d74c21b997e4080d624f31ee79083677665591a4833b21750eda2b83f3a0f184bfcc592fea26fb50417ba7a740dc05273eb4632dc943387321380668413ebe02a764390ce7beca97d54ea7115f78db8c950d7ded03f7050f237f888e2246790702ea32f584b3e3c374e1bb29855d3ba212a11186182088468134de1c47114d0d59ea655a60595b563e959c8cf04a5a4125fbc7b637f26930f9702bc994bcdaad84dfb8fa39bdba3e0d0ab8520ad953f14a308c9cd5968206fa2f02d769e6df45ec257", 0xda}, {&(0x7f0000000b40)="92c4939817bcd12e540c09c2d970f276757b5b62a14b140951a643bc6d873d124edf806c794291b45e18d181d8ccdb60fd3a71520b0781828c4a5c64e248f0f29bb9fe0f", 0x44}, {&(0x7f0000000bc0)="7682ca3b90d3b9d299165e2be0fc4d48698c75e6243c9357f0082a312b30a08351448f0dd5fbf77f150599491d01a6ec9746d44c6b3ce5844ca61322cc23381bf0aa3be80a8c20a79d19bf8174", 0x4d}, {&(0x7f0000000240)="ce78f0a66ff2bf5ae96bce82a3c1b34a947ee7e528665c51fafe7b54468a1a2eb32717a6", 0x24}, {&(0x7f0000000c40)="452c281f1f560b50d9fc215a1568ffa4059985fc3bc649c6a6c305c92fe2790012fc83300ca764d91877507cf1c7828121496119286b1ae9e0482adf681afe1989aa9c50c7d4b3168dbee46ee06edb858b82ed861b841a27b4bf16ce852430d2441a0f48e4ce960f22b46ecd21f6830d0786e82bcd1b2b5462de7d720cb2e28e6f008168c855879d4a773b69e52b008bd401dd9b3d1da04bb9bd75b0ac0a751153c2f7e9231d88b2cc404e70843c4826880c80d4ee4a5258e6030fb0a043434b", 0xc0}, {&(0x7f0000000340)}, {&(0x7f00000003c0)="0bb928d94afb", 0x6}, {&(0x7f0000000540)="46638aca3f", 0x5}, {&(0x7f0000000d00)="b2b8081e28afaa25269ee81ef0e3759387e1a735ee55ff8a3af30c00bcbb245b00ee5aaccae4abbb65fec1b003920fc0ff27ef059a02ec8f095479b35b33a0bc8f64c5dc4bd059f9ce1ff142025026375ebe337cce1a06c14a40824d7568043046fd8007c1ab94f6dacd60859867431eb33eb4034b0a79325f9b922e046314b67787a18fb90c86c3828b21375070754ce92b5a64282d429f93516aad1fe0e68a305bef5e461b1d85", 0xa8}, {&(0x7f0000000dc0)="29c9fb78a14b02f71e9216147bb0e8d721f00ab982fd3cb86b9a2c3cb93ccf67c6713355d9727a0dca7e73867b6887c83e524bc4689cbc1ee6912df1c38538d6ec0040688de30c441be032790f1fab61e72032240e8c3bb523a75f573ef539ff44c84e38fff5283bd259b88364f8bfb5474ad1e0c2dbf06d1c1c139192e12bfb3631e8ebc4de5233e9ba9fdfa23a7b045bf92094b5ac966ec352063ed21455fa8cd62756d8d77f0f00c5565d79a16b39b1c477f0775b2d3623223e0cc61b33ac50cf1829b87ada7c67ecea11f048d4cbdbd9def25d4c6665cba9a93739788bc4b24e", 0xe2}], 0xa}}, {{&(0x7f0000000f80)=@can={0x1d, r6}, 0x80, &(0x7f0000001000)=[{&(0x7f00000010c0)="f7346458cd51cc249d72ee85720289fc0c221c824c9427e89c7777adeeb8497f7b918e0da96dda5d2bbaa60a03f78216e8b36678e38c071381369f11184c8b67953a7631d8d50a4fae5a27f678c2fb", 0x4f}], 0x1, &(0x7f0000001140)=[@timestamping={{0x14, 0x1, 0x25, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}}, {{&(0x7f0000001200)=@nfc_llcp={0x27, r7, 0x0, 0x4, 0x71, 0x4, "b016ebbf224152bc939b740fac59921bcfe835794e33bc3203f1461e46bb4c21294f43e5b866ad792266252537b6f89bf230dcf474a411e3a7d7e1f6b82a24", 0xc}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001280)="fcb9bb2aac3295dae9708620c173a904da4616458583ef002608c12a9669f9f76b0fd2b989bad72aef926e78b238475fe563fd3238735d2235f596e4c3593b2be9d7904e9e6e63f00cd9a506965827f5600aef51fe36", 0x56}, {&(0x7f0000001300)="8471783b1afbefb2eafaccac41a5caee452b4baab33c7356b5dab9701c850bb0d43d8d9210f659e4b96aa056a79b65a151006359f14d39715cc916f5a906f408a7f1ba846ff92104d2a9a59e5f163d002e1c94e23effcc028cf285ad7c025de2194bb48d5b05515deabd2b2f31a6f5c15fc2bdccc777e56f441cab49ef4745aa943e44d8f28dbe59e2df2209bb87e3cf1deeed5037cf7f0f119e1e7cbadf36f2c311b09370e3f94fa07e6793236e827f95bd2a3d84fe5b0285e2", 0xba}], 0x2, &(0x7f0000001480)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001400)="300e24a088619770b701a1772992ad574d9a", 0x12}, {&(0x7f0000001500)="bbd474f73f5579085689628bdf322af3c4a3105d5352a07aa1d059b18123d61ccee2111bf00936bcf096c4ea35a8625493cba8a2c9ec9707825560c2f9086850e9637e2609b23083e5de56bbf39c62c9b8e7eee5274cf669c5e75f151295703b9502b215cb17b02a9f2b08c92cbc86127db5e4bb23a763749fdd1bd87ded43b7798fbaef55043bb62c48d6acb96d0c10bd7f7d958f95e9c8a14c9c6259bbf27bee9ae61beef66d99ef93f7cb9f45f33701d73ec1d0d62bc4ff39f6289772f8785e21be7a7340ef784459d5ce2e7e7fe391c3d25250c5b294aab495a1b17f245126a151889f1a8a802ed7abffd0fb0640de074f", 0xf3}, {&(0x7f0000001600)="25ca2459eead233e0194fc05a8545fd9836de2bcd10efc4649d86346416efcd59dd0040f458c3712c805dc3529311ec6fba554e8e79e360513d7", 0x3a}, {&(0x7f0000001640)="3cb15a032d2800687e74ef808c44263921550133f6ede65392fb6d668b85def962e963ed5c6cbd6ea55a620052d5928cf47b8073ebc9d0d7b0144860e4f51a742b50e513a0dc8a25d5766d625101c2e12f65d7e4d7cb54b8d44999724f684ecc488166fb959ae6b37603600871b10f80e1ee80e22339fe15b25703c2e684968ba19f5def8f9ec23c9d6afe5c303830f4d2a30fd6f7c78b2b7bd51475555b786c7307cf", 0xa3}, {&(0x7f0000001700)="2f1701fe602474a4f0858f1f173c9703efd140eba0c769fbbbdf956192a849d911b7ce098c83ea0ffcf63d67cb09a5da35f80c2add1e3887c01659e7cfbd7cbd823b39a21fb4cb57f9036bac81d4f9d28af2db7c0fea369933d1527580ae1804328f9261912ab479e049773c5747a6233a3076a21478e123b4dd3bc2cd2bc5a44433edba7360215ff9d639b8636b43e5ce484ed88556c5f5e6efe0471cfa15bc228158d4eb652fc60736643587a10336a0755b7dd8c2f51ca965aa1bfcde672c2b16b2ddb1ea5cb2e674d6fab2e9e173f1a2a713652a", 0xd6}], 0x5, &(0x7f00000019c0)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3d}}, @timestamping={{0x14, 0x1, 0x25, 0x8e7b}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14}}], 0xf0}}], 0x5, 0x40) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2}}) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r12, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r3, &(0x7f0000000080)='=', 0x11}]) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0xa000000}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 56.633045929s ago: executing program 0 (id=890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) ioperm(0x3, 0x4, 0x1000008) r6 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000100)=""/44) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xec}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 54.58112697s ago: executing program 0 (id=896): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001e000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) ptrace(0x10, r6) ptrace(0x15, r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1d, 0x9, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080), 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) 53.542772779s ago: executing program 0 (id=898): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xf4, 0x9c, 0x43, 0x8, 0x1ae7, 0x525, 0x637b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x7f, 0x80, 0x1, [{{0x9, 0x4, 0x46, 0x76, 0x1, 0xc4, 0x49, 0xc8, 0x55, [], [{{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x6, 0x3, 0xf3}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x6, 0x85, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x2, 0xb0, 0xdf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d7"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x49, 0x4, 0x6}, {0x6, 0x24, 0x1a, 0xfff}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x24, 0x6, 0xef}, @dmm={0x7, 0x24, 0x14, 0x8, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x6c00, 0x9, 0x72}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x58, 0xf1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x4, 0xe8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x88, 0x4}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x3, 0xe, 0x20}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x6, [{0x6, &(0x7f0000000180)=@string={0x6, 0x3, "19830d59"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4468}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1001}}, {0xe6, &(0x7f00000002c0)=@string={0xe6, 0x3, "bbe3cb400503004a0dba3a9503dbad0de0b2f0d1ac2f63034c994e1a2d22ed99cf392da8c3a33c75e93d81510a74042d3f42fe6b600b67f6f4ba4639c6493500fba8b631331b0e3a50ee426c5e9291a769d87d92ba582a4cd2d2dba50251206b1d27aa7b79de1f64e1a48c73fce08470b24f274904b11b1810a20773dbdc9ba135a8d9caac25da5e4b5266c2ffa8dcaeca557bfb091cab8bb3f13af6fbb54cbec4640d84f1cc5fef3c8791573f72bd1b1ceb9d6fbec5d483f7e0c6bebd4694bc9b62b3f74b56488e2ddfaab3f319b50cdc9817c7d1bebe8bb66fd0d507826de156db4e19"}}]}) 50.465438289s ago: executing program 0 (id=910): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xc8, @private1, 0x484}}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r1, 0x1, 0x60bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x80000000, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740), 0x201, 0x0) epoll_create(0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r6, 0x100ffffc}}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x800) setresuid(0x0, 0xee01, 0xee00) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000140)=0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x4008090) 49.000511197s ago: executing program 0 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x1000008, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000000)='./file2\x00', 0x4) (fail_nth: 10) 46.847932615s ago: executing program 0 (id=921): r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xcd34, 0x1, 0x0, 0x34}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2418, 0xcabb, 0x44, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501009cbd89d64dfea930195a2fe2df"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x72bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x2) 31.247243293s ago: executing program 33 (id=921): r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xcd34, 0x1, 0x0, 0x34}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2418, 0xcabb, 0x44, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501009cbd89d64dfea930195a2fe2df"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x72bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x2) 9.162701269s ago: executing program 4 (id=1064): openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) socket(0x1e, 0x4, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0x8, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000200)=@overlay={0x1, 0x2, 0x4, 0x4000, 0xffffffc0, {}, {0x4, 0x8, 0xae, 0x90, 0xa, 0x1, "a5af9dc0"}, 0xd, 0x3, {}, 0xc6ac}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6.664616524s ago: executing program 6 (id=1071): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xc8, @private1, 0x484}}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r1, 0x1, 0x60bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x80000000, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740), 0x201, 0x0) epoll_create(0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r6, 0x100ffffc}}, 0x48) pipe2(&(0x7f00000000c0), 0x800) setresuid(0x0, 0xee01, 0xee00) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0xeb9, 0xc4, &(0x7f0000000780)=""/196, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1000004}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x5, 0x4, 0x7ff}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x10, 0x7, @void, @value}, 0x94) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000140)=0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x4008090) 6.421833966s ago: executing program 2 (id=1072): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf={0xfc, &(0x7f0000000280)="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"}) close_range(r1, 0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000019680)=""/102376, 0xfffffffffffffdb5) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, r4, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 6.180568902s ago: executing program 2 (id=1074): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0xa400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) io_setup(0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 7) io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1) sendfile(r0, r1, 0x0, 0x80006) 6.004221393s ago: executing program 6 (id=1075): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x110) setreuid(0x0, 0xee01) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0xfffffffffffffff7, 0x8800) setns(r2, 0x40000000) r3 = socket(0xf, 0x3, 0x4) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x3, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0ed0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 5.791466459s ago: executing program 4 (id=1076): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.69441549s ago: executing program 6 (id=1077): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x20006080) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, 0x0, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.071571151s ago: executing program 5 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1}}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sched_setscheduler(0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000b00)=""/102400, 0x19000) syz_io_uring_setup(0x431e, 0x0, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) 4.949941048s ago: executing program 1 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) timerfd_create(0x9, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x100, @multicast1}, 0x10) io_uring_setup(0xdac, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) 4.874765741s ago: executing program 2 (id=1080): r0 = socket$phonet(0x23, 0x2, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) mkdir(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000080)=0x1) 4.392624961s ago: executing program 4 (id=1081): syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000108000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x2) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)=""/232, 0xe8) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40881) 4.044802417s ago: executing program 2 (id=1082): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x8b}, {&(0x7f0000001480)="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", 0x1001}], 0x3) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, 0x6) 4.003587283s ago: executing program 1 (id=1083): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0x84, @remote, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0xff000000}, 0x2c) 3.934550591s ago: executing program 6 (id=1084): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000080000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$full(0xffffffffffffff9c, 0x0, 0x440080, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_INIT={0x16, 0x2, {0x3, 0x9, 0x6}}]}}]}, 0x50}}, 0x0) syncfs(0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x118}, {&(0x7f00000007c0)=""/154, 0x14}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.933936582s ago: executing program 5 (id=1085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0285628, &(0x7f0000000280)=0x2) wait4(r0, 0x0, 0x1, &(0x7f0000000300)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x3, 0xb, 0xf00}}) 3.203384904s ago: executing program 5 (id=1086): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f0000000000)='}{\x00', 0x40, 0x46, 0x0) mq_notify(r1, 0x0) mq_notify(r1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) iopl(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x80802, 0x0) sendfile(r2, r2, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x10000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0d00000006000000040000000200000000000000", @ANYRES32=r5, @ANYBLOB="0005952a51e990265300"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r4, @ANYRES8, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') timerfd_create(0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 2.766781619s ago: executing program 4 (id=1087): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xd) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=@newtclass={0x24, 0x28, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffe0, 0x9}, {0x0, 0xb}}}, 0x24}}, 0x100c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f000000", @ANYRES32=r1], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000280)="7359fb801a758fecb3b6dbc054d8312fab13bc2a5e2cbf1c4287867612a67f796b2fd0d7afb9b9be375ca06c5cd43431a09de995b811dcb2d5ab55f7c63b3d3fd703c90a777c5c48b2572d2a9c29e8aed1a8c880671cab58388348e64138aa932e144c9f440da7c091485f50ddf89ecaff26100820887be75cee9870088bba1beb9dbd0bcefd0555d0477b84f5f58dfcc50aacf3fd2f5aea7c49e91eaad7289530f735b349bab7b7247e3a30992150e17e36bb54edba95f519bc77a356b6f7abd4bae320d5d7bc0851576018143b7701a920eb598c22", 0xd6}, {&(0x7f0000000380)="a528894560444d3281bba5f657b98a37a87934dbc68056612f044efcf4009a85d8aea02d874db114c107d3f13abe171a0787c43116016e01fb2d0f8cce6ad72791299232343b86218c7006fac4c0d769a27c16068d1a1695b33a8a7e259798d0835f87f8c6686b74109b2b47175309911071c0f1356c05a82ff2abe0b483b852f2024ce9cdd1f43f806f524dcaf5e7c9cd828e3481e38d66c7d09d9fb4292b4fab017f69dc43debcfb59da2240e0056e3a6ef065d6f68667770a886886a2268dd53fd2ae1733ed20430572b15c373fe5f9f29f1990985f010f2a452e8a0f1740b9dda4163474ec", 0xe7}, {&(0x7f0000000480)="3a9210dea0a595972536f2f6d4018738d829bb5df003ed5f6b5892ffcc6d28961257285371c6cf906f778b604aac94a44d2a778c2b6b9740628a09", 0x3b}, {&(0x7f00000004c0)="09fc0887dbb749bdd775cc4391c16fb8ae8c250ae2f922d0906a218245c1cbaf3e3d0c92f1502d5bba30e6e8cd058d5d1aa1c5128ff4dfdd6685fcfc85de0bf76a16ea0b424e959350dc177b2c09e30c0dd6895934c1ab1f3d0630cd9e0cdf5ea3af0d216fa0376f2db356241afc7c07fbabcd7f0ce6386f4f439435b3fb4ebd379e805659726188f0175d549d0de47ba69012ebfff3b5b0c332342ca316ce8930818204c5ce547ebbffdbfb96c60596e8c46d8e5db570c22de033d7c424c7744daf6e52d64ba1609f0aba9db5ff7413f7085bc30df73b8f3d06a0b0f10de171be92", 0xe2}, {&(0x7f00000005c0)="112d387e715561e58fc5d7191b9342b212d0bbb0ee3a469f219141e148ee07e12eb1aaa5c7da83daea9b699e5ee9", 0x2e}, {&(0x7f0000000600)="d006357acc833b3d952a9bce62fdc7eb4b7a30a97f5df9466beb9b97ca2faed638d3844375472c1a370f18c0971dcc192b88579b61c27cdc3f3bfbb913de0cdcd36d41f1099fc8dd1ea413e1c7c3174cdbb3a7013847ce0d0edb8cb33cdc8b46c8c899c0e58a60a01e097802a5923fe450dbeb664a2150c99001f7c21da6edf243e5e7771024bc0882f517d1d82a3f0984c62184236a98a8befd7cdc6137877e21478007e8a9cd8a0685053b113784447e3d45bc14b5bb518b8e45ea4e227c019a4c621f7396e194bc6f6dd12b9ca31265", 0xd1}], 0x6, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @remote}}}], 0x50}, 0x402c021) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0}, 