last executing test programs: 6.496503692s ago: executing program 3 (id=1866): mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0xffffffffffff8001, 0x4, 0x7) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x100, 0x110c80) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x1000}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x661fecf27f78be53, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_DESC={0x34, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd3ea}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_TIMEOUT={0xc}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14}}, 0x108}, 0x1, 0x0, 0x0, 0xc0d0}, 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x661fecf27f78be53, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_DESC={0x34, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd3ea}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_TIMEOUT={0xc}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14}}, 0x108}, 0x1, 0x0, 0x0, 0xc0d0}, 0x1) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001400)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/243, 0xf3, 0x0, &(0x7f0000000400)=""/4096, 0x1000}, &(0x7f0000001440)=0x40) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000001480)={0x0, 0x2}) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000001480)={0x0, 0x2}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000014c0)=0xfe, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x9, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, &(0x7f0000001500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1d}, @loopback, [0xff, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xffffffff, 0xff], 'macsec0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x8, 0x2, 0x10}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x4, 0x80, 0x800, 'syz0\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x118, 0x178, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hbh={{0x48}, {0x80000000, 0x6, 0x1, [0x3, 0x200, 0xc, 0x4, 0x3ff, 0x1, 0x950, 0x7c, 0x6, 0x5, 0x0, 0x0, 0x9, 0x400, 0xfe8a, 0x465e], 0xd}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff], 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x1, 0xa, 0x2c, 0xfffffff8, 0x7fff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x9, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, &(0x7f0000001500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1d}, @loopback, [0xff, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xffffffff, 0xff], 'macsec0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x8, 0x2, 0x10}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x4, 0x80, 0x800, 'syz0\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x118, 0x178, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hbh={{0x48}, {0x80000000, 0x6, 0x1, [0x3, 0x200, 0xc, 0x4, 0x3ff, 0x1, 0x950, 0x7c, 0x6, 0x5, 0x0, 0x0, 0x9, 0x400, 0xfe8a, 0x465e], 0xd}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff], 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x1, 0xa, 0x2c, 0xfffffff8, 0x7fff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) syz_io_uring_setup(0x72b9, &(0x7f0000001940)={0x0, 0x9b19, 0x400, 0x1, 0x119, 0x0, r0}, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001a40), 0x4100, 0x0) r3 = epoll_create1(0x80000) syz_io_uring_submit(r1, 0x0, &(0x7f0000001a80)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x20, 0x0, r2, 0x0, r3, 0x2, 0x0, 0x1}) gettid() setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001ac0)="db720f592c8672f756ce034e1321e923", 0x10) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001ac0)="db720f592c8672f756ce034e1321e923", 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) fchdir(r0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000001b00)={0x3, r3, 'id0\x00'}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000001b80)) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000001b80)) r5 = syz_open_dev$vcsu(&(0x7f0000001bc0), 0x1, 0x101000) preadv2(r5, &(0x7f0000001c80)=[{&(0x7f0000001c00)=""/96, 0x60}], 0x1, 0x1, 0x2, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0xe, 0x1, &(0x7f0000001cc0)=@raw=[@alu={0x4, 0x1, 0x7, 0x8, 0x3, 0x40, 0x10}], &(0x7f0000001d00)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000001d40)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000001e40)=0x80000000, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8b0041}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xd0, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x19e4cae0}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000010}, 0x2000000) sendmsg$kcm(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002040)="aa054f63ac4adbadeb1705ee74b3abc86e7361dc9abceadc8ee09511856a7d3e3c1cd6879eb8d81dbf4844b10855b050c581ed51536030f332af6502fccb6ac08e73df16e3cf9650e00772df6c4c8639d5edd5805ef6ec99af7020bc078a09a61a53476450131a6d27465bd391105c8ea3f3496346e8289f6ef7f10490c591beb7c3bc648a05886e279bfe449b66eca4ed5e1d6edc5cb5de75c90a12e900b3eef8200064435c73bae1e611943b9273a291e17c32b0bff90dc085f755e5e693b758186ee1808e024c3ff0a0f4e21fa3c71f5e26", 0xd3}, {&(0x7f0000002140)="b59db43cdb8bc04bf0ccd0713c", 0xd}, {&(0x7f0000002180)="352f27d392b92a93d10ede44a406dfd093e7415004ba573588981a6c12fe4fadaa13fba6f737dc4ce92cb10a4b6ba9f1e4c09162088bb2750c54f635c08ff68ddae9c250c0e25601d503f8d5ccdb52741d7b649c76d8406dbdfe4539b63fb852ce9b5b09a69c22c5e199e87dd562692115a04129c0ccef0658837a3be5d53e99a9591f66ca04c64e70567953dfdd534a21060615b93675dd852ab176949292db9c5a90457fd0", 0xa6}, {&(0x7f0000002240)="c28831dcf992be8f5b7b193e96b01c89ce2bb68b538bc07aeed8b118c52334fbc3da722b1661ee11e6b3f9dfed199bdd8e7d442dbd17295133cfd31c26293f3c50fcf9502aebaee04da5497cd6285e8992", 0x51}], 0x4}, 0x45) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f0000002340)=',))\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f0000002340)=',))\x00') setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000023c0)={0x2, &(0x7f0000002380)=[{0xd, 0x9, 0x7, 0x92}, {0x7f86, 0x48, 0x8, 0x7f}]}, 0x10) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000023c0)={0x2, &(0x7f0000002380)=[{0xd, 0x9, 0x7, 0x92}, {0x7f86, 0x48, 0x8, 0x7f}]}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) 6.128563798s ago: executing program 3 (id=1870): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x0, 0xfffffffffffffffc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xff0f0000}, 0x94) 5.885459452s ago: executing program 3 (id=1871): fsopen(&(0x7f0000000200)='9p\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000240)="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") socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a2030303030303030303030cd33303030303430393300"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x2080124) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) 5.603692118s ago: executing program 2 (id=1875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)="7dd6a3af12dcbe4ddb47a697f1fb3617c461ebbe32c7cb1790fa05023120fb7db1f7a536ce977e143ec36ab6957dc43d7c6c7f4641eb6bccb00692f75c209176f2166dd49b794d6e5b3d4930aed5cb5aa55c04c1efaedfd58796bbecbf090838ee2021ff4b90941441f55d6565d01d66b728ade220a3603b16909029704c8d61911198e356", 