0x10) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 2.62669034s ago: executing program 1 (id=1088): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009b00)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000500)="e11f2f0c06624e84de571cd9531597ef39be597e0c1568536a2cd4c3d5827110c0a1130853a489c715c073251a7cdcc2a95331c4253dc5e3420cd193daeb6eb4e89b0ec6bf580e6398bfda63c90815ea59cac9d1cf1cf0ef1c1ad7c7f4a2030fa3a58b8a9bda90a30214dc0740a08018498e9dfcbb4f11fd983d9dc43a11cb9e4cd935b7adf1f1251ab4b11c4600e16324f8e4198c2480303497e605072457364fd165632bfe0e13a0eb2c6f8dca04221c314d9ad7a38e7a831a0dd2abf13497f904496d17502438195980152b7271e36819d2b6c1e034", 0xd7}, {&(0x7f0000000440)="34e4c650097f0cf225027d77740c88394f20fe8b5c0b16805a60b9c190e21e1683df8536ae85f3d6a81880ce5485b14cc9b0e056ffd6b579b5dda1a323415bd738ab1ec3a0667bf814a8d0e830358d7f461aa42563b3869b8261c0c2aca0231e89ad1f111b3749c3dc2145494021de004f37ec6b5eb24353bcbd0695b25d4ee6db61023556ebc05991078f43f1f99c00c338", 0x92}, {&(0x7f0000000380)="51409896ae365fdd1c101dba6162380a9e0859f0e6b826ac255c7363c86806590b459c8356e5d6db24ad46c275c8b2888d42b6c50de2972053bdb5db4ca02a4619ef192097f3045c6803692b97ac935b1243b24b5b7eeceb5d3ea0fef57572bc6f8ae84fdce08ef6e567184a8b19962f121e5f5e65c2ef3d916a3f03caacf7a6390919e8f3f02a25af64c56f43953f689c11adaac00b5ee8cdfa5f84b61be72deaa32ddb267e7c3cd759a9a82a03535041517f6b48ca74bf5ed9d9f5f575a032", 0xc0}, {&(0x7f0000000600)="f3ae4d7e8eccd794e25490f94fa6b1cd7d89398dd0af95b0e6a5a68b1e5392d9f9b766243f0ad5f6a8b834d64f95329132aefa98fc24e7feda906e3f6dec8d374703917ac2bc4cad2121e6136e739907af2aa8ac5d96bd076489d0052d160acb868107b19d30805e2f7d655084ded35c2d6987df47d6b752c6a57353b320a74a0b35e2b6f37228fac9be4741d85f7a0569b4a88398", 0x95}, {&(0x7f00000006c0)="ef16a43109a3c1627242ca30de1183889168a8b3f64b07b12591b465377b021248794dec598d37c85f7128a4e8af5e837c9a3574526bd462720c8483612e8ff87990677f4e4f6420567439028962fcf627430f78d62da7164ef198fbfbb3a3ec2a4bea8ec531c053a8a013b6ce7dfae973336f82711769b718d334842c14c0ad3dfbd45f4dd458fe972e6a8f8ca6650e65c44749ae60af6a11a4d62ac4a585cd0b51881c078522b2d74d521ffbafaa83813b5130eb0d10acc0f523a396fa06108a436730548f529a56e617130a0fd910c3229066b88a65f1a7e7833d0888f0d9ef360ca8417d7bd32065888eb629f6e75ecc08c1d79177c4245e4b79a62d318279d5d4af95438b4ec83f371a93588a8bc543bb2df91e6435878dbfa6f38864b44db7a56e963957d945007c221a1f1610d908d15b50f24c112c297a3d8e427a27554bb625646f85ac2a67ae879304d31b83156af823516341279715ba1bd3f099f2e29321766e6a44da89036499478cd8a4d73ddbb4dfe5726feea1f51af375de030057f0b3a5ae4fbd1ff78bba7be5261168f9e372eebf846e25f86eb1a9d8b2a83d67d5c4317abc3cbc950ac1beaace3a22a1ad5420dea3c702c0c40264c97d39421b857b8ca2045b0e73b1706e8ee8651b3cb6d6055dcf248f74e8c39fc0bfb669adaeba4a635ea80d0bc347dd7e9992230d5c3e740eae821afe84b39e27d077cc0c75ae65c9bfc7b6d90d35f3db53a460e842222f4a3b7970eb94b0505fee159548e84404eaeab68e3e5cd673e69432b207294c6a968442cce0c4f9d271dcb64c5b847bf73c58470ee06db0b73d43e69d8d8e85de74ee60d2ea47700bc1c3312747749be4b3d683f1c7f4cb9e5c82019b958a6c7d2090d58fee3bdf9b59d552f1c49769eca845e497938aa57977f1793874aa5b8708215c42a359ba4a745fb678e84832d60e16f9a82882d0ae9ffff6b8b53e036b47c9aed5b790be65aad41a25b166de15738743dbb98f41fc4e3cb0a8c48c9de444bbd78f929fc6301ccbe3397a8a8b2f04f4fd8e1f018e28ad2584fdb35b0f69b475037e38d068cdaa89ea1a4014e16026e6fbd539f9345e21a80bc8fdf783be1189b4ea5970073b0365960c903cd275c9a1229184f5a48a612311a5fc0173a9f592d13acc46e4c64dd6cb3e5b49a6c73eb6eaca5b96edefb9d0a9be0e3316f3bc61b69288869be13ab618ba4c23d1112d3c2d98ec7d9ffa968606ed55419300193a644298bb7c3052a93aa7092cc3c456659151b1085bf6ac32de234c1489b6fed46e5ed422cd1fa1cd3d2f5ed819e13432880aca375d8e65f77521700b99961736ad0f624355c14891e28ada2cac6daf2252b23a51d84b3e4eab57006646c388e276e5d1d482b6db513d089978324b3302dacf1b4d1bac562d34dc1dec784ab47319f6fcd0aa67db5663ebd3778d8926f1319989fa8e129be5ac8bc79435c003eee9bc993c5efddb5beb274e788426c26c98279cc9de95246881d3c367422f44ed31967948956449178cbe54b64bd7089ea0dcfd1323635fdffad99b99beb575c0d1e94f0e3515bf319cb533bc98dfb28317909fbd7a7635de1701fc6f521c4ca6ad192c9dceffe9ab1c4fd599457dead0c9a29e6e2e63c4845c41d15596594999327116abdbccd3627f39a8c80cc50e45e34ecc85d90b62876acabee4b68dcf950572523a421f51971fbc960cf04c6d9a2875032de1b143492c781446a9cdfe84b141ed19ed3221904070ee6a53ef096c7a0a70764efaa75489b1b2f4ff3a6c8f457e28d598900b0da61c244fc28760ad1b4178cc7f4967d20f192ad6e2d453d4c6e92a476039e7b50a5ef2a5a9a84847c9a24bda39ac3a8b04afb4eb5cc9e199fb2bc762f9fa6107a2fb5d4e964724427b50970871438ace15401a6320004c0b1cd8ac66e1ceec4afa3aed7cfae59b71960be2836c56becbf99aadb67aaa69666e7000a6f97edccbeaa73dcfe41bbe6f37320fd0273022fa51185049423b0fbb0a95e982357c3990c3b88b771dd41034638d08039a949d7c208d6dbebcc827c5d76bd5686614c27b41b6ed90f5e3cafd2df1f0f134d9a5588474fd290c0a86d1dcc030805e335b7df135a4d80b00338fd6634a48109965ffb48c84772051c477cb4f2c3d95efc7e484e88acbd5336cf59a0fb58663fd88802f1627bee6dabd0ebc7e84cd8dc7da495de945d74392f7a586003b02939e87930d0bc53969318bbf2d9a77ce9015fd78939d27e63790cbbc681678e30e502896e4bfe8d6984aba3d387721426f4d99edb9e8b7a7ed46f17ea4a5d23b787cb399d6c2ce223dfed3842d2f48418148b2a9f2481231dc3d16018e0a3ade3c1ee75e9ead0e80ff2909f006b07aa4357148afb9a5cf9c204ad9af9808a90de5955c34695e52492d9395e21db29c3d1959c53a32544a069d6f4c3e5577294fde9cf2d97c3e2540ad428a7717598fbff11e84c2a85a0e43a6f7da50737b2e5fe322b8b7bfc28b3a3155996501ed0e2515e3fbe4395c55913d2f97a7c698d40648f87631af42cc4158a5c87167ec49f8a5b595a73dc523170a5374e584c0ac667fd11107c17230eea44217a8e7741a2834b42fc803fb751828739e06c99d11c5c93869872a45922720a420103a90ec10731a5dceb2090fab5ef9f8d67fb144a08bd620a906e4be9a7c401bb768ceed32745f32bef7c86878cb86469d27790a82eebcd4b659a6346ffabed7122d556d34d99e258959fcfca5c8236b85419eb8ece7bf3f5defd308ef9c6d56f688456e8adbd2df566e56db4c2fc9042bed00360994d725bfd4df0bc5b007d5baaf551d23cebb67dd80ba0e0a5c6bb1c2a9262ab6ef1318d6daf9a4517fb6b3e5e55dfe63db1db27c6f4b3aa90f4289fcf309f0a9b9b2601c72a71b125964f46f139c003b1a0a73b8e89cd2c12523a3f66358de7dd14b0e1a1c3aee3021912451a6b5410a9ada4e023d654a3beed7d2ed0c31bc2ac199b4e3558772966aecea6a55f6daa6b4901ded70b411675b8d99bb1ff0164f0efb9b8ce5dac7f5851c08b555047fd268661f7d924bbb022c73e5a1b8a3d080d1fcf33fc9bc02d2aa564573379e489a97ec346753818c6b00c67a4029a5387c8402340a4942d295ef8361a4fd63e0283981acf945a77af5358eebfa9c5a81e7078f6bb5183d79194b024d325a3642b85146811707e710e802c70964c5e9345a41b519068b8f3b0d33655cb87224ca5f2837c2d17ba995c59c58664bed8e6ae4f837511bdac295673ca424a7af8f470a027fec9271bdadb981a5a249e63cebdfd70de3f0f70edd8004b09aba4ff217cf9b560db6752b7e9527fce198ccd415242d52920ec4c9a07c91873dd3db1a57d10ebd7eee40aa18afc50294b10329fc239f2bc1cc303cf66a0d24ff01a869e9bc05a3a3d85109f2d148fa018d75016bfea3796ee1efc23a6045441ccd16d2cb053501c4f63b3fd52a45495c0f10486411d301745eade5a8ad1021d7b5d115b6ac96e1d1e71359ed308ee75ae15541046cff592ab3dd0441f735504553c88a8df5473a4d637e81b5449f919f75ac64b8307425fcdabd3c560ba6dad936b9331d0ef9673e7302873403319eea9e562b10b21f6794b2a584993232f24fee915c1945b6d78ec072b60ec43040d012a7e698dbe2283ec1727c825dc05660519f0460ba9b3fea64aa051839ecb67244e07aa907e3b42de8af197cfd4bdae1c7f5ca37f142dfce015afe72b0be1a8430dccbc310846edaf1955bbc7214ba71a74d0465172d13e4aa6903fe1b8db01a625a86e6bb0713bec013403914636d4ba843b60c05d9f27bab4739fe2938173228ffd2fd8d9feae4197eadd5401730b3b205ebef18a2f0efe412bf4d043baadcf6a6e765c5a7326eb7c1da4e734c979cafe5d4136cd21fd6bcff99076e6a1bf2fef7990a5ff23a7a17208053609be404d714f5ff4f1ca88d505b4aa857d1211a03dcf2afa1102d7188b5d51c24869242e70136544934cc61da591f7acfc01eeceb48134320d5228da7fdeccf5ac77e732b48e99eea22633f46a883648525c9bb263bd35fa16fb54576f3e5134b9e486ee469abdad13ea586a89145de1856b126ce5660ae302894fba9c3ef65ae55e2c134bf24d6c69070014bae42143d18b70458e439e33c241003dbb8468303cb286a6a557256821214c933eb92d560104505187c58db39586b014074e7b58fb175ea0d4256a30b4b1ed825c4975d9b42abe1b6dc020e8f4464bc1f2109295a293aab845f90a46a684b0ac0c0b4ac976d4e2512b150d3b7e64000c67f3afa4cb286e908d0c29f4060b730b556f5ab98a9f8f415207807d25190073b3604f8b878a8d7eb18929e4683e11484e1a305ab0ce074982905a353a25e7f3fdf9a17b01f0672b575d6098b5a22850b28b3316feb66f31f90001913101f3dfd82ff8e0b5ffeff745958e15809ae2847fe27e944ea89e6c510795df939d3572b2d2b77110ba6a0b82b6fa66508b7546e60d2b396ef25f4691a58ffb8eece3174c830a0d4947808a35d44f37f7b0f74ade1d07f6fb93d6d4be4ff7939363ffc794c688f213bf20cfbe3b4491e19276c5b3ee69874aa36a5c7d90667287a250f6e8081097155b4532ebb41193ca2280e25222025b60b439c050b464bab7e270b1e00f9c90f04b9f668c9bd56aca961ec47ff7d633263e4afe8dbce4f3e2a45d0ae622c36c2c85daaf9011090a9c340751afa83083362549f7dd37e574678f198d65e30165243a990596c3d727672791b7fd9e70981cc1204694f8035fbc5d439a58c7b13cc54f03e07148f5036bb9d6f99472a56602c7a01db6708faf2857a36de1d1a4c6fd72d70e8fc65c391c59baeb04ba7fa3830f891e8cb6e907b87955e525a302c7b1462503c53b942211b2e15daf72db6c59e4f9e4477bce66234c1866893f41c1db82822d6f6bed1b8dfbde88ebe2b80e6d361c1635b92e472b214d0304aa495ed566b6a65ebafcdf7987c71bdb095bf2128590c37679e7e3e4da504c66ba623f0df76adf27861c95dc0485af7b0d65ada540ad273c1a5f7ae17aaa2612fb50d15a74ef1f13e7fd99b5c036a9546c0c7786ea91487fb109fd50d7f5f962323de326d0ed9ff0d77e9c09183b1598b0bc784a169bb41aa40f458b6723f9bb9d333bb08b51bd42cefc196b2f689909b3714bdc548065f801b62a1c6c3d8a59d3fe3cf0904651a6e054f7ed49afe188223c658504bc59aed9fb866f045da8d4b62581a3ea2ad07bfd4f9ea9e0da186058b9f18e20881e13d6dcc5241592b98d9863816c49dc4f89d5914ef105d0984907c3806a79fed335054b70a8b36e815ba363d8c8c7319ecd302f7ec2907823103fe3b84134bd585bdeb67bbc6caf039ee516a539a31fc6a7c5b1efa4ec253e597eb15dc2e4cc192f1f19b009dbdc1a75f40f795cc6105b5270ac310d58405e047c729b74b4d15caf8a5a754c06c71eb164f321c2dc1d8cfc8154c42fd1ba582b648dae9750a13e546592367e79da1b253541acb3d98d185ff01ec9dbaa3ba3f181d0597a0b79df6a37b2eecdb83a5ecbcd1fadc1a7041076f10c525e13cddd329a6734524a9813898c64bc7706c715d4898750a01e0a532d760152be00cc4b37454e4242c420cfd88f5cfbfbfd8b32e021958f308201096718ea388f0b0f272c22fe76590c6792b00984b9a69473c269edcec0f341787e99913e67da639e733bdb46e6d841e5ce45a637d7f82885add61307950e66487283f000d83e9dba4e8", 0x1000}, {&(0x7f0000001e00)="d8619015068cf2ff33893ae40c4c7bd19e0725e7a4aa4abf3f89bf64c2b8716bbf22b86106ce778bcea479e71cec304f566e2e7da81deba1570bad43b98cfab5eb65e9ee35fc870eb7df0361205063010dfe5cfbcafabc593b7a07ed190bd55561f1194f72875d268fac07a60674e7ead7c9fae553a313743a8665239a3875db7ffd44a3f3d168f115ab2f75", 0x8c}, {&(0x7f0000001ec0)="0a02dea8881f782550ad4ebb22bfe8e99b9d6003a2f0cfd554afe1a64e00efa49721b44cad3f532326747cf7b39cae2d304a8cca125ecb2982a522d2f259cbeec330b706875a03", 0x47}, {&(0x7f0000001f40)="a68047e1768e57fbab2dc301a7c704eb3300d729578f656b5fc9dd33b5247e1e1894a0cb24e86f446b64371b79a77f72747c0f7f11670398e3ab933461a81d3e0d07866f889f7cafe80ea846136174dedaeaf93249d79542154575b5da246deaf8a91e", 0x63}], 0x8, &(0x7f0000000140)=[@rights={{0x10}}], 0x10, 0x48000}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001740)='y', 0x1}, {&(0x7f0000001780)="d132292280d5715a763af9406e46549ae701e21128d939b95f23fd8c460fb7e4af42945188ad2e6fd60f0b932af6af03475c04e9f52532ade691a9dc767c17", 0x3f}, {&(0x7f00000017c0)="18ebad834a68862ef73d180fe6d2a541d200f607d8e153fda98fb08187dd4a22c5fc68101c1773bd214f72cbb8cc9e1fa77e87a810ecd9481738ec498b82b549684f6516d6", 0x45}, {&(0x7f0000001980)="68726f585fbf9b8c40b0a4773fbab41a3666055a35242160f3f18d7d16efa177f911a6289c7f3726eb239aeb2e79ae7d17878ca6c6a857bf6f361c002d89d59e7d5ae387343c8879", 0x48}], 0x4, &(0x7f00000021c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x20000800}}], 0x2, 0x24000881) mount$afs(&(0x7f00000019c0)=ANY=[@ANYBLOB='#'], &(0x7f0000001a00)='.\x00', &(0x7f0000001a40), 0x1, 0x0) 2.553475806s ago: executing program 5 (id=1089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8942, &(0x7f0000000240)={'geneve1\x00', @ifru_map={0x401, 0x8, 0x9, 0x3, 0xa, 0x9}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480200000a0a010100000000000000000a00000a08000540fffffffe080005400000002a080004400000000009000100"], 0x248}, 0x1, 0x0, 0x0, 0x41}, 0x4010) 2.551642659s ago: executing program 1 (id=1090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r5, 0xfffffffffffffc01, 0x0) tee(r3, r5, 0x60000000f00, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.538336966s ago: executing program 6 (id=1091): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000), 0x8) socket$unix(0x1, 0x5, 0x0) listen(r3, 0xf2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000008c00)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x5) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, 0x0, 0x0) 2.466666787s ago: executing program 4 (id=1092): mkdir(&(0x7f0000000000)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1008, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffffffffc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1, 0x7}, 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f00000001c0)='./file0\x00') 1.565835371s ago: executing program 2 (id=1093): r0 = gettid() r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x1) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.506284827s ago: executing program 4 (id=1094): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010", @ANYRES32=0x0, @ANYBLOB="00db00000040000020001280"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) syz_emit_ethernet(0x4e, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="50000000030801047a000000000000000000000006000240000000003400048008000b400000150908000340000000020800026000ff03000000000000001b8f080001400000000e0800074000000006"], 0x50}}, 0x0) r6 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10010000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r6, 0x8038d5, 0x416e, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mbind(&(0x7f0000491000/0x4000)=nil, 0x4000, 0x8000, &(0x7f00000002c0)=0x6, 0x401, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.274818104s ago: executing program 5 (id=1095): r0 = open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000080000ef00"], 0x48) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='\b'], 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) 1.271878421s ago: executing program 1 (id=1096): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f0000000000)='}{\x00', 0x40, 0x46, 0x0) mq_notify(r1, 0x0) mq_notify(r1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) iopl(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x80802, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x5, @pix_mp={0x8, 0x9, 0x56595559, 0x0, 0x3, [{0x8, 0x57}, {0x7, 0x7ff}, {0x7, 0xfffffffe}, {0x7, 0x1}, {0x400, 0x4c}, {0x6, 0x9}, {0xffffffff}, {0x40, 0x401}], 0x6, 0xc, 0x2, 0x2, 0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x12) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x10000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0d00000006000000040000000200000000000000", @ANYRES32=r4, @ANYBLOB="0005952a51e990265300"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES8, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') timerfd_create(0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 1.043231241s ago: executing program 5 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x10001, 0x40008000}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) getpid() socket$igmp6(0xa, 0x3, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x8010743f, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) 662.951875ms ago: executing program 6 (id=1098): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008f}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) unshare(0x2a020480) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) 642.962527ms ago: executing program 1 (id=1099): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x80000001, 0x8002) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_open_dev$sndctrl(0x0, 0x9, 0x101040) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000340)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) r3 = epoll_create1(0x0) r4 = eventfd2(0x0, 0x0) epoll_pwait2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000180)={0x20000005}) ioctl$TIOCSCTTY(r2, 0x540e, 0x5) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000380)="f4acaf2297729d46cfe3a19fe9996f1d06a30213e011cda6c9cb488642f76fe5d25145cb4df8a66cac5382e221ad814cf5352a762ee46b3e23e3d43d8c4fd2b75517e097f11eac7e46fe0de7083d48", 0x4f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c0010800400100004000880080002"], 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) pipe2$9p(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x11, 0x7efffeff00000000) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2 (id=1100): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0xa4ffffff, @loopback}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x400000000200, 0x0, 0x0, 0x400000000230, 0x400000000260], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0xeb1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1433de53, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r5, 0x4b000) syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) kernel console output (not intermixed with test programs): 2][ T9] usb 5-1: usb_control_msg returned -32 [ 183.111298][ T9] usbtmc 5-1:16.0: can't read capabilities [ 183.256733][ T7584] chnl_net:caif_netlink_parms(): no params data found [ 183.336814][ T7598] Cannot find add_set index 0 as target [ 183.406526][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.418011][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.509450][ T7584] bridge_slave_0: entered allmulticast mode [ 183.516253][ T7584] bridge_slave_0: entered promiscuous mode [ 183.525411][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.532593][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.519319][ T7584] bridge_slave_1: entered allmulticast mode [ 184.526070][ T7584] bridge_slave_1: entered promiscuous mode [ 184.731271][ T5862] usb 5-1: USB disconnect, device number 20 [ 184.975070][ T30] audit: type=1400 audit(1742093863.932:584): avc: denied { write } for pid=7609 comm="syz.2.446" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 185.004646][ T5816] Bluetooth: hci5: command tx timeout [ 185.012265][ T30] audit: type=1400 audit(1742093863.932:585): avc: denied { open } for pid=7609 comm="syz.2.446" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 185.088860][ T7615] SELinux: policydb version 1738910034 does not match my version range 15-34 [ 185.094392][ T30] audit: type=1400 audit(1742093864.072:586): avc: denied { connect } for pid=7614 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.102348][ T7615] SELinux: failed to load policy [ 185.117924][ T30] audit: type=1400 audit(1742093864.072:587): avc: denied { load_policy } for pid=7614 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.142323][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.207251][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.230011][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.266621][ T7584] team0: Port device team_slave_0 added [ 185.293637][ T7584] team0: Port device team_slave_1 added [ 185.308087][ T30] audit: type=1400 audit(1742093864.242:588): avc: denied { setattr } for pid=7614 comm="syz.0.449" name="PPTP" dev="sockfs" ino=15785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.331356][ T5862] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 185.340059][ T30] audit: type=1400 audit(1742093864.292:589): avc: denied { read } for pid=7612 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.385416][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.392865][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.426686][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.446011][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.456820][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.484355][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.499195][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 185.505735][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 185.517489][ T5862] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 185.526802][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 185.544533][ T5862] usb 5-1: Product: syz [ 185.549747][ T5862] usb 5-1: Manufacturer: syz [ 185.559793][ T5862] usb 5-1: SerialNumber: syz [ 185.572310][ T5862] usb 5-1: config 0 descriptor?? [ 185.580340][ T7584] hsr_slave_0: entered promiscuous mode [ 185.587245][ T7611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 185.595346][ T7584] hsr_slave_1: entered promiscuous mode [ 185.603159][ T5862] hub 5-1:0.0: bad descriptor, ignoring hub [ 185.610614][ T7584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.619234][ T5862] hub 5-1:0.0: probe with driver hub failed with error -5 [ 185.626396][ T7584] Cannot create hsr debugfs directory [ 186.058114][ T7584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.073702][ T7584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.093626][ T7584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.121277][ T30] audit: type=1400 audit(1742093865.102:590): avc: denied { read } for pid=7631 comm="syz.1.452" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 186.124194][ T7632] netlink: 'syz.1.452': attribute type 4 has an invalid length. [ 186.144821][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.161784][ T7584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.242087][ T5862] usb 5-1: USB disconnect, device number 21 [ 186.271778][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.328007][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.350172][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.357293][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.389833][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.396926][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.578160][ T7641] openvswitch: netlink: IPv4 tun info is not correct [ 186.917581][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.079417][ T5816] Bluetooth: hci5: command tx timeout [ 187.561735][ T7584] veth0_vlan: entered promiscuous mode [ 187.615682][ T7584] veth1_vlan: entered promiscuous mode [ 187.689572][ T7584] veth0_macvtap: entered promiscuous mode [ 187.702470][ T7584] veth1_macvtap: entered promiscuous mode [ 187.752579][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.792801][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.798932][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.830915][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.181665][ T5816] Bluetooth: hci5: command tx timeout [ 189.189926][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.204296][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.214947][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.225585][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.236836][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.247596][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.258365][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.287963][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.317491][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.346708][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.360161][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.370091][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.382519][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.399948][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.679168][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.691366][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.701987][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.718023][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.744322][ T7584] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.757664][ T7584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.771883][ T7584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.780895][ T7584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.845205][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.864539][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.912110][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.925891][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.937273][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 189.937284][ T30] audit: type=1400 audit(1742093868.932:592): avc: denied { mounton } for pid=7584 comm="syz-executor" path="/root/syzkaller.CxDwpH/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 189.969417][ T48] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 189.981582][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'. [ 190.048069][ T30] audit: type=1400 audit(1742093868.932:593): avc: denied { mount } for pid=7584 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 190.087475][ T30] audit: type=1400 audit(1742093868.932:594): avc: denied { mounton } for pid=7584 comm="syz-executor" path="/root/syzkaller.CxDwpH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 190.116513][ T7687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.213904][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 190.240761][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.247382][ T48] usb 3-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.00 [ 190.268392][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.288341][ T48] usb 3-1: config 0 descriptor?? [ 190.299707][ T30] audit: type=1400 audit(1742093868.932:595): avc: denied { mounton } for pid=7584 comm="syz-executor" path="/root/syzkaller.CxDwpH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 190.318969][ T7690] raw_sendmsg: syz.5.440 forgot to set AF_INET. Fix it! [ 190.638211][ T7691] hfsplus: unable to find HFS+ superblock [ 190.761503][ T30] audit: type=1400 audit(1742093868.962:596): avc: denied { mounton } for pid=7584 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 190.785396][ T30] audit: type=1400 audit(1742093868.962:597): avc: denied { mount } for pid=7584 comm="syz-executor" name="/" dev="gadgetfs" ino=6742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 190.819773][ T30] audit: type=1400 audit(1742093868.972:598): avc: denied { nlmsg_write } for pid=7681 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.891659][ T30] audit: type=1400 audit(1742093869.302:599): avc: denied { node_bind } for pid=7689 comm="syz.5.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 190.915772][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.930140][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.991749][ T30] audit: type=1400 audit(1742093869.882:600): avc: denied { map } for pid=7678 comm="syz.2.463" path="socket:[15146]" dev="sockfs" ino=15146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.029567][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 191.036616][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 191.056963][ T48] usb 3-1: USB disconnect, device number 16 [ 191.239718][ T5816] Bluetooth: hci5: command tx timeout [ 191.327015][ T30] audit: type=1400 audit(1742093869.882:601): avc: denied { read } for pid=7678 comm="syz.2.463" path="socket:[15146]" dev="sockfs" ino=15146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.329455][ T7701] 9pnet_fd: Insufficient options for proto=fd [ 193.887211][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.109281][ T7747] netlink: 80 bytes leftover after parsing attributes in process `syz.2.480'. [ 195.379291][ T2149] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 195.469483][ T7749] 9pnet_fd: Insufficient options for proto=fd [ 195.599829][ T2149] usb 3-1: Using ep0 maxpacket: 32 [ 195.650736][ T2149] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 195.659162][ T2149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.689144][ T2149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.862399][ T2149] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 195.871897][ T2149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.890148][ T2149] usb 3-1: config 0 descriptor?? [ 195.924331][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 195.924343][ T30] audit: type=1400 audit(1742093874.912:605): avc: denied { ioctl } for pid=7759 comm="syz.1.485" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.659424][ T2149] logitech 0003:046D:C29C.0008: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 196.767937][ T7777] netlink: 'syz.5.488': attribute type 1 has an invalid length. [ 196.776764][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.5.488'. [ 196.879924][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.999109][ T2149] logitech 0003:046D:C29C.0008: no inputs found [ 197.216470][ T2149] usb 3-1: USB disconnect, device number 17 [ 197.379265][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 197.400936][ T10] usb 1-1: config 0 has no interfaces? [ 197.407140][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 197.449342][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.475867][ T10] usb 1-1: config 0 descriptor?? [ 197.725642][ T5816] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 197.735301][ T5862] usb 1-1: USB disconnect, device number 9 [ 197.949237][ T30] audit: type=1400 audit(1742093876.802:606): avc: denied { name_bind } for pid=7787 comm="syz.2.494" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 199.069596][ T2149] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.239173][ T2149] usb 1-1: Using ep0 maxpacket: 8 [ 199.254495][ T2149] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 199.294619][ T2149] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.310131][ T2149] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.320112][ T2149] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.335558][ T2149] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.354352][ T2149] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.364467][ T2149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.386210][ T7814] FAULT_INJECTION: forcing a failure. [ 199.386210][ T7814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.439634][ T7814] CPU: 0 UID: 0 PID: 7814 Comm: syz.1.501 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 199.439659][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.439668][ T7814] Call Trace: [ 199.439674][ T7814] [ 199.439679][ T7814] dump_stack_lvl+0x16c/0x1f0 [ 199.439707][ T7814] should_fail_ex+0x50a/0x650 [ 199.439737][ T7814] _copy_to_user+0x32/0xd0 [ 199.439756][ T7814] simple_read_from_buffer+0xd0/0x160 [ 199.439783][ T7814] proc_fail_nth_read+0x198/0x270 [ 199.439814][ T7814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.439838][ T7814] ? rw_verify_area+0xcf/0x680 [ 199.439861][ T7814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.439884][ T7814] vfs_read+0x1df/0xbf0 [ 199.439909][ T7814] ? __fget_files+0x1fc/0x3a0 [ 199.439926][ T7814] ? __pfx___mutex_lock+0x10/0x10 [ 199.439948][ T7814] ? __pfx_vfs_read+0x10/0x10 [ 199.439978][ T7814] ? __fget_files+0x206/0x3a0 [ 199.440001][ T7814] ksys_read+0x12b/0x250 [ 199.440014][ T7814] ? __pfx_ksys_read+0x10/0x10 [ 199.440040][ T7814] do_syscall_64+0xcd/0x250 [ 199.440063][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.440085][ T7814] RIP: 0033:0x7f80c5b8bb7c [ 199.440098][ T7814] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 199.440114][ T7814] RSP: 002b:00007f80c6a81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.440130][ T7814] RAX: ffffffffffffffda RBX: 00007f80c5da5fa0 RCX: 00007f80c5b8bb7c [ 199.440140][ T7814] RDX: 000000000000000f RSI: 00007f80c6a810a0 RDI: 0000000000000004 [ 199.440149][ T7814] RBP: 00007f80c6a81090 R08: 0000000000000000 R09: 0000000000000000 [ 199.440158][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.440167][ T7814] R13: 0000000000000000 R14: 00007f80c5da5fa0 R15: 00007ffee7b11c98 [ 199.440190][ T7814] [ 199.646676][ T2149] usb 1-1: usb_control_msg returned -32 [ 199.652295][ T2149] usbtmc 1-1:16.0: can't read capabilities [ 199.831301][ T7824] FAULT_INJECTION: forcing a failure. [ 199.831301][ T7824] name failslab, interval 1, probability 0, space 0, times 0 [ 199.848193][ T7824] CPU: 1 UID: 0 PID: 7824 Comm: syz.4.505 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 199.848214][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.848224][ T7824] Call Trace: [ 199.848229][ T7824] [ 199.848235][ T7824] dump_stack_lvl+0x16c/0x1f0 [ 199.848261][ T7824] should_fail_ex+0x50a/0x650 [ 199.848287][ T7824] ? fs_reclaim_acquire+0xae/0x150 [ 199.848314][ T7824] should_failslab+0xc2/0x120 [ 199.848334][ T7824] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 199.848352][ T7824] ? __pfx___lock_acquire+0x10/0x10 [ 199.848373][ T7824] ? __alloc_skb+0x2b1/0x380 [ 199.848398][ T7824] __alloc_skb+0x2b1/0x380 [ 199.848419][ T7824] ? __pfx___alloc_skb+0x10/0x10 [ 199.848440][ T7824] ? __lock_acquire+0xcc5/0x3c40 [ 199.848466][ T7824] alloc_skb_with_frags+0xe4/0x850 [ 199.848483][ T7824] ? __pfx___lock_acquire+0x10/0x10 [ 199.848504][ T7824] ? avc_has_perm_noaudit+0x61/0x3a0 [ 199.848525][ T7824] sock_alloc_send_pskb+0x7f1/0x980 [ 199.848547][ T7824] ? find_held_lock+0x2d/0x110 [ 199.848571][ T7824] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 199.848594][ T7824] ? lock_acquire+0x2f/0xb0 [ 199.848613][ T7824] ? dev_get_by_index+0x37/0x380 [ 199.848640][ T7824] raw_sendmsg+0x25d/0x1160 [ 199.848660][ T7824] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 199.848684][ T7824] ? iovec_from_user.part.0+0x7e/0x130 [ 199.848700][ T7824] ? __pfx_raw_sendmsg+0x10/0x10 [ 199.848728][ T7824] ____sys_sendmsg+0xaaf/0xc90 [ 199.848747][ T7824] ? copy_msghdr_from_user+0x10b/0x160 [ 199.848770][ T7824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.848807][ T7824] ___sys_sendmsg+0x135/0x1e0 [ 199.848832][ T7824] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.848866][ T7824] ? __pfx_lock_release+0x10/0x10 [ 199.848886][ T7824] ? trace_lock_acquire+0x14e/0x1f0 [ 199.848909][ T7824] ? __fget_files+0x206/0x3a0 [ 199.848931][ T7824] __sys_sendmsg+0x16e/0x220 [ 199.848956][ T7824] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.848992][ T7824] do_syscall_64+0xcd/0x250 [ 199.849012][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.849031][ T7824] RIP: 0033:0x7f510598d169 [ 199.849047][ T7824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.849061][ T7824] RSP: 002b:00007f510670d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.849077][ T7824] RAX: ffffffffffffffda RBX: 00007f5105ba5fa0 RCX: 00007f510598d169 [ 199.849086][ T7824] RDX: 0000000000028004 RSI: 0000400000000000 RDI: 0000000000000003 [ 199.849095][ T7824] RBP: 00007f510670d090 R08: 0000000000000000 R09: 0000000000000000 [ 199.849104][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.849113][ T7824] R13: 0000000000000000 R14: 00007f5105ba5fa0 R15: 00007fffc3a0f7e8 [ 199.849132][ T7824] [ 200.260769][ T7826] netlink: 68 bytes leftover after parsing attributes in process `syz.1.504'. [ 200.753243][ T7802] usbtmc 1-1:16.0: control status returned 5 [ 200.780092][ T30] audit: type=1400 audit(1742093879.762:607): avc: denied { write } for pid=7797 comm="syz.0.496" path="socket:[16784]" dev="sockfs" ino=16784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.859260][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 200.946947][ T7832] sp0: Synchronizing with TNC [ 200.968732][ T30] audit: type=1400 audit(1742093879.952:608): avc: denied { setopt } for pid=7831 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.019172][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 201.028154][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.049193][ T10] usb 6-1: config 0 has no interface number 0 [ 201.055291][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.078127][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.106832][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 201.120420][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.143232][ T10] usb 6-1: config 0 descriptor?? [ 201.374427][ T10] usbhid 6-1:0.1: can't add hid device: -71 [ 201.408937][ T10] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 201.463333][ T10] usb 6-1: USB disconnect, device number 2 [ 201.659423][ T5862] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 201.768934][ T30] audit: type=1400 audit(1742093880.752:609): avc: denied { mount } for