0x85}, {&(0x7f0000000340)}, {&(0x7f0000000400)="84850308bb0c1cb00b524835cc2cd286019feac9857495b3c117aeeb3ebe56dc4c9d378d095ade94254986064e02f65c979816e4e4f36af76cbf123078", 0x3d}, {&(0x7f0000000480)="ae608fc2db54ae65ec87fbccb8c8d09a9753c54c7529409455bc80023750469d087fbd7f337245878286e60adbfe770860f0be5a3dd7606e629550b121dfcc9707469db4eb610e8afe739a4fc6cb787aec940c83ac571ca05c745294d058472b1cc6f47b84f1ebf6914dd812425511d53f20511e9426ee0a94056fc59b95d68644d4232d28a87f4e3336de19923e165f7d33a31c7bdc72bee45df82a167ec452fae2284bd2825041ffc25d", 0xab}, {&(0x7f0000000580)="2f6445c2c1893f7f8c894a8ffa74a65792115a311a5d37b0d2a518552de13eef36e0969346689a11013614315d4aac11802de16906957d6083ba60d1d87fb5a414c5122c602f15140f93794f2555702fa95c4ce372a43ca3", 0x58}, {&(0x7f0000000600)="36442af32604e0cce9929272e227304aa6b6865910242a5abc459bed529a01f035e65cd5dc3ede9e2f27f9b5276e102c2aeac83a318993f9c6e6055be3c139359f51760ec4cd8dc76ad44ff6f6dc815217c59483488b62d5bf14509719e3e1e0d6b4a4d891085ac3a7d271021995ec211ed44a2a56009de815833bab18def2b32094458ccdefa3a9ad33f8d0499350a573e9119eb9602a636042cebeab0ccc04", 0xa0}, {&(0x7f00000006c0)="adc6977bce9334d5cbee9e1abc4331e1689cf5464c5ab4ef0734682a092ef6859a96648f52846808accd4ca118ee57e34b9ff736f85f4240093d5388af82035262819e8e4babfbf94b8d7b9c0c42658d8ca9f9ce12d30237aba8624cce97f0409c2d20603e4f13741a7776e8ae3544d943976fe23fcc82f82e9879f895d71b2f1a153f0c91bc4a67494eddc3313065ee1deaa184c55aa0abaa8cb1b08ce583927025a9", 0xa3}, {&(0x7f00000007c0)="c7e9a849cc16679190f1fb601214f76dcc3ae98be27aa55f052bf39ca91fd8ebfe403864e1fdb404a118604c536fde82eca6678310891f131f881ccd734441c30a5f1bf4d1ffb842a91f95cd1225082c9a68a52f0fc5c8d41545f1482c5ad6eca8e9cc8aa231089029799f77b910f9a004b0e49152b87f24def263935d8fb2b03d9faf3a9d2927b07bda98b50c2c1cada0706ff54042e6726baf43892e86", 0x9e}], 0x8, 0x0, 0x0, 0x8000}, 0x4c080) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) socket$nl_route(0x10, 0x3, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000540)=@v1={0x2, "5d4311110b04c3f6b6a5"}, 0xb, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x20000021) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/tty/ldiscs\x00', 0x0, 0x0) execveat(r5, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000b80)={[&(0x7f0000000a00)='\x00', &(0x7f0000000a40)='-({\x00', &(0x7f0000000a80)='GPL\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='^\xc1&/\x00', &(0x7f0000000b40)='\x00']}, &(0x7f0000000d40)={[&(0x7f0000000bc0)='/dev/dlm-monitor\x00', &(0x7f0000000c00)=',\'\x89\x00', &(0x7f0000000c40)='/dev/dlm-monitor\x00', &(0x7f0000000c80)='[\x00', &(0x7f0000000cc0)='security.ima\x00', &(0x7f0000000d00)='security.ima\x00']}, 0x1000) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) 4.818728267s ago: executing program 2 (id=1879): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x10000, 0x8) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000040)=0x7028) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x9, 0x68, 0xaf}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0xa3, 0x5, 0x1, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x80, 0x9, 0x27dde9cf}}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x50, 0x14, 0x200, 0x70bd28, 0x25dfdbfb, {0xa, 0x1, 0x2, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_CACHEINFO={0x14, 0x6, {0xc055, 0x4, 0x5, 0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40041}, 0x854) sendmsg$rds(r0, &(0x7f0000000a80)={&(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000300)=""/141, 0x8d}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f00000004c0)=""/12, 0xc}], 0x4, &(0x7f0000000940)=[@fadd={0x58, 0x114, 0x6, {{0x40, 0x3}, &(0x7f0000000540)=0x6, &(0x7f0000000580)=0x6, 0x3, 0x0, 0x2, 0xf, 0x46, 0x5}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000005c0)=""/130, 0x82}, &(0x7f0000000680), 0x26}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000006c0)=""/221, 0xdd}, &(0x7f00000007c0), 0x3a}}, @zcopy_cookie={0x18}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/194, 0xc2}, &(0x7f0000000900), 0x4f}}], 0x118, 0x40018}, 0x4040001) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x6, &(0x7f0000000ac0)=0xd2ca) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xba39}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x4008000) write$char_usb(r0, &(0x7f0000000c40)="d90409136484acb68428d1799d6aabee99a5bb7c1a6f77c79c306c219796f713cf24ca8659ab483dfcf39cf765c63b0e06e039440c5c9749eafca119e1bf142a28a9f52d712f4f7f599a6efac8174b0d71bf", 0x52) splice(r0, &(0x7f0000000cc0)=0x8, r2, &(0x7f0000000d00)=0x6, 0x7, 0xd) bind$phonet(r0, &(0x7f0000000d40)={0x23, 0xbe, 0x9, 0x2}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000d80)={0x4, 0x18, [0xfffff0aa, 0x6, 0x9, 0x9, 0x9, 0x1b7]}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x71001800}, 0xc, &(0x7f0000001100)={&(0x7f0000000e40)={0x290, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x264, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "0cf18e411387deb2661397fcee352a77b815f51b54fe638f1d8ed16a766f60c4a11aa15fe0660a97e3f50c04d6cdc6d0abf13b909e769d88295383f571b61f75884bb9db0e4b5bea3f309cec1cf270e0c46448a2ae7234dbd8b195cc9a0983a286b3e64764bca5ac0e7b8f9ef99dd7f2727a5eca6b0a8a4b56e22164a157df4b21ebcdbf39ec35fdcaea82c1e00449cf7452a49928158fc73d8bcc5aee4e0c55b63e9eb25dcec7c26439c7ce853854d5578312a09e1b286bc901825df3c0e82b29f12c128c80db5c36a5085f5b30e52e6df6bd1f8552a1ea39c5022cd81502c2bd42f93a06e593612d9545de0ab44f0b7fec90"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_MASK={0xa6, 0x5, "fbeff2caa16af12c14a7d9436c7b64ea796f1c8fab912ca747643b56e0d5355af3b8f7a11a1f26ddd7b60c805e8800d9d1b496886d99e0b8ead6a6ff734f83e8b6413770fb80c83c2264629add0ff159ea17dc5dfbe8396897a009be88d089ded8eb279cd283e37f3d609b3a02651700d357e054bec1133496316aa46dd1d06695b18e597758854fe9fe6b0f81bf64c879d502e20d486357fced8d4cdac96ee93c07"}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "621d1443ab7e6d939df3ac1bd6188dbba6b064f6626ce05483b500a33a747b4e61a9f935ce7bf031d4c796f6e96de5e08e51f385103598c99659f69377b6164970488dc5958b01fa5c5591c515ef05525bcb2f07dab181b17077e33706c1b344805b2c458354649f2c782339088f0651da356bd7525859d4eb2229a82d6aa761f620c75cb40210a76a45c466e04540a5d0e4a89bc1"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xd15}]}, 0x290}, 0x1, 0x0, 0x0, 0x8080}, 0x4fdd77c4a3d56777) sendmsg$NFT_BATCH(r0, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) r5 = syz_open_dev$vcsa(&(0x7f00000012c0), 0x4, 0x129000) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) socketpair(0x2c, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001340)={'vxcan0\x00'}) r8 = socket$inet_sctp(0x2, 0xad86ed1fe351d408, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000001380)={0x0, @in6={{0xa, 0x4e20, 0x7, @remote, 0x4}}, 0x9, 0x0, 0xa0, 0x800, 0x4}, &(0x7f0000001440)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000001480)={r9, 0x5, 0x10}, &(0x7f00000014c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)=@ipv4_delroute={0x38, 0x19, 0x8, 0x70bd25, 0x25dfdbff, {0x2, 0x80, 0x0, 0x40, 0xff, 0x3, 0xfe, 0x3, 0x600}, [@RTA_SRC={0x8, 0x2, @empty}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x26, 0x9, r1}}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010100}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20000085) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000001600)={{0x2, 0x0, 0x7, 0x87e, 'syz0\x00', 0x1ff}, 0x1, [0x10001, 0x2, 0x7, 0xfffffffffffffff9, 0x84d2, 0x1, 0x2, 0x6, 0x8000000000000001, 0x5, 0x5, 0x2, 0xb, 0x8, 0x2, 0x3, 0xffffffffffffffff, 0x2, 0x2, 0x6, 0xdfa, 0xa, 0x9, 0x9, 0x5, 0x2, 0x10, 0x9, 0x3800000, 0x3, 0x8001, 0x2, 0xfffffffffffffff5, 0x8, 0xfffffffffffffffb, 0xd0d, 0x7, 0xbe03, 0x3, 0x4, 0x6, 0x9, 0x120000, 0xe, 0x1, 0x7, 0x3, 0x2a, 0xffffffffffffffff, 0x4e51, 0x3, 0x6, 0x8, 0x10, 0x100000001, 0x2, 0x6b, 0x7, 0x100, 0xfffffffffffff1aa, 0xe, 0x3, 0x6, 0x1, 0x81, 0x4, 0x1, 0x2, 0x40, 0x7, 0x5, 0x2, 0x3, 0x4, 0x5d6c, 0x6, 0x2, 0x7, 0x10000, 0x100000001, 0xfff, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x2, 0x3, 0x8, 0xfffffffffffffffc, 0x2, 0xe1cc, 0xfffffffffffffff8, 0xed, 0x7, 0x7fffffffffffffff, 0x3, 0xf, 0x3, 0xc607, 0x9, 0x8000000000000001, 0x20000, 0x9, 0x2, 0x6ee, 0x1, 0xbac7, 0x7fffffff, 0x4, 0x5, 0x401, 0x9, 0x2, 0x3, 0x100000000, 0xc03, 0x80000000, 0xff, 0xa, 0xffffffffffffffff, 0x1b6f9aaf, 0x6, 0x11be8a78, 0x2a687392, 0x0, 0x3, 0x5, 0x7]}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x80010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x108, &(0x7f0000001b00)=0xffffffff, 0x0, 0x4) fsetxattr$security_evm(r5, &(0x7f0000001b40), &(0x7f0000001b80)=@v1={0x2, "2bcbacfdbd98f0b4a6fe95310f6d7aef868df7"}, 0x14, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000001bc0), &(0x7f0000001c00)={'L-', 0xe}, 0x16, 0x1) 4.657337663s ago: executing program 0 (id=1881): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000006000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) 4.617796951s ago: executing program 2 (id=1882): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000380)={0x0, {0x1, 0x0, 0x5, 0x4, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x9, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffd, 0x0, 0x6, 0x200, 0x7, 0x2, 0x6, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x411, 0xffff0003, 0x4, 0x0, 0xffffffff, 0x9, 0xad9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x40, 0x10000, 0xec6a, 0xca86, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0x0, 0x0, 0xffffffff, 0x3, 0xa000000, 0x8f000000, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x2, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x3, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x8, 0x3, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x40074, 0x6, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x400]}, 0x45c) 4.573960695s ago: executing program 0 (id=1883): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 4.48514564s ago: executing program 4 (id=1884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x17, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xd, 0x4, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xfff8, 0x49, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 4.416243448s ago: executing program 0 (id=1885): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x80243) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r1 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x3, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r4 = syz_io_uring_setup(0x131be, 0x0, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000200), 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b326d078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x6, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={"4497acf4", 0xb, 0x1, 0x0, 0x5, 0x1000006, 'U\x00', "1575a859", "0725eade", '\x00\a\x00', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000020da0b1440400001020301090269000301002001080b0102010520040904000000010120000926b40b04748301070008090068090401000001022000090401010101022000090501092004018c03082501000c07400009040200000102200009040201010102200009058209ff03fc0305082501"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000200)='bridge0\x00') 4.313728489s ago: executing program 2 (id=1887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700001b08000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 4.313092358s ago: executing program 4 (id=1888): r0 = socket(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x57, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200008a0}, 0x4000000) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x6}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = eventfd(0x1000) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r5}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000005c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000981fd5b000606010100000000000000000000000805000100"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) timer_create(0x7, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) 4.312698261s ago: executing program 1 (id=1889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x89, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r2, 0xfffffe19) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket(0x1d, 0x2, 0x6) bind$inet(r6, &(0x7f00000000c0)={0x1d, 0x4e1f, @rand_addr=0x64010101}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003b80)={0x2020}, 0x2020) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="409dbb4bdfd02aa7aca110e29e8c98ef8044dca2b55241d9d5cbdbc79130bdd3ccdfac", @ANYRES16=r9, @ANYBLOB="110127bd7000fddbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000d5000b000900000006001600faff00000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.146358382s ago: executing program 2 (id=1890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)="7dd6a3af12dcbe4ddb47a697f1fb3617c461ebbe32c7cb1790fa05023120fb7db1f7a536ce977e143ec36ab6957dc43d7c6c7f4641eb6bccb00692f75c209176f2166dd49b794d6e5b3d4930aed5cb5aa55c04c1efaedfd58796bbecbf090838ee2021ff4b90941441f55d6565d01d66b728ade220a3603b16909029704c8d61911198e356", 0x85}, {&(0x7f0000000340)}, {&(0x7f0000000400)="84850308bb0c1cb00b524835cc2cd286019feac9857495b3c117aeeb3ebe56dc4c9d378d095ade94254986064e02f65c979816e4e4f36af76cbf123078cddb", 0x3f}, {&(0x7f0000000480)="ae608fc2db54ae65ec87fbccb8c8d09a9753c54c7529409455bc80023750469d087fbd7f337245878286e60adbfe770860f0be5a3dd7606e629550b121dfcc9707469db4eb610e8afe739a4fc6cb787aec940c83ac571ca05c745294d058472b1cc6f47b84f1ebf6914dd812425511d53f20511e9426ee0a94056fc59b95d68644d4232d28a87f4e3336de19923e165f7d33a31c7bdc72bee45df82a167ec452fae2284bd2825041ffc25d", 0xab}, {&(0x7f0000000580)="2f6445c2c1893f7f8c894a8ffa74a65792115a311a5d37b0d2a518552de13eef36e0969346689a11013614315d4aac11802de16906957d6083ba60d1d87fb5a414c5122c602f15140f93794f2555702fa95c4ce372a43ca3", 0x58}, {&(0x7f0000000600)="36442af32604e0cce9929272e227304aa6b6865910242a5abc459bed529a01f035e65cd5dc3ede9e2f27f9b5276e102c2aeac83a318993f9c6e6055be3c139359f51760ec4cd8dc76ad44ff6f6dc815217c59483488b62d5bf14509719e3e1e0d6b4a4d891085ac3a7d271021995ec211ed44a2a56009de815833bab18def2b32094458ccdefa3a9ad33f8d0499350a573e9119eb9602a636042cebeab0ccc04", 