pid=7850 comm="syz.5.515" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 201.800636][ T5823] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 201.809798][ T5823] Bluetooth: hci0: Injecting HCI hardware error event [ 201.817979][ T5823] Bluetooth: hci0: hardware error 0x00 [ 202.030152][ T7853] FAULT_INJECTION: forcing a failure. [ 202.030152][ T7853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.043413][ T7853] CPU: 1 UID: 0 PID: 7853 Comm: syz.5.515 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 202.043436][ T7853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.043446][ T7853] Call Trace: [ 202.043451][ T7853] [ 202.043457][ T7853] dump_stack_lvl+0x16c/0x1f0 [ 202.043483][ T7853] should_fail_ex+0x50a/0x650 [ 202.043512][ T7853] _copy_from_user+0x2e/0xd0 [ 202.043531][ T7853] memdup_user+0x71/0xd0 [ 202.043554][ T7853] strndup_user+0x78/0xe0 [ 202.043578][ T7853] __x64_sys_fsopen+0x9c/0x240 [ 202.043599][ T7853] do_syscall_64+0xcd/0x250 [ 202.043623][ T7853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.043646][ T7853] RIP: 0033:0x7f03cbf8d169 [ 202.043659][ T7853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.043675][ T7853] RSP: 002b:00007f03cce41038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 202.043691][ T7853] RAX: ffffffffffffffda RBX: 00007f03cc1a6160 RCX: 00007f03cbf8d169 [ 202.043702][ T7853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000080 [ 202.043711][ T7853] RBP: 00007f03cce41090 R08: 0000000000000000 R09: 0000000000000000 [ 202.043721][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.043730][ T7853] R13: 0000000000000000 R14: 00007f03cc1a6160 R15: 00007ffe3d528a98 [ 202.043752][ T7853] [ 202.458232][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.470042][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 202.477701][ T5862] usb 5-1: can't read configurations, error -71 [ 203.340626][ T5816] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 203.432729][ T26] usb 1-1: USB disconnect, device number 10 [ 203.472714][ T7873] evm: overlay not supported [ 203.959230][ T5823] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 204.043800][ T30] audit: type=1400 audit(1742093883.032:610): avc: denied { watch } for pid=7875 comm="syz.4.521" path="/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 204.125326][ T30] audit: type=1400 audit(1742093883.032:611): avc: denied { watch_sb watch_reads } for pid=7875 comm="syz.4.521" path="/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 204.322853][ T7883] kAFS: No cell specified [ 204.379566][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 204.592902][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.520'. [ 204.927577][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 205.230376][ T10] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 205.241522][ T10] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8 [ 205.254593][ T10] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 205.264363][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 205.272581][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.299085][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.347678][ T10] usb 3-1: Product: syz [ 205.372958][ T10] usb 3-1: Manufacturer: syz [ 205.384886][ T10] usb 3-1: SerialNumber: syz [ 205.400745][ T7894] SELinux: ebitmap: truncated map [ 205.414760][ T7894] SELinux: failed to load policy [ 205.431556][ T7878] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.439174][ T7878] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.474174][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 205.676828][ T7880] "syz.0.523" (7880) uses obsolete ecb(arc4) skcipher [ 206.059273][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 206.080941][ T10] usb 3-1: USB disconnect, device number 18 [ 207.459231][ T30] audit: type=1400 audit(1742093886.422:612): avc: denied { bind } for pid=7932 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 207.755029][ T30] audit: type=1400 audit(1742093886.422:613): avc: denied { write } for pid=7932 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.601577][ T5912] IPVS: starting estimator thread 0... [ 208.699224][ T7960] IPVS: using max 27 ests per chain, 64800 per kthread [ 208.839710][ T7964] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=768 (1536 ns) > initial count (1152 ns). Using initial count to start timer. [ 208.999557][ T7968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.544'. [ 209.022052][ T7968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.544'. [ 209.032047][ T7970] netlink: 20 bytes leftover after parsing attributes in process `syz.5.545'. [ 209.060307][ T7970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.269790][ T2149] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.489471][ T2149] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 209.505164][ T7969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.515511][ T2149] usb 1-1: config 0 has no interface number 0 [ 209.529228][ T2149] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 209.549139][ T2149] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.570841][ T2149] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 209.580343][ T2149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.588327][ T2149] usb 1-1: Product: syz [ 209.593098][ T2149] usb 1-1: Manufacturer: syz [ 209.597704][ T2149] usb 1-1: SerialNumber: syz [ 209.610044][ T2149] usb 1-1: config 0 descriptor?? [ 209.619324][ T7968] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 209.637200][ T2149] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 209.679393][ T2149] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 210.209208][ T30] audit: type=1326 audit(1742093889.192:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5105984127 code=0x7ffc0000 [ 210.344985][ T30] audit: type=1326 audit(1742093889.192:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5105929359 code=0x7ffc0000 [ 210.380237][ T5861] usb 1-1: USB disconnect, device number 11 [ 210.417195][ T5861] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 210.433208][ T30] audit: type=1326 audit(1742093889.192:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5105984127 code=0x7ffc0000 [ 210.438428][ T5861] cyberjack 1-1:0.69: device disconnected [ 210.459374][ T30] audit: type=1326 audit(1742093889.232:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5105929359 code=0x7ffc0000 [ 210.568292][ T30] audit: type=1326 audit(1742093889.232:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5105984127 code=0x7ffc0000 [ 210.596356][ T30] audit: type=1326 audit(1742093889.232:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5105929359 code=0x7ffc0000 [ 210.620243][ T30] audit: type=1326 audit(1742093889.232:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5105984127 code=0x7ffc0000 [ 210.644051][ T30] audit: type=1326 audit(1742093889.232:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5105929359 code=0x7ffc0000 [ 211.370298][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 211.633701][ T8002] openvswitch: netlink: IPv4 tun info is not correct [ 212.359653][ T5912] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 212.376433][ T5912] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.680402][ T8020] Bluetooth: MGMT ver 1.23 [ 213.837416][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 213.837430][ T30] audit: type=1400 audit(1742093892.822:678): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 214.045638][ T30] audit: type=1400 audit(1742093893.032:679): avc: denied { ioctl } for pid=8047 comm="syz.0.571" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 214.088029][ T8043] bridge0: entered promiscuous mode [ 214.093539][ T8043] macvlan2: entered promiscuous mode [ 214.188583][ T30] audit: type=1400 audit(1742093893.072:680): avc: denied { ioctl } for pid=8042 comm="syz.5.570" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 214.197170][ T8053] fuse: Unknown parameter 'Oroup_id' [ 215.264214][ T8062] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.282581][ T8062] IPv6: Can't replace route, no match found [ 215.392816][ T30] audit: type=1400 audit(1742093894.372:681): avc: denied { ioctl } for pid=8044 comm="syz.2.569" path="socket:[18564]" dev="sockfs" ino=18564 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 215.639124][ T48] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 215.799170][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 215.828381][ T48] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 216.051799][ T48] usb 5-1: config 0 has no interface number 0 [ 216.070876][ T48] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 216.119770][ T48] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 1797, setting to 1024 [ 216.140366][ T48] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 216.159195][ T48] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 216.175539][ T48] usb 5-1: Product: syz [ 216.180109][ T48] usb 5-1: SerialNumber: syz [ 216.190273][ T48] usb 5-1: config 0 descriptor?? [ 216.195901][ T8065] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 216.213257][ T48] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 216.229770][ T48] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 [ 216.313054][ T30] audit: type=1400 audit(1742093895.302:682): avc: denied { connect } for pid=8076 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.349174][ T8078] vivid-000: disconnect [ 216.681570][ T30] audit: type=1400 audit(1742093895.352:683): avc: denied { read } for pid=8076 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.756230][ T8076] vivid-000: reconnect [ 216.773850][ T30] audit: type=1400 audit(1742093895.412:684): avc: denied { write } for pid=8076 comm="syz.0.579" path="socket:[18591]" dev="sockfs" ino=18591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.014584][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 217.223781][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.224505][ T5861] usb 5-1: USB disconnect, device number 24 [ 217.230741][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 217.405136][ T5861] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 218.466710][ T8106] block device autoloading is deprecated and will be removed. [ 218.481545][ T8106] syz.5.585: attempt to access beyond end of device [ 218.481545][ T8106] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 219.149229][ T48] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 219.760925][ T48] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.793071][ T30] audit: type=1400 audit(1742093898.782:685): avc: denied { getopt } for pid=8126 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.802170][ T48] usb 6-1: config 0 interface 0 has no altsetting 0 [ 219.827978][ T48] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 219.919123][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.948136][ T48] usb 6-1: config 0 descriptor?? [ 220.036147][ T30] audit: type=1326 audit(1742093899.022:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8129 comm="syz.1.594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80c5b8d169 code=0x0 [ 220.119015][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.127281][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.383755][ T48] ntrig 0003:1B96:0009.000A: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.5-1/input0 [ 220.674533][ T48] ntrig 0003:1B96:0009.000A: Firmware version: 0.0.0.0.0 (0000 0000) [ 220.837459][ T8153] Bluetooth: MGMT ver 1.23 [ 220.842153][ T8153] Bluetooth: hci0: load_link_keys: too big key_count value 65535 [ 221.176793][ T5861] usb 6-1: USB disconnect, device number 3 [ 221.751068][ T8162] 9pnet_fd: Insufficient options for proto=fd [ 222.825582][ T30] audit: type=1400 audit(1742093901.812:687): avc: denied { connect } for pid=8165 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 222.844887][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.251197][ T30] audit: type=1400 audit(1742093902.212:688): avc: denied { ioctl } for pid=8175 comm="syz.2.611" path="socket:[18815]" dev="sockfs" ino=18815 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.331037][ T30] audit: type=1400 audit(1742093902.212:689): avc: denied { accept } for pid=8175 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.830143][ T30] audit: type=1400 audit(1742093903.822:690): avc: denied { create } for pid=8197 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 224.849584][ T8196] syz_tun: entered allmulticast mode [ 226.059140][ T30] audit: type=1400 audit(1742093905.042:691): avc: denied { bind } for pid=8213 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.078256][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.269298][ T30] audit: type=1400 audit(1742093905.092:692): avc: denied { setopt } for pid=8218 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 226.293716][ T30] audit: type=1400 audit(1742093905.282:693): avc: denied { getopt } for pid=8220 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.313510][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.759296][ T30] audit: type=1400 audit(1742093905.382:694): avc: denied { mount } for pid=8218 comm="syz.0.623" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 227.781023][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.030692][ T8239] tipc: Started in network mode [ 230.035906][ T8239] tipc: Node identity 40000001, cluster identity 4711 [ 230.059372][ T8239] tipc: Node number set to 1073741825 [ 231.211645][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.635'. [ 231.246027][ T8260] veth3: entered promiscuous mode [ 231.261301][ T8260] veth3: entered allmulticast mode [ 231.458254][ T30] audit: type=1400 audit(1742093910.442:695): avc: denied { getopt } for pid=8266 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.634887][ T8267] befs: (nullb0): No write support. Marking filesystem read-only [ 231.643711][ T8267] befs: (nullb0): invalid magic header [ 231.696000][ T30] audit: type=1400 audit(1742093910.682:696): avc: denied { rename } for pid=8253 comm="syz.2.633" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 232.434947][ T8288] netlink: 'syz.5.640': attribute type 1 has an invalid length. [ 232.448100][ T8288] netlink: 'syz.5.640': attribute type 2 has an invalid length. [ 232.559527][ T5861] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 232.809825][ T5861] usb 3-1: device descriptor read/64, error -71 [ 232.867007][ T8292] virtiofs: Unknown parameter 'u!„N {îв—y6¹Î{.‚ÞSšsƯö¾ÿü}­kyéoe<3²r—¸_¡‡âZ39ìZõÏ %:áÀÀÄX";·)7¼#åO3é¶ÿÓ‰‹¶âfY~Í€Å' [ 232.992650][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.119137][ T5861] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 233.259112][ T5861] usb 3-1: device descriptor read/64, error -71 [ 233.390005][ T5862] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 233.423629][ T5861] usb usb3-port1: attempt power cycle [ 234.069210][ T5862] usb 6-1: device descriptor read/64, error -71 [ 234.099121][ T5861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 234.143794][ T5861] usb 3-1: device descriptor read/8, error -71 [ 234.399949][ T5862] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 234.449288][ T5861] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 234.503356][ T5861] usb 3-1: device descriptor read/8, error -71 [ 234.691371][ T5861] usb usb3-port1: unable to enumerate USB device [ 234.911896][ T8316] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 234.918433][ T8316] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 234.926358][ T8316] vhci_hcd vhci_hcd.0: Device attached [ 235.322599][ T5862] usb 6-1: device descriptor read/64, error -71 [ 235.441698][ T5862] usb usb6-port1: attempt power cycle [ 235.459311][ T2149] usb 36-1: SetAddress Request (2) to port 0 [ 235.465943][ T2149] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 235.629398][ T8326] netlink: 'syz.4.651': attribute type 3 has an invalid length. [ 235.837918][ T5862] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 235.875751][ T5862] usb 6-1: device descriptor read/8, error -71 [ 236.675556][ T30] audit: type=1400 audit(1742093915.662:697): avc: denied { ioctl } for pid=8341 comm="syz.0.656" path="socket:[19090]" dev="sockfs" ino=19090 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.700814][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.841653][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.659'. [ 238.203261][ T8317] vhci_hcd: connection reset by peer [ 238.249246][ T63] vhci_hcd: stop threads [ 238.258665][ T63] vhci_hcd: release socket [ 238.263503][ T63] vhci_hcd: disconnect device [ 238.359240][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 238.395746][ T30] audit: type=1400 audit(1742093917.384:698): avc: denied { bind } for pid=8362 comm="syz.4.