0xa0}, {&(0x7f00000006c0)="adc6977bce9334d5cbee9e1abc4331e1689cf5464c5ab4ef0734682a092ef6859a96648f52846808accd4ca118ee57e34b9ff736f85f4240093d5388af82035262819e8e4babfbf94b8d7b9c0c42658d8ca9f9ce12d30237aba8624cce97f0409c2d20603e4f13741a7776e8ae3544d943976fe23fcc82f82e9879f895d71b2f1a153f0c91bc4a67494eddc3313065ee1deaa184c55aa0abaa8cb1b08ce583927025a9", 0xa3}, {&(0x7f00000007c0)="c7e9a849cc16679190f1fb601214f76dcc3ae98be27aa55f052bf39ca91fd8ebfe403864e1fdb404a118604c536fde82eca6678310891f131f881ccd734441c30a5f1bf4d1ffb842a91f95cd1225082c9a68a52f0fc5c8d41545f1482c5ad6eca8e9cc8aa231089029799f77b910f9a004b0e49152b87f24def263935d8fb2b03d9faf3a9d2927b07bda98b50c2c1cada0706ff54042e6726baf43892e86", 0x9e}], 0x8, 0x0, 0x0, 0x8000}, 0x4c080) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) socket$nl_route(0x10, 0x3, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000540)=@v1={0x2, "5d4311110b04c3f6b6a5"}, 0xb, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x20000021) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/tty/ldiscs\x00', 0x0, 0x0) execveat(r5, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000b80)={[&(0x7f0000000a00)='\x00', &(0x7f0000000a40)='-({\x00', &(0x7f0000000a80)='GPL\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='^\xc1&/\x00', &(0x7f0000000b40)='\x00']}, &(0x7f0000000d40)={[&(0x7f0000000bc0)='/dev/dlm-monitor\x00', &(0x7f0000000c00)=',\'\x89\x00', &(0x7f0000000c40)='/dev/dlm-monitor\x00', &(0x7f0000000c80)='[\x00', &(0x7f0000000cc0)='security.ima\x00', &(0x7f0000000d00)='security.ima\x00']}, 0x1000) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) 3.329416532s ago: executing program 2 (id=1891): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='-.\x00', 0x84002, &(0x7f0000000040)={@align=0x1, {0x7fff, 0x7, 0xa, 0x4}}, 0x80008000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x4}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000140)=0x100000001) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="274139b93d4ed30c82efe512cd19ca00ffb62094198a94ab0983b74e507fb8ec98e1bd3408089035ddbaaef02ecbcafa0640cbf3076f5f571cef71e60aa3ac2b78d7e84315766eab139272263ee31fc9bdcb60e1c52f47370a880f80847f83", 0x5f}, {&(0x7f0000000240)="4f4e66084e9985cccb45727bfbf72e4b3336e7f476f9345175976f274b9d3ec3e2cd3cec02d53b6af77d810ac3b80a8008a7b19537", 0x35}, {&(0x7f0000000280)="4bee15fd99ab80da4de7a54ebd51f85e3563d2173a71e5071bfd53bdd1563dc75a19661c6cbcf8050bd499a92f6cb1e66fdc17b71d6c7003c29953b30ab29b222dd038de5fc3905d2600a2c25ec5f11df2c8b781f158ac1110c142adb1caea010ac7f4c7e3a0c5f824598ea4e17d224461221a90ba265d007326871fc6d7b8b309800406d15cbe07ce46d7380e829662acf4cbe0873380cfee42bbb3754de87ae41c3b42a19dbea7a00851aaf50e6e74a2168c886b4136fe8b5d5f4529a328646a224ad5810726dd054670baa0", 0xcd}, {&(0x7f0000000380)="582a7ab45ff0587d0054a6927790d7bb7b63258966a403ee1fd0166cffa9288cebb8df541c27c31545167fdb9d47ab0116e52465aae3196547b48d26cc095353ad82ecaf0fad802b1d79d4a35d2447efe0049c556ac40022094ed50dbb4088d3e8927514a1e18951aef49f10649eb8922453ed696ac59a935118ee4e397f31959757bffe072106b0d495c32da44414e6eeffad47968c4f69e7fb3d584295b087c6b103e8f8a28b73727da1baaf6585d6", 0xb0}, {&(0x7f0000000440)="350fe116c29487e0b4e14f2b5e103fa454277de37ba0e8d294c86092cdf29fcf1c0ce8141728242ffe7ce0ef39833d665bebec3553a2900fdbdd7248b48176986de892826fb8c9", 0x47}, {&(0x7f00000004c0)="ac920e77373c15d580be47721fd10465aaab93ffa9aa33a0f7d215b2085c36c8554a86abaa2fef846de4cfe1264075c41c999972f65b8b7f94feab585a8cee86b1da1d2854c9432e67ae7a460ce4d55ed7", 0x51}], 0x6}, 0x4000000) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000600)=""/151) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001c80)={0x7, &(0x7f0000001b80)=[{0x120, 0xb0, &(0x7f0000000700)="10a55db0217445a33b02ad2697f84c7d84ac5458aa87fb54987ae4807f9ca24a49c116e7b87c946b673ab90fae805d0aa12dce70a5f1a797470b26d026604cf4b3f67a65a17fe4d95ce73aea667d71582e481d0418b8da0a7b43aa305ab97e8496aa20c075b8fa24d86ad2e0c866e2f90178044afbb0e559ad3034f05900b7a9d69c0653944593f6963fe9710b0a5f9c8f7b3e0d7194888c8d4957df87fb0d5787ca89316721c6c1586dbbd284b1cf2f", 0x0, 0x1}, {0x40, 0x9e, &(0x7f00000007c0)="6c765adce53c50862f046e5e42f5307b7eb54aacd5e876f5e9829ec67ee990a21f95350a08943bd98c58c8297a2feb4bfaff705c64062ab319cd6d1d41a4c68c834ee61680abb99f9eba3c4874503653469c164270512e42558be71c8b6fdff37048a05fe42a3b1236f14b36746a971309b0ee4725251e68ae9f3f714e756ea06d8343f1b74dc422e22016c3157679eea9ab0461fded872357d74eeae356", 0x1}, {0xfffffffe, 0xc1, &(0x7f0000000880)="36696fdb33d0668b540f297460de204019c8fff757e6961a7b38efe5876b37b374ea536d0942d7bec296b615e60faea8cce712b2486c66594f244b54b4ecf16224be8d7c7c8800cc099cb7d392bc2c2fa8cd879437828659322bbbeb8157df4eff9a4916a64a6153211f685645e4225f8ec9ee7411d62c6ae7214e440f8d4d30c4aeca745e78397043b620993c9e8751c14e202c01e019f0e9fb2d9d50905a2495d9c2d6cd7d6319bbedf78ffd885064e334bf9e56d7f550f69b61406c89012c78"}, {0x9, 0x6c, &(0x7f0000000980)="b61597b60546f1ad2173012883bff0eb17b8e92e9a2ba934e130891dd9257195d3838fd67a7406ee941f6b63fe1f1144a2d3898de78473941984650fb8615a48328f98b8f937e81e655f8b6c1f9038dabf9d5faa18175c4f15a0105ab867349e956debcb72543e88a31c43e7", 0x1, 0x1}, {0x2, 0x1000, &(0x7f0000000a00)="c04d09bb8af99454952a012a7243273d0055511e69e9a71ff38329a753db901e2f3d300377d7a367a6f69b277b6855efca79edf2d7a3e1fd712a06e3c51efd4608ef3d9eaac38eb6f777d860c29bc2daabdc6f1262402efacd204db349446fc2024f1cb3b3bab3a0eaf266ee407e80df61ea094b2cc06b45e01d0007eb7292ce97253921aee5bd32fd3716631aa0b8b8b0140812694d1c613a416e46c564b7779b06d0451ad662d37feac6664e76a8e91920a619eac63530eaaa537f898ef037131b2aedcbafafa65076b0462dccf25b3c3f86001e5d078714fecade6d06a77a2c21a29bcf642171f8c0261dcddead8c3e19f02d6f41c5acfbf392d12d2d4786f6e3dd80cdd0adb414c3327f08e72d64319c81d921154ea47e0a8adf4bb25cf03df7ac38b48465e00fd90a94df064f7b719c4773db369a3a1ebcddaad623353c017cc25a5831f20649c6def2d42742bbd4856bc59f76cc2a6dca0a948cf2438f614013f199bb7259b6b8a1a5929843090c19f6671406dbd30840374b119f0c4aced5fbdf7796a78c93242d8d541c3740980b84b15a1e2873539773b4ea6b6207d8dc16e82b5a36188ed891ffa1e9fa903a71d44ea834914fca0fe74fb6b259dda8b8767e0e3abcd0922b17dc80b506803c2ac17b6e241f8ef4891622139a8207f3f245ccf2cc7f7a893d828ace591d5f645bbbcd45034651fb159a4c8f62b1311c159364335ed5e5185ef1b1e372d01b1083cb61f362ea3119247c94d95019bdfcea95b9c2407bad30eb291b182572fa4fe70fc395039a05f0699172c87d9cbd663d0f9bb164d9b67d0506b4138583acfab0345e5b041d38c1d40304e9d0e90309dd40f6be33ca61556ff57cd8b42f44e4b25e7ddb41db66dddf60f58023b673473d1c6d3eb86e82c9a467b2b3668ed7c3bbc8d382599419b69a08f2ab51623f2fd5aa2e75e8d51feb2bf73650ac450de348ef79295a540338dc8bdb4410acfde0562488085cd47c4231fd27cd3791bac7b204a33e797f9dee9232034f12849ea5754c70602c561cc50aec30c2cc53331cfb05ae1a0f2db9bcf88447ee85d1b86634a0d6a4a8d7c53bc17be8c2384ccb51c32e7d2b698ec08f6cdd7b40d3aae4373a709710a3093aa8ca6aaa60cbab56fd82eab416c9c88facfac99721bf9f9e1bf283df28b67592c517875e51760adbd6576a7fdc7710d4a910d734e25b0b7990d730022f09b932fcf3530beb17341aa08ab7620b0cd8496cdf4e402f35a46c3b90eb13024021ea3fe8743ffccf9e280f8eb1f