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.414946][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.541538][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 238.551458][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.574632][ T10] usb 6-1: config 0 descriptor?? [ 238.599883][ T10] cp210x 6-1:0.0: cp210x converter detected [ 239.314058][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 239.391652][ T10] usb 6-1: USB disconnect, device number 8 [ 239.458111][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.329838][ T10] cp210x 6-1:0.0: device disconnected [ 240.454926][ T8381] kAFS: unparsable volume name [ 240.519929][ T2149] usb 36-1: device descriptor read/8, error -110 [ 240.934839][ T2149] usb usb36-port1: attempt power cycle [ 241.348804][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 242.104268][ T30] audit: type=1400 audit(1742093921.084:699): avc: denied { name_bind } for pid=8401 comm="syz.0.676" path="socket:[19270]" dev="sockfs" ino=19270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.275987][ T8404] openvswitch: netlink: IPv4 tun info is not correct [ 242.296826][ T2149] usb usb36-port1: unable to enumerate USB device [ 242.451880][ T30] audit: type=1400 audit(1742093921.304:700): avc: denied { setopt } for pid=8401 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 242.503643][ T8409] tipc: Started in network mode [ 242.514382][ T8409] tipc: Node identity 40000001, cluster identity 4711 [ 242.547698][ T8409] tipc: Node number set to 1073741825 [ 242.560709][ T8413] kAFS: unparsable volume name [ 243.884690][ T8429] 9pnet_fd: Insufficient options for proto=fd [ 245.006554][ T30] audit: type=1400 audit(1742093923.694:701): avc: denied { execute } for pid=8434 comm="syz.2.687" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 245.030300][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.479596][ T8446] openvswitch: netlink: IPv4 tun info is not correct [ 245.610646][ T5822] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 246.399299][ T30] audit: type=1400 audit(1742093925.334:702): avc: denied { read write } for pid=8451 comm="syz.4.692" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 246.430169][ T5822] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 246.447774][ T26] kernel write not supported for file /fb0 (pid: 26 comm: kworker/1:0) [ 246.452408][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.475190][ T30] audit: type=1400 audit(1742093925.334:703): avc: denied { open } for pid=8451 comm="syz.4.692" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 246.498565][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.509724][ T5822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 246.518882][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.527779][ T30] audit: type=1400 audit(1742093925.494:704): avc: denied { ioctl } for pid=8451 comm="syz.4.692" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 246.552646][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.559679][ T5822] usb 3-1: SerialNumber: syz [ 246.569532][ T5822] usb 3-1: 0:2 : does not exist [ 246.574426][ T5822] usb 3-1: unit 97 not found! [ 246.642267][ T8455] kAFS: unparsable volume name [ 246.834479][ T5823] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 248.209738][ T8468] tty tty3: ldisc open failed (-12), clearing slot 2 [ 249.385594][ T26] usb 3-1: USB disconnect, device number 23 [ 254.448577][ T8524] openvswitch: netlink: IPv4 tun info is not correct [ 254.631475][ T30] audit: type=1400 audit(1742093933.624:705): avc: denied { read } for pid=8525 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.815152][ T30] audit: type=1400 audit(1742093933.754:706): avc: denied { shutdown } for pid=8525 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.069827][ T8527] netlink: 'syz.0.710': attribute type 4 has an invalid length. [ 255.595092][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.087528][ T30] audit: type=1400 audit(1742093935.074:707): avc: denied { relabelfrom } for pid=8539 comm="syz.2.715" name="NETLINK" dev="sockfs" ino=19885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.372528][ T30] audit: type=1400 audit(1742093935.074:708): avc: denied { relabelto } for pid=8539 comm="syz.2.715" name="NETLINK" dev="sockfs" ino=19885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 256.905505][ T5816] Bluetooth: hci5: command 0x0405 tx timeout [ 257.144895][ T8547] capability: warning: `syz.2.719' uses deprecated v2 capabilities in a way that may be insecure [ 257.674967][ T30] audit: type=1400 audit(1742093936.664:709): avc: denied { write } for pid=8551 comm="syz.4.720" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.727528][ T8527] syz.0.710 (8527) used greatest stack depth: 20496 bytes left [ 258.329317][ T8557] netlink: 84 bytes leftover after parsing attributes in process `syz.0.722'. [ 259.281335][ T8572] 9pnet_fd: Insufficient options for proto=fd [ 259.541274][ T8573] lo speed is unknown, defaulting to 1000 [ 259.547353][ T8573] lo speed is unknown, defaulting to 1000 [ 259.605485][ T8575] netlink: 'syz.0.727': attribute type 11 has an invalid length. [ 259.629254][ T8575] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.727'. [ 259.766577][ T8573] lo speed is unknown, defaulting to 1000 [ 259.777106][ T8573] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.788870][ T8573] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 260.145992][ T30] audit: type=1400 audit(1742093938.904:710): avc: denied { accept } for pid=8576 comm="syz.5.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.418461][ T8573] lo speed is unknown, defaulting to 1000 [ 260.434487][ T8573] lo speed is unknown, defaulting to 1000 [ 260.576902][ T30] audit: type=1400 audit(1742093939.564:711): avc: denied { setopt } for pid=8559 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 260.705263][ T8573] lo speed is unknown, defaulting to 1000 [ 260.821920][ T8573] lo speed is unknown, defaulting to 1000 [ 260.874246][ T8573] lo speed is unknown, defaulting to 1000 [ 260.982764][ T8573] lo speed is unknown, defaulting to 1000 [ 261.209252][ T9] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 261.515729][ T8603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.009518][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 262.111248][ T9] usb 5-1: config 179 has no interface number 0 [ 262.119182][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 262.162218][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 262.215858][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 262.244430][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 262.284138][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 262.297931][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 262.338864][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.385872][ T8588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 262.395105][ T9] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 262.435865][ T30] audit: type=1400 audit(1742093941.424:712): avc: denied { getopt } for pid=8614 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 262.441151][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 262.479414][ T8615] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 262.508036][ T8615] QAT: Device 198 not found [ 263.261881][ T8626] 9pnet_fd: Insufficient options for proto=fd [ 263.958375][ T30] audit: type=1326 audit(1742093942.944:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8632 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 264.050986][ T30] audit: type=1326 audit(1742093942.944:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8632 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 264.097331][ T30] audit: type=1326 audit(1742093942.994:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8632 comm="syz.5.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 264.125358][ T8636] syz.0.746 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 264.178573][ T8638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.724160][ T48] usb 5-1: USB disconnect, device number 25 [ 265.378287][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.412343][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.515921][ T30] audit: type=1326 audit(1742093944.504:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408f98d169 code=0x7ffc0000 [ 265.569760][ T30] audit: type=1326 audit(1742093944.504:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f408f98d169 code=0x7ffc0000 [ 267.250021][ T30] audit: type=1400 audit(1742093946.194:718): avc: denied { setopt } for pid=8655 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 268.404171][ T30] audit: type=1400 audit(1742093947.394:719): avc: denied { create } for pid=8683 comm="syz.5.759" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.742391][ T30] audit: type=1400 audit(1742093948.724:720): avc: denied { write } for pid=8683 comm="syz.5.759" name="file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.836846][ T30] audit: type=1400 audit(1742093948.724:721): avc: denied { open } for pid=8683 comm="syz.5.759" path="/52/file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 270.532253][ T30] audit: type=1400 audit(1742093948.724:722): avc: denied { ioctl } for pid=8683 comm="syz.5.759" path="/52/file0" dev="tmpfs" ino=298 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 270.659273][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 270.814076][ T10] usb 5-1: device descriptor read/64, error -71 [ 270.915260][ T30] audit: type=1400 audit(1742093949.904:723): avc: denied { unlink } for pid=7584 comm="syz-executor" name="file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 271.159259][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 272.368289][ T10] usb 5-1: device descriptor read/64, error -71 [ 272.564107][ T10] usb usb5-port1: attempt power cycle [ 274.019002][ T5823] Bluetooth: hci2: unexpected cc 0x042d length: 63 > 7 [ 274.027590][ T5823] Bluetooth: hci2: unexpected event for opcode 0x042d [ 274.129145][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 274.259224][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 275.075540][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 275.083623][ T10] usb 5-1: config 0 has no interface number 0 [ 275.089823][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 275.101006][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 275.117849][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 275.126958][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 275.135056][ T10] usb 5-1: Product: syz [ 275.139246][ T10] usb 5-1: SerialNumber: syz [ 275.145024][ T10] usb 5-1: config 0 descriptor?? [ 275.154303][ T10] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 275.162409][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input11 [ 275.261560][ T8756] xt_TCPMSS: Only works on TCP SYN packets [ 275.956244][ T8768] dccp_invalid_packet: P.Data Offset(10) too large [ 275.968914][ T8768] syz.0.778: attempt to access beyond end of device [ 275.968914][ T8768] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 275.988731][ T8768] SQUASHFS error: Failed to read block 0x0: -5 [ 275.995053][ T8768] unable to read squashfs_super_block [ 276.014066][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 276.021209][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.028288][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.035399][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.042513][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.049676][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.056792][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.063871][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.070988][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.078053][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.085128][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 276.104731][ T9] usb 5-1: USB disconnect, device number 28 [ 276.110699][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 276.251304][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 277.128804][ T8777] netlink: 'syz.4.781': attribute type 10 has an invalid length. [ 277.150455][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.170043][ T8777] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 278.600561][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 278.609235][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 278.619283][ T5823] Bluetooth: hci2: hardware error 0x00 [ 279.476300][ T30] audit: type=1400 audit(1742093958.464:724): avc: denied { listen } for pid=8789 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 279.974450][ T30] audit: type=1400 audit(1742093958.954:725): avc: denied { name_bind } for pid=8802 comm="syz.4.789" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 280.368318][ T26] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 280.529204][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 280.679349][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 280.790219][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 280.812996][ T8813] FAULT_INJECTION: forcing a failure. [ 280.812996][ T8813] name failslab, interval 1, probability 0, space 0, times 0 [ 280.821191][ T26] usb 6-1: config 1 interface 0 has no altsetting 0 [ 280.836123][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.4.792 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 280.836144][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.836152][ T8813] Call Trace: [ 280.836157][ T8813] [ 280.836162][ T8813] dump_stack_lvl+0x16c/0x1f0 [ 280.836192][ T8813] should_fail_ex+0x50a/0x650 [ 280.836218][ T8813] ? fs_reclaim_acquire+0xae/0x150 [ 280.836244][ T8813] ? tomoyo_encode2+0x100/0x3e0 [ 280.836267][ T8813] should_failslab+0xc2/0x120 [ 280.836286][ T8813] __kmalloc_noprof+0xcb/0x510 [ 280.836303][ T8813] ? d_absolute_path+0x137/0x1b0 [ 280.836325][ T8813] ? rcu_is_watching+0x12/0xc0 [ 280.836345][ T8813] tomoyo_encode2+0x100/0x3e0 [ 280.836373][ T8813] tomoyo_encode+0x29/0x50 [ 280.836395][ T8813] tomoyo_realpath_from_path+0x19d/0x720 [ 280.836426][ T8813] tomoyo_path_number_perm+0x248/0x590 [ 280.836451][ T8813] ? tomoyo_path_number_perm+0x235/0x590 [ 280.836475][ T8813] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.836520][ T8813] ? __pfx_lock_release+0x10/0x10 [ 280.836543][ T8813] ? trace_lock_acquire+0x14e/0x1f0 [ 280.836565][ T8813] ? lock_acquire+0x2f/0xb0 [ 280.836586][ T8813] ? __fget_files+0x40/0x3a0 [ 280.836606][ T8813] ? __fget_files+0x206/0x3a0 [ 280.836625][ T8813] security_file_ioctl+0x9b/0x240 [ 280.836652][ T8813] __x64_sys_ioctl+0xb7/0x200 [ 280.836678][ T8813] do_syscall_64+0xcd/0x250 [ 280.836702][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.836725][ T8813] RIP: 0033:0x7f510598d169 [ 280.836738][ T8813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.836754][ T8813] RSP: 002b:00007f51037f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.836770][ T8813] RAX: ffffffffffffffda RBX: 00007f5105ba6080 RCX: 00007f510598d169 [ 280.836780][ T8813] RDX: 0000400000000440 RSI: 0000000080047456 RDI: 0000000000000003 [ 280.836790][ T8813] RBP: 00007f51037f6090 R08: 0000000000000000 R09: 0000000000000000 [ 280.836800][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.836809][ T8813] R13: 0000000000000000 R14: 00007f5105ba6080 R15: 00007fffc3a0f7e8 [ 280.836832][ T8813] [ 280.843065][ T26] usb 6-1: New USB device found, idVendor=1477, idProduct=1006, bcdDevice= 0.40 [ 280.861227][ T8813] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.151061][ T8819] x_tables: duplicate underflow at hook 1 [ 281.191316][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.200370][ T26] usb 6-1: Product: syz [ 281.204854][ T26] usb 6-1: Manufacturer: syz [ 281.240082][ T26] usb 6-1: SerialNumber: syz [ 281.679126][ T5912] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 281.702437][ T26] usbhid 6-1:1.0: can't add hid device: -71 [ 281.710337][ T26] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 281.760792][ T26] usb 6-1: USB disconnect, device number 9 [ 281.794295][ T8824] FAULT_INJECTION: forcing a failure. [ 281.794295][ T8824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.808966][ T8824] CPU: 1 UID: 0 PID: 8824 Comm: syz.0.796 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 281.808990][ T8824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.809001][ T8824] Call Trace: [ 281.809010][ T8824] [ 281.809017][ T8824] dump_stack_lvl+0x16c/0x1f0 [ 281.809042][ T8824] should_fail_ex+0x50a/0x650 [ 281.809070][ T8824] _copy_from_user+0x2e/0xd0 [ 281.809087][ T8824] video_usercopy+0xedb/0x1620 [ 281.809106][ T8824] ? __pfx___video_do_ioctl+0x10/0x10 [ 281.809124][ T8824] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 281.809150][ T8824] ? __pfx_video_usercopy+0x10/0x10 [ 281.809185][ T8824] v4l2_ioctl+0x1ba/0x250 [ 281.809202][ T8824] ? __pfx_v4l2_ioctl+0x10/0x10 [ 281.809221][ T8824] __x64_sys_ioctl+0x190/0x200 [ 281.809247][ T8824] do_syscall_64+0xcd/0x250 [ 281.809272][ T8824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.809301][ T8824] RIP: 0033:0x7f1581b8d169 [ 281.809315][ T8824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.809332][ T8824] RSP: 002b:00007f158296c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.809349][ T8824] RAX: ffffffffffffffda RBX: 00007f1581da5fa0 RCX: 00007f1581b8d169 [ 281.809360][ T8824] RDX: 0000400000000240 RSI: 00000000c054561d RDI: 0000000000000003 [ 281.809370][ T8824] RBP: 00007f158296c090 R08: 0000000000000000 R09: 0000000000000000 [ 281.809380][ T8824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.809389][ T8824] R13: 0000000000000000 R14: 00007f1581da5fa0 R15: 00007ffeb19d0798 [ 281.809411][ T8824] [ 281.976619][ T5912] usb 3-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 281.988067][ T5912] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 282.002363][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.020232][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.035420][ T5912] usb 3-1: SerialNumber: syz [ 282.061576][ T5912] usb 3-1: bad CDC descriptors [ 282.889292][ T48] usb 3-1: USB disconnect, device number 24 [ 282.900690][ T30] audit: type=1400 audit(1742093961.234:726): avc: denied { setopt } for pid=8827 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 283.518561][ T30] audit: type=1400 audit(1742093962.384:727): avc: denied { read } for pid=8831 comm="syz.5.799" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 283.869337][ T30] audit: type=1400 audit(1742093962.384:728): avc: denied { open } for pid=8831 comm="syz.5.799" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 283.994481][ T30] audit: type=1400 audit(1742093962.384:729): avc: denied { ioctl } for pid=8831 comm="syz.5.799" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 285.890885][ T5862] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 286.229190][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 286.422765][ T5862] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 286.432951][ T5862] usb 3-1: config 0 has no interface number 0 [ 286.441673][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 286.451159][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.460076][ T5862] usb 3-1: Product: syz [ 286.464572][ T5862] usb 3-1: Manufacturer: syz [ 286.470014][ T5862] usb 3-1: SerialNumber: syz [ 286.479807][ T5862] usb 3-1: config 0 descriptor?? [ 287.335861][ T30] audit: type=1400 audit(1742093966.314:730): avc: denied { read } for pid=8861 comm="syz.0.809" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 287.790454][ T5862] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 287.822207][ T5862] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 287.879210][ T5862] usb 3-1: Failed to create links for entity 5 [ 287.885405][ T5862] usb 3-1: Failed to register entities (-22). [ 287.907804][ T5862] usb 3-1: USB disconnect, device number 25 [ 288.354684][ T8880] input: syz1 as /devices/virtual/input/input12 [ 288.399390][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 288.565877][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.589973][ T9] usb 5-1: config 0 has no interfaces? [ 288.595516][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 288.636312][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.692360][ T8880] serio: Serial port ttyS3 [ 288.866115][ T9] usb 5-1: config 0 descriptor?? [ 289.268915][ T5862] usb 5-1: USB disconnect, device number 29 [ 289.458389][ T8899] vlan2: entered promiscuous mode [ 289.464678][ T8899] bond0: entered promiscuous mode [ 289.471322][ T8899] bond_slave_0: entered promiscuous mode [ 289.479971][ T8899] bond_slave_1: entered promiscuous mode [ 289.502650][ T8899] bond0: left promiscuous mode [ 289.507619][ T8899] bond_slave_0: left promiscuous mode [ 289.513741][ T8899] bond_slave_1: left promiscuous mode [ 289.744700][ T8904] 9pnet_fd: Insufficient options for proto=fd [ 289.791214][ T5822] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 290.027698][ T8906] vlan2: entered promiscuous mode [ 290.038411][ T8906] bond0: entered promiscuous mode [ 290.048011][ T8906] bond_slave_0: entered promiscuous mode [ 290.056913][ T8906] bond_slave_1: entered promiscuous mode [ 290.063376][ T8906] batadv0: entered promiscuous mode [ 290.090356][ T8908] netlink: 56 bytes leftover after parsing attributes in process `syz.1.824'. [ 290.118205][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 290.133971][ T8906] bond0: left promiscuous mode [ 290.138950][ T8906] bond_slave_0: left promiscuous mode [ 290.145423][ T5822] usb 6-1: Using ep0 maxpacket: 8 [ 290.160771][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 290.176248][ T8906] bond_slave_1: left promiscuous mode [ 290.183236][ T8908] usb usb9: usbfs: process 8908 (syz.1.824) did not claim interface 4 before use [ 290.189089][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.203068][ T8906] batadv0: left promiscuous mode [ 290.211963][ T5822] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.549370][ T5822] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 290.570621][ T5822] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 290.591659][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.624518][ T5822] usb 6-1: config 0 descriptor?? [ 290.636835][ T8901] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 291.261061][ T8931] kAFS: unable to lookup cell 'Zã‡4<ˆy' [ 291.845848][ T5816] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 292.038875][ T10] lo speed is unknown, defaulting to 1000 [ 292.040751][ T8901] tipc: Enabling of bearer rejected, failed to enable media [ 292.597829][ T5822] usb 6-1: USB disconnect, device number 10 [ 292.600838][ T5823] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 292.743211][ T30] audit: type=1400 audit(1742093971.724:731): avc: denied { create } for pid=8939 comm="syz.1.832" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.763736][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.812195][ T30] audit: type=1400 audit(1742093971.724:732): avc: denied { read } for pid=8939 comm="syz.1.832" name="file0" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.867136][ T30] audit: type=1400 audit(1742093971.724:733): avc: denied { open } for pid=8939 comm="syz.1.832" path="/171/file0" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.891028][ T30] audit: type=1326 audit(1742093972.114:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.0.834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1581b8d169 code=0x0 [ 293.913650][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.939397][ T8972] 9pnet_fd: Insufficient options for proto=fd [ 295.341853][ T8977] kAFS: unable to lookup cell 'Zã‡4<ˆy' [ 295.909730][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 295.910324][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.846'. [ 296.111208][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 296.508400][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 296.544848][ T10] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 296.583950][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.606074][ T10] usb 5-1: Product: syz [ 296.611811][ T10] usb 5-1: Manufacturer: syz [ 296.616511][ T10] usb 5-1: SerialNumber: syz [ 296.720120][ T10] usb 5-1: config 0 descriptor?? [ 296.942062][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 296.959082][ T10] usb 5-1: Detected FT232R [ 297.789932][ T9003] 9pnet_fd: Insufficient options for proto=fd [ 300.101761][ T9026] netlink: 'syz.2.858': attribute type 38 has an invalid length. [ 300.244444][ T9029] 9pnet_fd: Insufficient options for proto=fd [ 300.411780][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 300.419394][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 300.431877][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.859'. [ 300.452319][ T10] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 300.502279][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 300.547466][ T10] usb 5-1: USB disconnect, device number 30 [ 300.599586][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 300.620581][ T10] ftdi_sio 5-1:0.0: device disconnected [ 301.525330][ T9048] netlink: 528 bytes leftover after parsing attributes in process `syz.1.864'. [ 303.983073][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 304.179679][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 304.192332][ T10] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 304.203794][ T10] usb 3-1: config 0 has no interface number 0 [ 304.235015][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 304.315047][ T9074] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 304.368742][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.407262][ T10] usb 3-1: Product: syz [ 304.428178][ T9074] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 304.534178][ T10] usb 3-1: Manufacturer: syz [ 304.552666][ T10] usb 3-1: SerialNumber: syz [ 304.654796][ T10] usb 3-1: config 0 descriptor?? [ 304.897237][ T10] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 304.931056][ T10] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 305.553757][ T10] usb 3-1: Failed to create links for entity 5 [ 305.570445][ T10] usb 3-1: Failed to register entities (-22). [ 306.368232][ T10] usb 3-1: USB disconnect, device number 26 [ 306.790579][ T9104] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 306.813828][ T9104] netlink: 240 bytes leftover after parsing attributes in process `syz.1.879'. [ 306.999635][ T2149] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 307.394908][ T9113] ALSA: mixer_oss: invalid OSS volume 'L' [ 307.749185][ T2149] usb 6-1: Using ep0 maxpacket: 32 [ 307.757526][ T2149] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.788202][ T2149] usb 6-1: config 0 has no interfaces? [ 307.812657][ T2149] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 307.822457][ T2149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.850648][ T2149] usb 6-1: config 0 descriptor?? [ 307.870130][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 307.902322][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 308.029158][ T26] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 308.280463][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 308.367460][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 308.374234][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.385404][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.574016][ T26] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 308.603240][ T5823] Bluetooth: hci5: command 0x0405 tx timeout [ 309.210274][ T30] audit: type=1400 audit(1742093988.184:735): avc: denied { mount } for pid=9101 comm="syz.5.878" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 309.320386][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.393496][ T30] audit: type=1400 audit(1742093988.304:736): avc: denied { search } for pid=9101 comm="syz.5.878" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.424561][ T30] audit: type=1400 audit(1742093988.304:737): avc: denied { read } for pid=9101 comm="syz.5.878" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.498076][ T26] usb 3-1: config 0 descriptor?? [ 309.513858][ T30] audit: type=1400 audit(1742093988.364:738): avc: denied { open } for pid=9101 comm="syz.5.878" path="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.546406][ T30] audit: type=1400 audit(1742093988.444:739): avc: denied { write } for pid=9101 comm="syz.5.878" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.580040][ T30] audit: type=1400 audit(1742093988.444:740): avc: denied { add_name } for pid=9101 comm="syz.5.878" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.600617][ T30] audit: type=1400 audit(1742093988.444:741): avc: denied { create } for pid=9101 comm="syz.5.878" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 310.272847][ T26] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 310.471444][ T26] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 311.013841][ T9162] netlink: 596 bytes leftover after parsing attributes in process `syz.0.896'. [ 311.594623][ T5822] usb 3-1: USB disconnect, device number 27 [ 311.713198][ T2149] usb 6-1: USB disconnect, device number 11 [ 311.919156][ T26] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 312.069083][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 312.075469][ T26] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 312.083701][ T26] usb 5-1: config 0 has no interface number 0 [ 312.091382][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 312.100756][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.108841][ T26] usb 5-1: Product: syz [ 312.113091][ T26] usb 5-1: Manufacturer: syz [ 312.117858][ T26] usb 5-1: SerialNumber: syz [ 312.137874][ T26] usb 5-1: config 0 descriptor?? [ 312.179160][ T2149] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 312.319322][ T2149] usb 6-1: device descriptor read/64, error -71 [ 312.580960][ T2149] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 312.694434][ T26] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 312.702185][ T26] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 312.711226][ T26] usb 5-1: Failed to create links for entity 5 [ 312.717555][ T26] usb 5-1: Failed to register entities (-22). [ 312.731553][ T2149] usb 6-1: device descriptor read/64, error -71 [ 312.743497][ T26] usb 5-1: USB disconnect, device number 31 [ 312.874087][ T2149] usb usb6-port1: attempt power cycle [ 313.858067][ T2149] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 313.879821][ T2149] usb 6-1: device descriptor read/8, error -71 [ 314.119408][ T2149] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 314.143140][ T2149] usb 6-1: device descriptor read/8, error -71 [ 314.333404][ T2149] usb usb6-port1: unable to enumerate USB device [ 316.792514][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.955102][ T30] audit: type=1400 audit(1742093995.944:742): avc: denied { setattr } for pid=9226 comm="syz.0.917" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 317.428885][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 317.484863][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 317.915022][ T9236] FAULT_INJECTION: forcing a failure. [ 317.915022][ T9236] name fail_futex, interval 1, probability 0, space 0, times 1 [ 317.965325][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: syz.0.917 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 317.965365][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.965375][ T9236] Call Trace: [ 317.965380][ T9236] [ 317.965387][ T9236] dump_stack_lvl+0x16c/0x1f0 [ 317.965414][ T9236] should_fail_ex+0x50a/0x650 [ 317.965438][ T9236] ? __lock_acquire+0x15a9/0x3c40 [ 317.965463][ T9236] get_futex_key+0x1c3/0x1000 [ 317.965484][ T9236] ? __pfx_get_futex_key+0x10/0x10 [ 317.965503][ T9236] futex_wake+0xe8/0x4e0 [ 317.965519][ T9236] ? __pfx_futex_wake+0x10/0x10 [ 317.965534][ T9236] ? find_held_lock+0x2d/0x110 [ 317.965548][ T9236] do_futex+0x1e5/0x350 [ 317.965560][ T9236] ? __pfx_do_futex+0x10/0x10 [ 317.965572][ T9236] ? __might_fault+0xe3/0x190 [ 317.965585][ T9236] ? __might_fault+0xe3/0x190 [ 317.965598][ T9236] mm_release+0x24e/0x300 [ 317.965613][ T9236] do_exit+0x886/0x2d70 [ 317.965625][ T9236] ? get_signal+0x8f7/0x26c0 [ 317.965641][ T9236] ? __pfx_do_exit+0x10/0x10 [ 317.965651][ T9236] ? do_raw_spin_lock+0x12d/0x2c0 [ 317.965660][ T9236] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.965671][ T9236] do_group_exit+0xd3/0x2a0 [ 317.965683][ T9236] get_signal+0x24ed/0x26c0 [ 317.965701][ T9236] ? __pfx_lock_release+0x10/0x10 [ 317.965715][ T9236] ? __pfx_get_signal+0x10/0x10 [ 317.965733][ T9236] arch_do_signal_or_restart+0x90/0x7e0 [ 317.965746][ T9236] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 317.965764][ T9236] syscall_exit_to_user_mode+0x150/0x2a0 [ 317.965779][ T9236] do_syscall_64+0xda/0x250 [ 317.965793][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.965807][ T9236] RIP: 0033:0x7f1581b8d169 [ 317.965815][ T9236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.965825][ T9236] RSP: 002b:00007f158294b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 317.965835][ T9236] RAX: fffffffffffffe00 RBX: 00007f1581da6080 RCX: 00007f1581b8d169 [ 317.965841][ T9236] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000400000000000 [ 317.965847][ T9236] RBP: 00007f158294b090 R08: 0000000000000000 R09: 0000000000000000 [ 317.965852][ T9236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.965857][ T9236] R13: 0000000000000000 R14: 00007f1581da6080 R15: 00007ffeb19d0798 [ 317.965869][ T9236] [ 318.259492][ T9242] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 318.267526][ T9242] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 318.276393][ T9242] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 318.284260][ T9242] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 318.524849][ T30] audit: type=1400 audit(1742093997.514:743): avc: denied { rename } for pid=9228 comm="syz.1.919" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 318.636823][ T30] audit: type=1326 audit(1742093997.624:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 318.721126][ T30] audit: type=1326 audit(1742093997.624:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 318.747345][ T9250] Cannot find set identified by id 0 to match [ 319.129390][ T30] audit: type=1326 audit(1742093997.624:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 319.213909][ T30] audit: type=1326 audit(1742093997.624:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 319.269134][ T30] audit: type=1326 audit(1742093997.624:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 319.298475][ T30] audit: type=1326 audit(1742093997.624:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03cbf8bad0 code=0x7ffc0000 [ 319.323410][ T30] audit: type=1326 audit(1742093997.624:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 319.347381][ T30] audit: type=1326 audit(1742093997.624:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f03cbf8d169 code=0x7ffc0000 [ 322.479226][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 322.634758][ T9] usb 5-1: device descriptor read/64, error -71 [ 322.832842][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 322.832857][ T30] audit: type=1400 audit(1742094001.824:780): avc: denied { unmount } for pid=7584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.929160][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 323.060703][ T9] usb 5-1: device descriptor read/64, error -71 [ 323.274079][ T30] audit: type=1400 audit(1742094002.164:781): avc: denied { bind } for pid=9299 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 323.333066][ T2149] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 323.395803][ T30] audit: type=1400 audit(1742094002.174:782): avc: denied { connect } for pid=9299 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 323.543524][ T2149] usb 3-1: Using ep0 maxpacket: 8 [ 323.550886][ T2149] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 323.569801][ T2149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.574550][ T9] usb usb5-port1: attempt power cycle [ 323.598946][ T2149] usb 3-1: config 0 descriptor?? [ 323.808226][ T2149] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 324.029092][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 324.059698][ T9] usb 5-1: device descriptor read/8, error -71 [ 324.214761][ T9305] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 324.223635][ T2149] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 324.242289][ T2149] asix 3-1:0.0: probe with driver asix failed with error -32 [ 324.289753][ T2149] usb 3-1: USB disconnect, device number 28 [ 324.319178][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 324.365413][ T9] usb 5-1: device descriptor read/8, error -71 [ 324.479737][ T9] usb usb5-port1: unable to enumerate USB device [ 324.610969][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 325.570771][ T30] audit: type=1400 audit(1742094004.564:783): avc: denied { mount } for pid=9334 comm="syz.1.952" name="/" dev="ramfs" ino=24867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 325.707559][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.953'. [ 325.735708][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 325.930176][ T30] audit: type=1400 audit(1742094004.914:784): avc: denied { ioctl } for pid=9339 comm="syz.4.955" path="socket:[24877]" dev="sockfs" ino=24877 ioctlcmd=0xaf21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 326.167743][ T9345] netlink: 'syz.2.950': attribute type 3 has an invalid length. [ 326.278636][ T30] audit: type=1400 audit(1742094005.264:785): avc: denied { write } for pid=9351 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 328.464142][ T9375] openvswitch: netlink: IPv4 tun info is not correct [ 328.615548][ T30] audit: type=1400 audit(1742094007.604:786): avc: denied { connect } for pid=9377 comm="syz.4.