8a4d8f28c3ea74f3dd6e8a39053861521057560dddf948cdc19ee0d36c59b9a49a4421343eaf5bf8428943ca74ef73988349bb40abcd9811e73881ab916d6be398ee32fdcbc797c0ec7da816090c3917c39e60513c11b1f871f86531ca92a27a68f88a0a9b439bfd79c24d32c0f32e431085027bc924ef72531e9160b2a3b82490a36f8a1d52311329b1b15f483c8413cb8e73a20eba7485e314754e60ff9b5dfbb2f31fdc3beec7e44e2d29e49424fdd80954452cd2e8497f03f1f03f9d7bfc8e36e0870a7606316c102a726f06abb9eddb25c29339bc2baa6b2761bfd5b3924641a3bd25678872c5c05d53105364379a387ba083495fb6666a12ff3534b5480179c451154d15b3cbc988d05661f2a635c7d8f7092445b62c35a959e4088e5712622ae21b2e39876ad02f216140591597d6fa468b2e072983857d8215aac7515c9100292ea1ccf02422afb61f73344fcf1fd66f981242c307556b1441b599714d5ceffbcadca0dcad982c683f153589c8f64a88bd5ac6f0f84e132b674ffab0d8b5d545f981e293b36dee6f6624fc38aa5deb23ad3d24bdf692dd6dda7876b7fb5388528b21eab9871b5e5fa5b5b69150b124cf608b0eeaf4a9815ef9a4ef169ecad4f004a5176731dc1f886379aad6470ba3444322349264f0ecdf9e91fe8e6086b72ec951016028e5097ad566ef249c76d54e39cc123e8f8085bd2b4f0ea59426c166603fe2c1d2605404be5d72a7d378c2e0b29db30acb3c773645cd09e06db6d52388069793ebdced42576718a157adf55aa1505ef848ee21d92a0cb689d6655b810480121a1cdddc313b245c07755eafb417a5e5ccbd2e0530af0a82be8d5e389a4a0d062031918e605cb307a9c8a36acdf513aa727b9e6b98b1e8c9cfcdea2a79381953097a3c08981aeae88e0a9406811391a3d9dc35198fdcd2088526ed4bb6fb350e112b9ea8d67a03804a565bb4b4744d1a5ca1ec4d18f248302f99eacbb002fc7878ad31ec425217e7ffaba136ae14f4177a75d34cd23c1bae3b89a685c09674355e441640351c22b5ca0ce428c5e94de6f484ae337a6a60b4dae79f86b18a1883f67cacba6a41504cd6bef87bee39488961d5d45093a23a59f0dec3ffcd66c8cf2f2ae5bed64ce186f7bb9389685d442241ff133ead180af95ef2fb5b1ac239d324b89631322c8e3450b24205eeda544688743fdd0175e07c6d7139bfc5013d59b19635fe6b9291a0c876664531be9fc32255daeb6278db0a2a0bf38585ec2eab0542aabfccd91b0e61a6c820b5a73f32d69ee7be2e32e23c351f0abd2522e081c7fc8beb38f30111c7a4fd4cd3c93e08057686b2fa8c0384dda746578f911529c7e4de547c3e27c20915d473791ac9ed60c6c06d43825cd8b0b580f7302ff797dae86432b2f72854489964da330dcb222be111842aad92eaa12d9546b3f7d4076e0fd30dd93020f2159c0c6ef73c890378affe0ba41f2076eb9193f8708340bfbb4df55cc41d4d00910c820832ef9b5b341007c54d783b7ff77e72c242c96ea44b27088e1403f73f85d5d83984e6e46852b53e436c812b33d87773b8661ebd2618e8d8348b6ee8984fd6342a7252c43824ee0d7c3428ac821e7f4b89dd485633af0f431d32c9818c51c7f15e36d64b26e3e36473e9c99f94d4c6f2592535b9594fa46b28f9429ee9a193ceced4db18ad3ef601bc9a4385cf9f25dd9796e0cf6e399704e70fad93ad4d7102144c933b87a5664067166507f79fe3405dab826dd367acdf58882e6adad354cc021ac1d3c1740ff1e40f84ffbd7b35d52bc5780bec4dca99e7fe3e3ddd310cd259baf11220a95a5cfbf01160409c0057cc61e3b501a0ba8c406dcc0720128cd8321d749acb358e8ac788dfbb789a479242aea724e99f4a603cd1703df58ceba738ab90b05338f95a72f874c8d217155c89c3ad6aeae50f6fa894bcce01e2d0e351f1be982efbed496bd6c5b8e97703c601814b21e3531a9ce3c925bf943da1f8b3e7116a9822b23de0254dc2e07f4d231c1060b96fdf7a24a6a0780de05726cce123897c31dd7f817caed9befc5aeb5383c00234ca3374e46d4f3be44e36057b1f4636a3f1c40472676feaa7bdb9410687f07b3e40ca40261d30216369ae581405f4dab534724f5afd9b6a6aaff9ee01e134fb43abcdfffb3ae70096c7526882b8e503700152d47d847401b30b74875461eac02aea1587bed92a27e369666073c0d73bd125d86127dfc2ba94c7d593840862150c65a399c13dceb12404120f11c54069d950dab0de8ada645adf2312225b307f981e630bf733a31976de6e237453c64ca0e38ae31b03c7c533a99376c963d5427e536cf14a0d8913d659e5f91c08f11c9656035adfea6c0495a712a0744b8d55c5b5cf3b4041f42c8d48b64786b7f2f4d90c151dcd8127cbbbd657cadf32ffe0af952aa5b41cdb9761fec29f05d5e6843a59b830f12895fbbe02bd818f4857ac7a52f10721b530e1670985aa9f3d6e4b9222243eb41fd6dfc64820a0a1493bbe3404e8ed7844302a440c33b8acd6cc4da88291cfbc957e6cc035ed30002999b461a99857cb8d2207bf008c869b91052657c04065eec53e222f835cb6ce1f53351f38c2a7c9a00e3d95681c91a59eca35e67075958dc0b2be6e9f39e72ae73d4c46271b64a8dcb908419bdbf56bdd5c42a04178cff7e755135a02dec5efe6377b5e51ae172378dfcee546367bb8d6d8700da3e1e7c8d2dd349c60a1884bbab0160635a07387b15a9a0a2282b9e92fdc3db8feaf29be38c6bcfe946e12c14a556ddfbe1b84b6524df5cd9eb74b2cc0f1880fab8264118ad29470e9029890871118778d645524ba5e459ffbb4b6357669b234ad153ef756f2f3c1d646b8c6bfae27ab619c48d55487e4b02d6efd81d4d2b7e001846a5a172def269ee7874c6cd8f117ebf7862d0bd152bb063b584f46604db625be1acf2b67d9c56841930e9c1c4367220066732ef6a19bcdeb70bcc2fa186991882d95650a68dd8f461e82da8a1de1a47070c064d15985b107bca01feaad5da8fb88f91cde7c13b613206756ad772cc5c92799220f387cb0734296b722189126c2d5e6e6336486cae9ba841afbe4d5a14da31587840138ae6fb34d9c148966e0f67efe6215a5692d34a50519af744c1c0a965d61423d8b6cc7e266979706516a9126987e1771af611570bf02036feb6caccc619aaea8ee66d21e9191a3a76e7ad8343f80cef3eca29c28f1b2cc2f7803d85570eb73804c782ddd60b9a47723c08f59da0d2033cb17e84e2071c5724d0aa7387735ae9fedf93dfd5d32e1034ac02cf8beb2f78f657887caa0a6e2daa0a73cdfc0000cced35b12e0d07cd7ae659b50c47659fecce9bc6e8cb9f8812e1d427ef071d59f5e751137f2e54f28329073642d064ec1a19f62e117e649d45c56f5f0b7161b248d7ca04caec16c7d05377d2bb7ecd7543ebbd9774161e9fc414163ce8c75f523c8cca36c9f494e40d2655b46cb73d845e2a072958aaa8ae86aa082459f4bb77a67314522a082515c4fc5c4dbf28da2749c406a22a7d8ae02e557ff81b49f684d0cc7d5ecce5797721103cd44659f4edf4b099fef1dc941b7b9ed1eee6ff58a1ac9167f6c7548dde0752e172d968e47987214ba9aff17c62784354f4535bc1802fdd27263150f1209c52ddf7ec8b349ca2f78e081de747e4b6890af2541a30d08877b1a2ecd310a692777b5d62426c303dea52a03d9907e94831001e436290e3ebeea58b9e0619ca0612f91bcd9179fb4b5fd5ca8845fce30401e88098128d7a18cb7cacb305e46978a821500bfe27df4f9e5ce334b3addafe42747e3aee6e388effc974a24045bf255d2d98163f1805e015812b1ef79d36c2276d5cc07205521cba3b83f359a853836039c1b3ebc2a238e2d54758a073fd889159eec75149ceaf15cb3bcb96f0ab6941c1ac578aad2ccd3c7a19060d9437c57b2417069fd135017f969533cb9eddb2e9ad39decc21b3f73e64b24718ee8423c9128bd8af7c07523eeecacf186aecc78fec665edb3c389a26ee7f312171281e531da9be06361f2b8865b0f23602815b9d378e354c261f0e53a173310800d39d13b401b570faa434056d2f7749344f5c8439f5bbe435941f9c6d296da52270efd7bd6ca240ec63fa2af2b49f5b740d18b104b80b844206706f54f956be741113821bef4d0cfff4cc84508af03c8127c057f881c59f8d5a072ac5b24041c857a0fa841c9f33980dec3128005a73e9215fca5daf2d255f206c13e94c0158f6ed19f2bf4532159d0a7902e69f336e6843510063146d95c78cba6cac3f51ea35b4c0807eaa74b6ddeab99772430e9bf2a15d1a2f91cf4423305f08a8ef3fdc792487ba0e062d9944c7270c908fbb6c2eb3817f17d2b3b3d7c6cb58e018475af89941478708b054600c041784bb65aa9892385b276303b2f32acfc487578c87517d202c8c1d8e8eedd3b0", 0x1, 0x1}, {0x3, 0x82, &(0x7f0000001a00)="c680ae1c20f3abad92b0798d517d64647146c29e7a5fc6bfc3ccceaaf8d7dd8f5a89330f9ce73f2a9623a358d23b54ca7e211141cd676407888fe07d32ba3c3cde1f258d24f826c959c0753be456837848acb564b9590bcf6a9a1652ae192fe36cc2fbb1465757ee23484af6c2bb9f77ece8c09c52e5c16f963a43cb435af4eda9d5", 0x1, 0x1}, {0x6, 0x8b, &(0x7f0000001ac0)="83e04e8097a95b11ed1894e98dbcbdff3bc2913aabd1b5c9cb77f003d49740eb9a8b9c49e72ffc84c17bc1f1f03b7ca9fc53e92f2e6ab744da6edf24fd8287dc9794acae370662da02f4de925d812d497f308ac8fae25e0e5d722e03d5e7f4a9665abb222b640466cd656aeaaf41e51115289081b6430bd1380a5e3de6a13cc0b44a7e348bdf733c7e17d7", 0x0, 0x1}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x7c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e2165bc7f7d4f1b12990d8424ec171fa60d757d40909bd7e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = accept4(r0, &(0x7f0000001ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f40)=0x80, 0x80800) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000001f80)={{0x3b, @empty, 0x4e24, 0x2, 'dh\x00', 0x1, 0x2, 0x1f}, {@private=0xa010100, 0x4e23, 0x2000, 0x9, 0xe, 0x2}}, 0x44) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002000)={'gretap0\x00'}) rt_sigprocmask(0x1, &(0x7f0000002040)={[0xfffffffffffffff6]}, &(0x7f0000002080), 0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f00000020c0)={0x0, 0x0, 0x16587ff9}) syz_clone(0xc4000400, &(0x7f0000002100)="9c1959e56ce8b9d1f765076bead982745d12f078ca1d3d60b4dae1ec13713973b5af6b8332104b08cc7ca58a66aaef67a0fef9813646f1b7414015c0d4d7587d4040fdb4fbed96f6512d4876874dfeeaf670650bf02ef2160967f0e288ef9f80c797d4ae3936c6843fab1f65448cd5136767ae9ff9c82ebb94", 0x79, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200)="7ccadf90fe24afa21a25adf7e33a4799e42580b68c1eb368484e2798032c285b38f1109c83562dc0d6efa978de2202f80a13463ca7988cff09e0d0146fda3c6f9dfa6ff542584b9f8995648309") ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000002280)) r6 = openat$incfs(r5, &(0x7f00000022c0)='.log\x00', 0x20001, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000002380)={0x0, 0x68, &(0x7f0000002300)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x28}, @in6={0xa, 0x4e24, 0x4, @private2, 0x7}, @in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f00000023c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000002400)={r7, 0x5, 0x7fff}, 0x8) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002480), r5) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x50, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0xcc}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002600), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x34, r9, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xc, 0x5, @l2={'eth', 0x3a, 'vlan0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$cgroup_pid(r0, &(0x7f0000002700), 0x12) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000002740)) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000002880)=0xf0000000, 0x4) 3.265742097s ago: executing program 4 (id=1892): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000002000000000000e1ff0000002b000000fc0000000000000000000000004000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000003901070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) 3.247665585s ago: executing program 3 (id=1893): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setscheduler(0x0, 0x0, &(0x7f00000007c0)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000b40)) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x1b9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e65b23664656661756c7420757365723a73797a2030303030303030305530393300be6b9aad61decc6915012a30f970bce2df29fe02c9e521bb5f6692bff92d306c9940c182920ddf7e86c498938efb9896390000000000000000"], 0x2a, 0x0) (async) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000300), &(0x7f00000002c0)="0900533613", 0x5, r3) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x80040, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xb8) (async) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f0000000500)="7078be46332a0d24a9624b3f08a03ec9d0d4dc4f84adbb249e1f966b21d47a27aa2cd03e8e7edfaf9d61e3ed20ffc18f3054b47cc1f7dd5368eebd7bdd5765b451b5bc87b46a4cf697ee3011ac89594d923b7b1f590920620f1c1b0e1d6bd79d776583effaa11766a17ab056955261ae283f7f86c1456824e8230e1f1696e347669ab997bff1e67fe02378a3ff0db542f04adc1c639a80925493e5b2a71ff3ae", 0xa0}, {&(0x7f00000005c0)="0b39cce0d5e6bb65fff29a32a6f480ad31ecf4cc0280a64904ca18c7353f94eb8e6813bcfa1ca922b591723856fcd6e58b2dac37c6011bc783c226ad7a053630e5f5d2ccea905cc624cb980f24e68482754cbdf0c91d504c438cb14ec8423d6f1d1a61fcc92a3406900adc7b1e4a1d1cd0e12748dd1dc778491086acd510b446ab805aaa533495f3a18f331577b46e642ee164bdbc8566ef4578c38ebe40c74ac94b77137489404f647a13753356fa60ec7a504e1e98dfdd4c2ce8fe76850f9f2db640607ac39c414f55aebefce43552fa7bd3", 0xd3}, {&(0x7f0000000440)="3bf3a3375092617214ed4d13a64986a186fc7267b458905c22a8ec3127c1adea58c5bd47b03d43895ef9b066a88094c4eefc5d65909255abdae3876cd91dc5ffd8e850a8683f9b5adbba3658784cdc88601ee02321c3", 0x56}, {&(0x7f00000006c0)="ec7bef8f68a52df5c1f648c50c24eb25ade70df334249bf9ce5741813f7b0ede666dd11f9a9c396bafcaf4124fed3dd52bdee53c5a79d5c72d25f8497f271bab234c8de8278f205f107b4f3d1bc618201bb47881052b65edc4dee95434ed09d2f910ffb61db5baf1ed0bdfbaf4ffc3175ba874ac223f9c1da2", 0x79}, {&(0x7f0000000840)="586ff1c0b207193700fbf2e0b205630ab3e5ac144094168875f880e41fe5ed6ab1ce4b615e24db7164fe9a5a086223cfd56929b573e0785b83490e3a2914a2f8dfc2b52790ae45f1fab2755e02d9c9cc69a94519aa5c567e1d599c1b6a7247a0fed07f057e52ba860a8fb0dffc19c83d2d0abb2fc9de298340bf40af2f7ea3091767dad9617b7cc09d3400967f3477066929752310ab6dd60e48c8a599c003fd08fd", 0xa2}, {&(0x7f0000000a40)="11818d8589b881ab757735308d76e1e9a03ab2f581589f6aa16427b9446deb0718d3b23edb1f1ecbf83ec07ebebc073a8b5f4ae243394315a1ee8894189dfdac4861", 0x42}, {&(0x7f0000000380)="462d71870496", 0x6}], 0x7, r4) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 3.167820736s ago: executing program 4 (id=1894): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000b000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) 3.049773152s ago: executing program 4 (id=1895): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61128c00000000006113300000000000bf300000000000002500070007ffffffbd020180ffffff0095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 2.759984538s ago: executing program 3 (id=1896): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) (async) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) (async) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r8 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r8, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) 2.583592274s ago: executing program 4 (id=1897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073797a31000000000900020073797a32000000000800034000000000d0000100b408b1e286b5c8f7a7321d1f80c982b3c96b4dac7dead86aceee30544dfdb289f2cae899fc3fe86ee3f122505d76d6b5878270ecb40c37908d60b9ed31d97a3e0ee856f3cf3c2fdfee967991f8d1ef7fdce37b30f8842735e543ac808675a64f66eb37009373328ddf992e92b3a5765bd5f765d73c578babbb08efd7b59dab641a88f3099e34bb7fbc04cb298bb0df6eb0dc4ca79864758aff38b7192698c89435c5699f4a9222ad4a2c68c9356b741f04ef667f7a169b8976632c7cb98f18ba558bc302c7b73401c42a76160c0002800800034000000000440002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a320000000008000180000000000900020073797a3200000000fc0001"], 0x17d4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0xec, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0x7, 0x1e0, 0xed00, 0xc, 0x417]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c800020000000000000020"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 2.401637104s ago: executing program 1 (id=1898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x17, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xd, 