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.879146][ T5822] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 329.259112][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 329.266644][ T5822] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 329.286295][ T5822] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 329.313642][ T5822] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 329.342813][ T5822] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 329.359062][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 329.378240][ T5822] usb 5-1: config 0 has no interface number 0 [ 329.401132][ T5822] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 329.427445][ T5822] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 329.458168][ T5822] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 329.480587][ T5822] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.494210][ T5822] usb 5-1: config 0 interface 125 has no altsetting 0 [ 329.517549][ T5822] usb 5-1: config 0 interface 125 has no altsetting 2 [ 329.529745][ T5822] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 329.539086][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.548306][ T5822] usb 5-1: Product: syz [ 329.553584][ T5822] usb 5-1: Manufacturer: syz [ 329.559447][ T5822] usb 5-1: SerialNumber: syz [ 329.576182][ T5822] usb 5-1: config 0 descriptor?? [ 329.584021][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 329.595511][ T5822] usb 5-1: selecting invalid altsetting 2 [ 330.508563][ T9378] netlink: 'syz.4.964': attribute type 46 has an invalid length. [ 331.025912][ T5822] get_1284_register timeout [ 331.049300][ C0] usb 5-1: async_complete: urb error -104 [ 331.055143][ T5822] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 331.063077][ T9378] netlink: 44 bytes leftover after parsing attributes in process `syz.4.964'. [ 331.135994][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.155877][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.177897][ T9398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.964'. [ 331.178135][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 331.202222][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 331.369167][ T2149] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 331.493927][ T9402] loop7: detected capacity change from 0 to 16384 [ 331.509970][ T2149] usb 6-1: device descriptor read/64, error -71 [ 331.720338][ T9403] loop7: detected capacity change from 16384 to 16383 [ 331.751489][ T2149] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 331.911420][ T2149] usb 6-1: device descriptor read/64, error -71 [ 331.976689][ T9409] kAFS: unparsable volume name [ 332.024833][ T2149] usb usb6-port1: attempt power cycle [ 332.228484][ T5822] usb 5-1: USB disconnect, device number 36 [ 332.439447][ T2149] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 332.531963][ T2149] usb 6-1: device descriptor read/8, error -71 [ 332.869162][ T2149] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 332.957817][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 332.964562][ T2149] usb 6-1: device descriptor read/8, error -71 [ 333.082165][ T2149] usb usb6-port1: unable to enumerate USB device [ 333.330449][ T2149] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 333.493002][ T9427] input: syz1 as /devices/virtual/input/input13 [ 333.848614][ T30] audit: type=1400 audit(1742094012.834:787): avc: denied { append } for pid=9424 comm="syz.1.979" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 333.952394][ T2149] usb 3-1: Using ep0 maxpacket: 32 [ 333.977659][ T2149] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 334.005841][ T2149] usb 3-1: config 0 has no interface number 0 [ 334.022936][ T2149] usb 3-1: config 0 interface 25 has no altsetting 0 [ 334.053681][ T2149] usb 3-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=1d.e8 [ 334.081254][ T2149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.158424][ T2149] usb 3-1: config 0 descriptor?? [ 334.173969][ T2149] usb 3-1: can't set first interface for hiFace device. [ 334.182057][ T2149] snd-usb-hiface 3-1:0.25: probe with driver snd-usb-hiface failed with error -5 [ 334.321375][ T9431] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 334.378943][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.381331][ T9431] loop9: detected capacity change from 0 to 7 [ 334.390008][ T9420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.405488][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.421626][ T9420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.513303][ T9431] Dev loop9: unable to read RDB block 7 [ 334.661191][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.686153][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.697136][ T5823] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.707847][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.725536][ T9431] loop9: unable to read partition table [ 334.841286][ T9431] loop9: partition table beyond EOD, truncated [ 334.847658][ T9431] loop_reread_partitions: partition scan of loop9 (þ被xóŸ‹‘– ) failed (rc=-5) [ 335.288094][ T9434] lo speed is unknown, defaulting to 1000 [ 335.389351][ T2149] usb 3-1: USB disconnect, device number 29 [ 335.577991][ T9434] chnl_net:caif_netlink_parms(): no params data found [ 335.746174][ T9453] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 335.754687][ T9453] syzkaller1: linktype set to 780 [ 335.763693][ T30] audit: type=1400 audit(1742094014.754:788): avc: denied { setopt } for pid=9451 comm="syz.5.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.516422][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.649156][ T30] audit: type=1400 audit(1742094015.614:789): avc: denied { ioctl } for pid=9467 comm="syz.4.991" path="socket:[24342]" dev="sockfs" ino=24342 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 336.675777][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.690438][ T9434] bridge_slave_0: entered allmulticast mode [ 336.697428][ T9434] bridge_slave_0: entered promiscuous mode [ 336.711507][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 336.729557][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.737056][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.749756][ T9434] bridge_slave_1: entered allmulticast mode [ 336.760117][ T9434] bridge_slave_1: entered promiscuous mode [ 336.794822][ T30] audit: type=1400 audit(1742094015.784:790): avc: denied { listen } for pid=9474 comm="syz.4.992" path=2F3139392FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 336.839217][ T5816] Bluetooth: hci6: command tx timeout [ 337.109089][ T9484] trusted_key: encrypted_key: insufficient parameters specified [ 337.357428][ T9434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.805708][ T30] audit: type=1400 audit(1742094016.134:791): avc: denied { read } for pid=9476 comm="syz.5.994" dev="sockfs" ino=25264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 338.015774][ T30] audit: type=1400 audit(1742094016.134:792): avc: denied { name_bind 0x1000000 } for pid=9476 comm="syz.5.994" path="socket:[25264]" dev="sockfs" ino=25264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 338.041964][ T9434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.106156][ T30] audit: type=1400 audit(1742094016.134:793): avc: denied { accept } for pid=9476 comm="syz.5.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 338.167517][ T30] audit: type=1400 audit(1742094017.004:794): avc: denied { read } for pid=9478 comm="syz.1.993" lport=42483 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 338.203157][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'. [ 338.225331][ T30] audit: type=1400 audit(1742094017.124:795): avc: denied { setopt } for pid=9478 comm="syz.1.993" lport=42483 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 338.232421][ T9434] team0: Port device team_slave_0 added [ 338.338830][ T30] audit: type=1400 audit(1742094017.184:796): avc: denied { read } for pid=9490 comm="syz.4.997" path="socket:[24446]" dev="sockfs" ino=24446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 338.418037][ T9434] team0: Port device team_slave_1 added [ 338.505379][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.515442][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.623293][ T9434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.641053][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.668305][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.709119][ T5822] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 338.789092][ T9434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.866509][ T9434] hsr_slave_0: entered promiscuous mode [ 338.887418][ T9434] hsr_slave_1: entered promiscuous mode [ 338.906551][ T9434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.919113][ T5816] Bluetooth: hci6: command tx timeout [ 338.939090][ T9434] Cannot create hsr debugfs directory [ 338.939237][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 339.071401][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.097831][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.145185][ T5822] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.166548][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.275681][ T5822] usb 5-1: config 0 descriptor?? [ 340.148480][ T9434] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 340.295085][ T9434] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 340.306268][ T9434] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 340.332630][ T9434] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 340.352071][ T9502] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1001'. [ 340.553527][ T9434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.001798][ T5816] Bluetooth: hci6: command tx timeout [ 341.246074][ T9434] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.321020][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.328122][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.459685][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.466769][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.512592][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 342.146321][ T9520] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 342.411360][ T9516] lo speed is unknown, defaulting to 1000 [ 342.649821][ T9526] tmpfs: Unknown parameter 'usrquota$' [ 342.661799][ T5822] usbhid 5-1:0.0: can't add hid device: -71 [ 342.767347][ T5822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 342.818804][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1007'. [ 343.049409][ T5822] usb 5-1: USB disconnect, device number 37 [ 343.079499][ T5816] Bluetooth: hci6: command tx timeout [ 343.640060][ T30] audit: type=1400 audit(1742094022.634:797): avc: denied { bind } for pid=9536 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.676840][ T30] audit: type=1400 audit(1742094022.634:798): avc: denied { listen } for pid=9536 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.734706][ T9434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.774780][ T30] audit: type=1400 audit(1742094022.634:799): avc: denied { accept } for pid=9536 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.829952][ T9546] ucma_write: process 354 (syz.5.1009) changed security contexts after opening file descriptor, this is not allowed. [ 344.937255][ T9434] veth0_vlan: entered promiscuous mode [ 344.957602][ T9434] veth1_vlan: entered promiscuous mode [ 344.984299][ T9566] blktrace: Concurrent blktraces are not allowed on loop11 [ 345.007155][ T9563] misc userio: Can't change port type on an already running userio instance [ 345.022495][ T30] audit: type=1400 audit(1742094024.014:800): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 345.050544][ T9434] veth0_macvtap: entered promiscuous mode [ 345.059593][ T9563] misc userio: Invalid payload size [ 345.073543][ T9434] veth1_macvtap: entered promiscuous mode [ 345.128065][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.140621][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.157043][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.167938][ T30] audit: type=1400 audit(1742094024.144:801): avc: denied { write } for pid=9 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25775 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 345.201312][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.211686][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.227803][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.237839][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.253489][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.263898][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.275768][ T30] audit: type=1400 audit(1742094024.274:802): avc: denied { read } for pid=9569 comm="syz.2.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 345.279113][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.305067][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.317415][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.328884][ T9434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.340264][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.350993][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.361879][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.372927][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.383354][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.394325][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.404653][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.415742][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.426550][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.437589][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.448301][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.459321][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.470055][ T9434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.498291][ T9434] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.507383][ T9434] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.516646][ T9434] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.527157][ T9434] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.632861][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.646576][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.668662][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.676975][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.959940][ T5822] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 346.446092][ T9594] kvm: emulating exchange as write [ 346.640491][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.658794][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.735816][ T5822] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 346.746906][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.880321][ T5822] usb 6-1: config 0 descriptor?? [ 347.345411][ T9611] 9pnet_fd: Insufficient options for proto=fd [ 347.509278][ T5864] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 347.595100][ T5822] usb 6-1: language id specifier not provided by device, defaulting to English [ 347.658363][ T9614] xt_ecn: cannot match TCP bits for non-tcp packets [ 347.673666][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 347.685563][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.697229][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.775624][ T5864] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 347.835711][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.001099][ T5864] usb 5-1: config 0 descriptor?? [ 348.039718][ T9616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.103377][ T5864] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 348.134094][ T5864] usb 5-1: No valid video chain found. [ 348.339949][ T9617] team0: Failed to send options change via netlink (err -105) [ 348.380100][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 348.381695][ T9617] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 348.549272][ T30] audit: type=1400 audit(1742094027.494:803): avc: denied { listen } for pid=9622 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.570002][ T9617] team0: Port device team_slave_1 removed [ 348.703866][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 348.725642][ T30] audit: type=1400 audit(1742094027.514:804): avc: denied { getopt } for pid=9622 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.769546][ T10] usb 3-1: config 2 interface 0 has no altsetting 0 [ 348.779939][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 348.791478][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.827419][ T10] usb 3-1: Product: syz [ 348.840459][ T10] usb 3-1: Manufacturer: syz [ 348.842322][ T9616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.848472][ T10] usb 3-1: SerialNumber: syz [ 348.935669][ T9630] openvswitch: netlink: IPv4 tun info is not correct [ 349.118089][ T9616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.132849][ T5862] usb 5-1: USB disconnect, device number 38 [ 349.295069][ T9616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.425411][ T5822] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71 [ 349.434912][ T5822] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 349.446518][ T5822] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71 [ 349.455206][ T5822] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 349.463104][ T5822] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 350.002712][ T5822] usb 6-1: USB disconnect, device number 20 [ 350.096845][ T9616] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.261135][ T9616] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.312783][ T9616] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.415515][ T9616] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.464726][ T9644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1037'. [ 350.483962][ T10] usb 3-1: USB disconnect, device number 30 [ 351.008783][ T9654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1039'. [ 351.025350][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 351.046405][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 351.229240][ T5864] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 351.465143][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 351.516365][ T5864] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 351.544173][ T5864] usb 5-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 351.577157][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.601890][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 351.614865][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1153, setting to 1024 [ 351.628639][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.668048][ T5864] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 351.677412][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.697790][ T5864] usb 5-1: Product: syz [ 351.702277][ T5864] usb 5-1: Manufacturer: syz [ 351.717274][ T5864] usb 5-1: SerialNumber: syz [ 351.764032][ T5864] usb 5-1: config 0 descriptor?? [ 351.879417][ T9655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 351.888536][ T5864] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 352.597812][ T5864] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 352.615653][ T5864] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 352.664821][ T5864] usb 5-1: USB disconnect, device number 39 [ 352.930255][ T9691] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 353.267292][ T30] audit: type=1400 audit(1742094032.204:805): avc: denied { getopt } for pid=9689 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 353.638632][ T30] audit: type=1400 audit(1742094032.504:806): avc: denied { ioctl } for pid=9697 comm="syz.5.1051" path="socket:[27387]" dev="sockfs" ino=27387 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 354.116429][ T9705] xfrm1: entered promiscuous mode [ 354.134763][ T9705] xfrm1: entered allmulticast mode [ 355.541886][ T30] audit: type=1400 audit(1742094034.534:807): avc: denied { create } for pid=9717 comm="syz.5.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 355.620170][ T30] audit: type=1400 audit(1742094034.554:808): avc: denied { sys_admin } for pid=9717 comm="syz.5.1059" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 355.701092][ T9718] lo speed is unknown, defaulting to 1000 [ 356.093083][ T9729] syz.6.1061: attempt to access beyond end of device [ 356.093083][ T9729] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 356.266977][ T9737] openvswitch: netlink: IPv4 tun info is not correct [ 356.540971][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 356.702737][ T9729] (syz.6.1061,9729,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 356.752936][ T9742] ceph: No mds server is up or the cluster is laggy [ 356.809201][ T9729] (syz.6.1061,9729,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 356.957600][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 357.009464][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 357.062457][ T9729] (syz.6.1061,9729,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 357.090450][ T9729] (syz.6.1061,9729,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 357.110302][ T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 357.133600][ T10] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 357.210697][ T9748] openvswitch: netlink: IPv4 tun info is not correct [ 357.290674][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.382376][ T9752] openvswitch: netlink: IPv4 tun info is not correct [ 357.662686][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.755070][ T9753] misc userio: Invalid payload size [ 357.958393][ T9755] kAFS: unable to lookup cell '/yz1' [ 357.966248][ T9755] kAFS: unable to lookup cell '/yz1' [ 358.532711][ T48] usb 5-1: USB disconnect, device number 40 [ 359.552718][ T9771] FAULT_INJECTION: forcing a failure. [ 359.552718][ T9771] name failslab, interval 1, probability 0, space 0, times 0 [ 359.565545][ T9771] CPU: 1 UID: 0 PID: 9771 Comm: syz.2.1074 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 359.565559][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 359.565565][ T9771] Call Trace: [ 359.565569][ T9771] [ 359.565573][ T9771] dump_stack_lvl+0x16c/0x1f0 [ 359.565590][ T9771] should_fail_ex+0x50a/0x650 [ 359.565608][ T9771] ? switchdev_deferred_enqueue+0x2b/0x2a0 [ 359.565621][ T9771] should_failslab+0xc2/0x120 [ 359.565633][ T9771] __kmalloc_noprof+0xcb/0x510 [ 359.565643][ T9771] ? rcu_is_watching+0x12/0xc0 [ 359.565656][ T9771] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 359.565668][ T9771] switchdev_deferred_enqueue+0x2b/0x2a0 [ 359.565681][ T9771] switchdev_port_attr_set+0xb5/0x120 [ 359.565693][ T9771] br_multicast_toggle+0x1f4/0x590 [ 359.565705][ T9771] ? __pfx_br_multicast_toggle+0x10/0x10 [ 359.565715][ T9771] ? br_changelink+0x835/0x1770 [ 359.565731][ T9771] ? mark_held_locks+0x9f/0xe0 [ 359.565747][ T9771] ? br_opt_toggle+0x9b/0x140 [ 359.565760][ T9771] br_changelink+0x9aa/0x1770 [ 359.565774][ T9771] ? __pfx_br_changelink+0x10/0x10 [ 359.565793][ T9771] ? __pfx_br_changelink+0x10/0x10 [ 359.565807][ T9771] rtnl_newlink+0x115a/0x1d60 [ 359.565826][ T9771] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.565843][ T9771] ? __pfx___lock_acquire+0x10/0x10 [ 359.565857][ T9771] ? cred_has_capability.isra.0+0x192/0x2f0 [ 359.565873][ T9771] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 359.565890][ T9771] ? find_held_lock+0x2d/0x110 [ 359.565903][ T9771] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 359.565918][ T9771] ? __pfx_lock_release+0x10/0x10 [ 359.565931][ T9771] ? trace_lock_acquire+0x14e/0x1f0 [ 359.565946][ T9771] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.565962][ T9771] rtnetlink_rcv_msg+0x95b/0xea0 [ 359.565978][ T9771] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.566002][ T9771] netlink_rcv_skb+0x16b/0x440 [ 359.566017][ T9771] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.566032][ T9771] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.566054][ T9771] ? netlink_deliver_tap+0x1ae/0xd30 [ 359.566070][ T9771] netlink_unicast+0x53c/0x7f0 [ 359.566085][ T9771] ? __pfx_netlink_unicast+0x10/0x10 [ 359.566107][ T9771] netlink_sendmsg+0x8b8/0xd70 [ 359.566124][ T9771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.566142][ T9771] ____sys_sendmsg+0xaaf/0xc90 [ 359.566155][ T9771] ? copy_msghdr_from_user+0x10b/0x160 [ 359.566170][ T9771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.566187][ T9771] ___sys_sendmsg+0x135/0x1e0 [ 359.566203][ T9771] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.566223][ T9771] ? __pfx_lock_release+0x10/0x10 [ 359.566237][ T9771] ? trace_lock_acquire+0x14e/0x1f0 [ 359.566252][ T9771] ? __fget_files+0x206/0x3a0 [ 359.566266][ T9771] __sys_sendmsg+0x16e/0x220 [ 359.566281][ T9771] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.566295][ T9771] ? __pfx_lock_release+0x10/0x10 [ 359.566312][ T9771] ? __might_fault+0xe3/0x190 [ 359.566326][ T9771] ? rcu_is_watching+0x12/0xc0 [ 359.566337][ T9771] do_syscall_64+0xcd/0x250 [ 359.566352][ T9771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.566367][ T9771] RIP: 0033:0x7f408f98d169 [ 359.566375][ T9771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.566385][ T9771] RSP: 002b:00007f40908b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.566394][ T9771] RAX: ffffffffffffffda RBX: 00007f408fba5fa0 RCX: 00007f408f98d169 [ 359.566400][ T9771] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000005 [ 359.566406][ T9771] RBP: 00007f40908b1090 R08: 0000000000000000 R09: 0000000000000000 [ 359.566411][ T9771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.566416][ T9771] R13: 0000000000000000 R14: 00007f408fba5fa0 R15: 00007ffe3fe12d38 [ 359.566428][ T9771] [ 360.826445][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 361.520250][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 361.737405][ T9802] bridge0: port 3(team0) entered blocking state [ 361.737638][ T9802] bridge0: port 3(team0) entered disabled state [ 361.738593][ T9802] team0: entered allmulticast mode [ 361.738648][ T9802] team_slave_0: entered allmulticast mode [ 361.738770][ T9802] team_slave_1: entered allmulticast mode [ 361.746909][ T9802] team0: entered promiscuous mode [ 361.746968][ T9802] team_slave_0: entered promiscuous mode [ 361.747692][ T9802] team_slave_1: entered promiscuous mode [ 361.750324][ T9802] bridge0: port 3(team0) entered blocking state [ 361.750407][ T9802] bridge0: port 3(team0) entered forwarding state [ 362.016904][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 362.057658][ T10] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 362.057685][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.057700][ T10] usb 3-1: Product: syz [ 362.057709][ T10] usb 3-1: Manufacturer: syz [ 362.057718][ T10] usb 3-1: SerialNumber: syz [ 362.058729][ T10] usb 3-1: config 0 descriptor?? [ 362.068876][ T5912] IPVS: starting estimator thread 0... [ 362.178279][ T9804] IPVS: using max 56 ests per chain, 134400 per kthread [ 362.656451][ T9810] kAFS: No cell specified [ 362.692710][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 362.737666][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.779090][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 362.796956][ T10] usb 3-1: media controller created [ 362.846761][ T9820] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1090'. [ 362.861846][ T9816] netlink: 528 bytes leftover after parsing attributes in process `syz.5.1089'. [ 362.875866][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.156633][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 363.659188][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 363.679253][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 363.912039][ T10] usb 3-1: USB disconnect, device number 31 [ 364.023472][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 365.014446][ T9827] kvm: kvm [9826]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 378.202633][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.642176][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.080072][ T5823] Bluetooth: hci6: command 0x0406 tx timeout [ 471.358962][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 471.365909][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1147/1:b..l P5821/1:b..l [ 471.375357][ C1] rcu: (detected by 1, t=10502 jiffies, g=30037, q=267 ncpus=2) [ 471.383041][ C1] task:syz-executor state:R running task stack:23728 pid:5821 tgid:5821 ppid:5811 task_flags:0x400140 flags:0x00004000 [ 471.397143][ C1] Call Trace: [ 471.400402][ C1] [ 471.403310][ C1] __schedule+0xf43/0x5890 [ 471.407702][ C1] ? hlock_class+0x4e/0x130 [ 471.412178][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 471.417352][ C1] ? __pfx_mark_lock+0x10/0x10 [ 471.422093][ C1] ? __pfx___schedule+0x10/0x10 [ 471.426913][ C1] ? find_held_lock+0x2d/0x110 [ 471.431651][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 471.436997][ C1] preempt_schedule_common+0x44/0xc0 [ 471.442254][ C1] preempt_schedule_thunk+0x1a/0x30 [ 471.447427][ C1] _raw_spin_unlock+0x3e/0x50 [ 471.452078][ C1] copy_page_range+0x1deb/0x5570 [ 471.457003][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 471.462272][ C1] ? find_held_lock+0x2d/0x110 [ 471.467010][ C1] ? __pfx_lock_release+0x10/0x10 [ 471.472006][ C1] ? lock_acquire+0x2f/0xb0 [ 471.476491][ C1] ? copy_process+0x7c12/0x8c50 [ 471.481316][ C1] ? down_write+0x14e/0x200 [ 471.485795][ C1] ? up_write+0x1b2/0x520 [ 471.490103][ C1] copy_process+0x7ccb/0x8c50 [ 471.494769][ C1] ? __pfx_copy_process+0x10/0x10 [ 471.499779][ C1] kernel_clone+0xfd/0x960 [ 471.504166][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 471.509164][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 471.514508][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 471.519770][ C1] __do_sys_clone+0xcf/0x120 [ 471.524330][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 471.529509][ C1] ? __might_fault+0xe3/0x190 [ 471.534157][ C1] ? __might_fault+0xe3/0x190 [ 471.538806][ C1] ? rcu_is_watching+0x12/0xc0 [ 471.543544][ C1] do_syscall_64+0xcd/0x250 [ 471.548022][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.553907][ C1] RIP: 0033:0x7f408f9839d3 [ 471.558299][ C1] RSP: 002b:00007ffe3fe12fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 471.566686][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f408f9839d3 [ 471.574637][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 471.582586][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 471.590532][ C1] R10: 0000555573aec7d0 R11: 0000000000000246 R12: 0000000000000000 [ 471.598504][ C1] R13: 00000000000927c0 R14: 00000000000591e0 R15: 00007ffe3fe13150 [ 471.606470][ C1] [ 471.609466][ C1] task:kworker/u8:5 state:R running task stack:22448 pid:1147 tgid:1147 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 471.622995][ C1] Workqueue: bat_events batadv_nc_worker [ 471.628609][ C1] Call Trace: [ 471.631875][ C1] [ 471.634783][ C1] __schedule+0xf43/0x5890 [ 471.639183][ C1] ? __pfx___schedule+0x10/0x10 [ 471.644007][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 471.649184][ C1] preempt_schedule_irq+0x51/0x90 [ 471.654185][ C1] irqentry_exit+0x36/0x90 [ 471.658574][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 471.664530][ C1] RIP: 0010:rcu_is_watching+0x83/0xc0 [ 471.669874][ C1] Code: c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 83 e0 01 65 ff 0d 18 42 64 7e 74 07 5b <5d> c3 cc cc cc cc e8 12 5e 8c ff 5b 5d c3 cc cc cc cc 48 89 df e8 [ 471.689464][ C1] RSP: 0018:ffffc90003cd7b18 EFLAGS: 00000286 [ 471.695500][ C1] RAX: 0000000000000001 RBX: ffff888031880f10 RCX: ffffffff8b260c3b [ 471.703449][ C1] RDX: 0000000000000000 RSI: ffffffff8bd36b20 RDI: ffffffff8dab4ce0 [ 471.711392][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 471.719338][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000001 [ 471.727289][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 471.735236][ C1] ? batadv_nc_worker+0x17b/0x1060 [ 471.740328][ C1] batadv_nc_worker+0xc02/0x1060 [ 471.745243][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 471.750589][ C1] ? rcu_is_watching+0x12/0xc0 [ 471.755324][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 471.760499][ C1] ? process_one_work+0x921/0x1ba0 [ 471.765585][ C1] ? lock_acquire+0x2f/0xb0 [ 471.770062][ C1] ? process_one_work+0x921/0x1ba0 [ 471.775147][ C1] process_one_work+0x9c5/0x1ba0 [ 471.780062][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 471.785693][ C1] ? __pfx_process_one_work+0x10/0x10 [ 471.791049][ C1] ? assign_work+0x1a0/0x250 [ 471.795626][ C1] worker_thread+0x6c8/0xf00 [ 471.800202][ C1] ? __pfx_worker_thread+0x10/0x10 [ 471.805290][ C1] kthread+0x3af/0x750 [ 471.809334][ C1] ? __pfx_kthread+0x10/0x10 [ 471.813902][ C1] ? lock_acquire+0x2f/0xb0 [ 471.818391][ C1] ? __pfx_kthread+0x10/0x10 [ 471.823401][ C1] ret_from_fork+0x45/0x80 [ 471.827798][ C1] ? __pfx_kthread+0x10/0x10 [ 471.832366][ C1] ret_from_fork_asm+0x1a/0x30 [ 471.837113][ C1] [ 471.840107][ C1] rcu: rcu_preempt kthread starved for 10191 jiffies! g30037 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 471.851266][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 471.861207][ C1] rcu: RCU grace-period kthread stack dump: [ 471.867065][ C1] task:rcu_preempt state:R running task stack:27520 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 471.880506][ C1] Call Trace: [ 471.883757][ C1] [ 471.886661][ C1] __schedule+0xf43/0x5890 [ 471.891053][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 471.896231][ C1] ? __pfx___schedule+0x10/0x10 [ 471.901055][ C1] ? schedule+0x298/0x350 [ 471.905354][ C1] ? __pfx_lock_release+0x10/0x10 [ 471.910353][ C1] ? lock_acquire+0x2f/0xb0 [ 471.914827][ C1] ? schedule+0x1fd/0x350 [ 471.919130][ C1] schedule+0xe7/0x350 [ 471.923171][ C1] schedule_timeout+0x124/0x280 [ 471.927991][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 471.933332][ C1] ? __pfx_process_timeout+0x10/0x10 [ 471.938592][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 471.944369][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 471.949807][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 471.954546][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 471.959806][ C1] ? rcu_gp_init+0xc82/0x1630 [ 471.964459][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 471.969633][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 471.975411][ C1] rcu_gp_kthread+0x271/0x380 [ 471.980062][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 471.985236][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 471.990409][ C1] ? __kthread_parkme+0x148/0x220 [ 471.995402][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 472.000574][ C1] kthread+0x3af/0x750 [ 472.004616][ C1] ? __pfx_kthread+0x10/0x10 [ 472.009182][ C1] ? __pfx_kthread+0x10/0x10 [ 472.013746][ C1] ret_from_fork+0x45/0x80 [ 472.018136][ C1] ? __pfx_kthread+0x10/0x10 [ 472.022697][ C1] ret_from_fork_asm+0x1a/0x30 [ 472.027435][ C1] [ 472.030426][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 472.036716][ C1] Sending NMI from CPU 1 to CPUs 0: [ 472.041898][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20