0x4, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1000000, 0x49, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 2.351142527s ago: executing program 0 (id=1899): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_timeval(r4, 0x1, 0xa, 0x0, &(0x7f0000000080)) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x1000001, 0x0) (async) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x1000001, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x5, 0xfff5) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$setregs(0xffffffffffffffff, r6, 0x9, &(0x7f0000004480)="4025dabf1abeeaed3cb7eecfb81f36007dcccb69349794371e011f7bab0474cab74c020978c73698b89f9daf145e9ec232167bc1cfd320b9ec8dd0e16c201ef1b14094526b06e3c2c8b453f27b48c537ea80dcbbec09beb775473ad4b3151a68526926a18ba92384f31b2b24de36f45d51cdd00b62ae101e396b0abf34ac0ff18d4ac79f09bd1fe7fa0968ed41efc917336188034fd2cd91d35a9931499e3f8a55e148440fb83e2c417a07fb09426fe9a9b9197bf8b8c337271f809537577e476c2f689097c2727a7230ca1a65eacd08d651cd138053d7e315032d4a1e08a0856341591c36c8624e3c6d12ff04666cb9d954d3bec5eb342b393dfa6eab690ee5a96cac8b2befc07aaf61dcb765c4be408b2f40b3da9b55bb56a53719e4604bf60b601006c77e35dfcb570a684f1c135d7308738d291dbfcec70bf5b01926321e4eeb5d00a29d5b955d915ee629b0b793313bcfff445d73835eec5fb9b8b7bb4f06b6de1c032a16bf3b5c08f6f41111edd37e6346b4ef492654850c23d92ab275f93f1f35a59c9b0754894e8c84dafed643d11dbb17b962c722034c134826681a1aaa242743d0bd9d2699c95ef710a6b28798c75eb541d7fea369d09834720db0e6e1f18b45447a04d7fb520c5acd22e568237a8cc080c2609ac500d12c1699f379c2c5a9da1e34bd113b554c512be218989b763fcc0602311254b303806e1564c1498965247bf2dc684a09f8627eaacdb3ad25249738b6cae18a6c30b8c4a83c1aabdbaa5c670d5431edbf84dd9df6848a4ee4e2f1ef451c58d21f7ed51d52271247b10ee4cb4417af3db0616c73a56bfbddc1e8c7cc9cb8fc4019cef5a48ff8b90cfaeabd2e4bb03b4cbb18d8efb8381cd22013b4986134c05ad7b4fa69dcc93ad687dc0eea8702c6f235218277ede48b7500ee08c6568795246bbaada3ccb016d82488c2fb7c2b7b76f5c85b0e5e529af7651030028832e4606e7c731178f81bad3a5308d9c6ca1ace8daece29cf5e7eb7ec543a5563b370e1ba86b969bfaf2f2fc38349df67bc6a02b241c0f62ecd5402c6147ca8af0818aa6d9eea90b538fae1e085f80b3344ac1950bd46f058bf1edac5821de8b219fce8df4150e0c617fc1b3dbde709b228fbaba4d11b85cc7f8ee8bf5cfe344b22575e37de8d7e2359c5e36b1aaa533e818a6ad124e441d62c7be60577f918f67e55aaab5ccb7b584fd8a769ecd888474c1ad9f87f92b4e51a27f9c0d58512e9a15672659f7924e5c3992dd8e891ea772d8ccbc327d00ec74fd1ad64b0facdb94f0dbba34e47b4963ccfe975a28c645bb418f40b946b6536fdebe6d868e6367fda17db2fae7f175e65097913693a47c2c38fed56638d85ff4c767ff4ef4251ff1a5027f267d9819ec89d9dec91f0d55db83cbe6e3f61b73f03814cebdb3daca78ac0b715fb6828104977782a0ae53945d6a2e20964ae90423dd0c23f96c7cf0ad7ae7db2842f53a13ea010660ac797ec89144ef53a0f72c62e3a77a8fd3da96a4dedfb7dd1e8b579464153919a7a32f25c5eadaa88097096bbf53b233821ad8550d63d6e5292faa69875054c29f2ebf55ec85ea20edb75490bfdfecc01248e5328d78609b1433af1ffc603a41d3d92671b8f15f7433d6fa870127d10c9d8d706d0ffac4998442335da9683bb487b3ee5688cbe1d10c2ed20921a91d23c6f291c58f432c20139fa5df00ae5d0959631e6ba26d2f4089d384f7b37298dc8029c7b821e66a151cc6a4e3923fe5b02d9ca53c50d854875dec7662a3e9e8cf557475df2dda8791ce22d6856dca6d4aed6b9d72300b57f7109c77bab40dd895a0d6d6c2937105e7c7626895dea0b15476f8d9a24a63b2c81adfeb11ff58d64a0602b4b5d6acfd5aea3ce22f55efefbf2dda466d44fa03d3dc71682cd4908680d422a3b0b07cc4b9518bfa8919cd5c11b4355f1326a26fab443eab9c4733b886911a405f146a7a0f3efa18c45273bbbb30ad7b64ed47c58243610b97fe7855fa25288b5bf79c6f484c160c96d537e98ba1d1759903bd1d02eda1b50b1c19cfbb46172bc3a12381ae98c1a3df839847daac5b6763631edb154b51e1585eacbbb56a880d33c2d8c726d2c83fbe9a80f121eb279c9084ee18e725f94b920e687af56d092196181b0d3902a75043614b3411859b3fb76e7e83de481192b533cb40ebae45694effe3063ff88672c84255447c4a1cf31fb168e73ec02757300dcdffa57996ea8ea4b99a205024cc74fbce21f5475bee3881cd90e3666e3d1a3424ad9389e842f268b659ca566d860fa4673124d468701dded1031f9265bfd7953dc6b89ea4d2c9faf1caa2a07e42959d5da454f01fe2d19403be1af65b5d0c7bdd039f85d7525a44a514d40d9af56fbd37920dad544e5146c244ffef4581bbea976b6ba68a3672fcea923632880b4c6b60dc6eda056d08498b547f55ed5263bf60685a23818df4dbd3a9ef58ea61edb888ee8f8e90f9b625224d0afddd4f30d67b8d9eaf6b84ac8b4987ad295956f50a3a2cf2a94b5fba61f9fc1957e4a071ec7e6f0b042750bf0a8a9e977dfdf0936390d49a5eccb10bbc2f3380137d8e264aeb21c49601d524f62b7df405750af96fe38e2d422ec34b56f940e81cd687705ed48d7779cd3b1c03096f5f064ce39ad4917f9b0f276a730dc0bd7a56ce284a0d8d0ce20bbb3b038ee4c8da720afb8e8846923db168572d3dbdb9d5829b9031fe7397aa67a4d5c98e915ea857e88ab2ec6b8c2169dc4497445878f15575c7d9f033c8762041150ede1b7b968be9de9b8946b92fa0f5ad5d255c95d664de14527013e77d892a548172c39a83796eb1a4e76b2ba8f7aee66b4c9155fd50548260661e7313b819ecf152846a8910fa641468c0073f6014f49859984c654eee64630ed9e56309c51ef0dde3a884db0bb4241a24490b567b8ac3ddd5afd9f95f464f301f463f226bf083d483561648432c28b73c0d1cfc32a25a131f02a3fd51170951dad8fb2673c4eb666432438f7d19e8cb92e61312a974998a96e7b77098f21766258d1de068766a660400a5f0d9966a9f520946ff0ecaec7c661398f1d93b095c77fc0bd49be6fbe6c7ee1a0a5f109bf01068ef0645dd57871f74b5168502ced799ff0619acdebd5dae12df6eeb756c4131689cee905ee3dfe12b1e0c3bb163c94fff47c483cfa85ee00f3654a773b1a02468e79d7c0bf89530ee80eec66b3d71fb0aa17049f93b106175539855c44fa7f81c1068066b33b3978449dea2b64ebbd42badb99697f182ebde7eed5a2acfc3eb38cf7876dd688c3262fe722d7f7394727e7c9cd470669787c4f8c45b4d0ed82eaed4c02c1215b6118e53e39774029444dabc8870ef2da39acc3c0d444611437edd8236862e26e5627d9a283feef6572aadfa4a73688f14192e55a5613c65b83abfebeaa1642289999414138f0fd155c1169f58d423c107fa6a290e0cc29afcea953e3a97e74df527b00af081cf7f708d97d2ac3161e060e66e7b01fa2fd7604724fe3d742fdc7e0b1879ad872572f94e13744819a3edd8a8bb9d18f7ca39ba5b8da0a02bb0fd6608c581d1f4e9622537ced08c63359a89e3d93669698957990e1c648db4e14d839962dac9602fc483607e3c617d05494f3f3e1033ad3e3f8564f3dca366f3bd5e18c2435d01acaad3bb58c1e9cd08403c26c5dc6d33d266deb01b761b834fcd07fd85155d46cba31d4b3256eebd1d74aa20aaaf5e47bbecc29b744ac18d1938c5fff01b1a61a744fb28e1e75755870c1a8de758a5ec53f92aa0360475d5373654c3f317b4ebb07c84fe79d247db3548b5dfafec574fa7b71d62ee02d20b3e46e01a9e677a15162475c5d5cba1ff835da2277b4f780a7a9b0266a0ba8c20caec77489ddf140411860ced650556a3de85e08eb1194333f1c4c4f295127312f61053fc31bd76440126a1b667524c971797c54422dfe0e280d9829e16d52669cabcaa0ea8efcb6c2850e1980426115c624eeba668d1b63edc60f5fc0d5cdcc060e52a6a4d3a4be511078f84bcc860630f42ad5d5f26fad0c35ccf4c92f63df5c59d711aa7a4a2c8615451e9519bc004be603e7d411d6b119663ab396baa5d59e0d10c2e7a7952049667c0fe493de1697e9c24a46eed6545217b3033f85a5e34ce133e7d7c6976155ff87b991cd2d8e63bdece29ccb772f1fa889b23c34a0e59e0eb5a44239373db524bfbe81f6683b128d1d1ac469babb03659a343581c51d01668b02fc1a37f6700d1b5a050fb2df4afef0595ae43404069c9c0bcc94fb6cad6681f7492c4a853154795eb91fde6a6d40e0abe154fba38eefe0146f491fa33d50ccf755f1351b051f1672a70c316884a2ba31889aae9eb4388a8168641aa3128e04a04101658ebb1c5af1960556680ae398dd6076632161edb531d355ce41160655b72ef211bd442f8949e1d1f5963805f715a51111e2c200a526e4def40b15241f991481a7d8ad619d41975dd27629330004a3eae2680442bdcb4daec94d516ccb4f6e7cbff11eff52688f5e2275674fa39f449d99d587c3ea8971f285628b333dc433f1a0e3ea507d3dd8ab1f71bce8b1c04e371eb2fb814d77032e0e3acf9fec1c1b760fd53052182852abf61d8dc30e6a778678fc3502b71fba4c6c0653b04a2f8bd533ef0bceec84a9f011aec038c47cf50fa14400a22ba73fe63f924edc428a9158f54c06d64c3e71296917d8177344ac4d72ddc4b545817d4fce3d174c17440f79daf0b7140761d2bece588c7196f0b2d634a5aa086b8442be3685ca0f225cf937daa333cc091ca6f81e40ba935b97e42c0039cbdc586bb63338924203a5e2a4a2c8d468d119266946f3bb2f04de862630e5949fbdc05e166429d9847bd9a5d748a834787d3b0898d3b5fa427c42a041de2acb26ebf31b97f23d7fce3f614d1a8fca20eacce180a22df3d1498e1b11d609a3b94a240314f77e80be7ecdab9868e35867197791310be144a62492e9330bf2ca62ece35557aef88e42fec1aae6310ee7cefcbdbc48ece8dbcfc33f92e6fa03055298958128b849d6b0bc76dc07b52d4c5668c061ac9ea82252206bf606f34c14f8b2a00b81bf36476a7d641a6f5ee343e2eae0104b90302f183c07a67128447ee18c5420d4f6cd2a7bbf0e68e01cfc5b65fa246624a32128a4c6aabb04b0f4db699214e17866c69c5c91878bb1881a470559e24fff77e79cbd34fc352d7c53417d0cf352828a84ea064934a420878cbea1b1faae57646ccd33bd1d593a1b3b6a0a222eae0e5d6714cb0197337092529b6efaaf34d5ed8d897684c655075f2b718c2090f3c65e963808f5692830937de2511be8669a71caf4a9f17fd14f834a4c5da9d643dee0d42f9612efe157b0cae3e9623f4ce5b5d16ef592a161ef83cae46f91e6462d3b714b67030003c5d89be7efa215d259d3d7bb93996e362b3ed4e048d7b63864daace2f1f10c88127d0321444bcac85e2cb653d52d8bcf91f6d7e079e5a2ffcb98fc3682c8863731475b3489b078d8cac5077bebb4838a5ef0bd415c0825cba60be2b3778008354c5ca641e140de5252a2cfdd757404cb37fefbf70cbb9f63cd4f4525b4094c4144a65743f9921454254059dd7677e02457f6bc3169a91c7ef1159af29743e07a5271f6de9dd72b4a55077ca8cf5f5c2e189d938c674b531beb09261fcb7929a8faa927ffda5d3ab65d0d5151680cd4ef4e607912820edb477cff9aa37925cb25a9982c7fc4dae4dedcb195cf7112558f2336da960ad4565a7f6372484230700b07a1eda4869432feb026de35d701f61d9b266676fed5a06646a2488edce0969eba1eab1cb458395ff1c7c2330b9b2e5db66d1f5c010d77246f552c6a176f48ff1e252a773f7f6eb92a36a89e684facf7929b7ef35de171735951879123439fe8ab88601de6df4298eacdf9ad7fe0bff873451bf840d79ff0a8a420cc99c052820369f2068d162ddd571e1dbff314adf499fbc8e5fee708604e2083aed169798a3661f1625779afa0414bb9193e370f625943c61d4af2e78a8b24d39a720977d987aed92799025f2dd23b2bd876a0b564dd8836c5166f62a2bae1cd1a6f8a5fca13d7f4e5672286f8e61534f41b2b34cecfe97000ed290c9ac5571e385c2f8022f63232dd571f8f828665993f88c7a44d1171b31024be19e6e1c76d18fa6b99c23544d03372") 2.208848425s ago: executing program 1 (id=1900): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0x6}, {0x0, 0x1, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}}, 0xf0}, 0x1, 0x1000000}, 0x0) 1.741119223s ago: executing program 1 (id=1901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)="7dd6a3af12dcbe4ddb47a697f1fb3617c461ebbe32c7cb1790fa05023120fb7db1f7a536ce977e143ec36ab6957dc43d7c6c7f4641eb6bccb00692f75c209176f2166dd49b794d6e5b3d4930aed5cb5aa55c04c1efaedfd58796bbecbf090838ee2021ff4b90941441f55d6565d01d66b728ade220a3603b16909029704c8d61911198e356", 0x85}, {&(0x7f0000000340)}, {&(0x7f0000000400)="84850308bb0c1cb00b524835cc2cd286019feac9857495b3c117aeeb3ebe56dc4c9d378d095ade94254986064e02f65c979816e4e4f36af76cbf123078cddb", 0x3f}, {&(0x7f0000000480)="ae608fc2db54ae65ec87fbccb8c8d09a9753c54c7529409455bc80023750469d087fbd7f337245878286e60adbfe770860f0be5a3dd7606e629550b121dfcc9707469db4eb610e8afe739a4fc6cb787aec940c83ac571ca05c745294d058472b1cc6f47b84f1ebf6914dd812425511d53f20511e9426ee0a94056fc59b95d68644d4232d28a87f4e3336de19923e165f7d33a31c7bdc72bee45df82a167ec452fae2284bd2825041ffc25d", 0xab}, {&(0x7f0000000580)="2f6445c2c1893f7f8c894a8ffa74a65792115a311a5d37b0d2a518552de13eef36e0969346689a11013614315d4aac11802de16906957d6083ba60d1d87fb5a414c5122c602f15140f93794f2555702fa95c4ce372a43ca3", 0x58}, {&(0x7f0000000600)="36442af32604e0cce9929272e227304aa6b6865910242a5abc459bed529a01f035e65cd5dc3ede9e2f27f9b5276e102c2aeac83a318993f9c6e6055be3c139359f51760ec4cd8dc76ad44ff6f6dc815217c59483488b62d5bf14509719e3e1e0d6b4a4d891085ac3a7d271021995ec211ed44a2a56009de815833bab18def2b32094458ccdefa3a9ad33f8d0499350a573e9119eb9602a636042cebeab0ccc04", 0xa0}, {&(0x7f00000006c0)="adc6977bce9334d5cbee9e1abc4331e1689cf5464c5ab4ef0734682a092ef6859a96648f52846808accd4ca118ee57e34b9ff736f85f4240093d5388af82035262819e8e4babfbf94b8d7b9c0c42658d8ca9f9ce12d30237aba8624cce97f0409c2d20603e4f13741a7776e8ae3544d943976fe23fcc82f82e9879f895d71b2f1a153f0c91bc4a67494eddc3313065ee1deaa184c55aa0abaa8cb1b08ce583927025a9", 0xa3}, {&(0x7f00000007c0)="c7e9a849cc16679190f1fb601214f76dcc3ae98be27aa55f052bf39ca91fd8ebfe403864e1fdb404a118604c536fde82eca6678310891f131f881ccd734441c30a5f1bf4d1ffb842a91f95cd1225082c9a68a52f0fc5c8d41545f1482c5ad6eca8e9cc8aa231089029799f77b910f9a004b0e49152b87f24def263935d8fb2b03d9faf3a9d2927b07bda98b50c2c1cada0706ff54042e6726baf43892e86", 0x9e}], 0x8, 0x0, 0x0, 0x8000}, 0x4c080) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) socket$nl_route(0x10, 0x3, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000540)=@v1={0x2, "5d4311110b04c3f6b6a5"}, 0xb, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x20000021) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/tty/ldiscs\x00', 0x0, 0x0) execveat(r5, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000b80)={[&(0x7f0000000a00)='\x00', &(0x7f0000000a40)='-({\x00', &(0x7f0000000a80)='GPL\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='^\xc1&/\x00', &(0x7f0000000b40)='\x00']}, &(0x7f0000000d40)={[&(0x7f0000000bc0)='/dev/dlm-monitor\x00', &(0x7f0000000c00)=',\'\x89\x00', &(0x7f0000000c40)='/dev/dlm-monitor\x00', &(0x7f0000000c80)='[\x00', &(0x7f0000000cc0)='security.ima\x00', &(0x7f0000000d00)='security.ima\x00']}, 0x1000) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) 1.16595963s ago: executing program 1 (id=1902): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x0, 0xfffffffffffffffc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffff3f}, 0x94) 1.049956011s ago: executing program 1 (id=1903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff3ebc0000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x25, 0x2, 0x40) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/74, 0x4a}], 0x1, 0x21}}], 0x48}, 0x0) r3 = getpid() sched_setaffinity(r3, 0x30, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x85f480202049a237}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) listen(r1, 0x100) r7 = dup(r1) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000140)=ANY=[], 0x18}, 0x90) 401.173224ms ago: executing program 0 (id=1904): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f00000001c0)="88551207306279b31ab63e264294e6ccfaf3f5e3ebd40f33a73d4d5bd76e5895c7169c323db3a874b6f7428c1034c42d1a7655abb872160a495da07598e3e78d2f3af06062383584d339b4dcb925249dc293d7a009c1af7610fe02c616ef56a385d11789208200e6fe23eef1eba25e5ab4dcf265e5a9ecd1897412d1a217575c5dce8b0ffa27f9b8564662ade0a695a0fcc2ea102174cb85ce", &(0x7f0000000280)=""/209}, 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) syz_clone(0x2001000, &(0x7f0000000000)="deba7e133af185fb491295a6d4686b366dcf6598da61d0adec746f9f49d9443eabcc414a2f61", 0x26, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="648eee56bd354ff3c751f50f60274c3ed884cd1ee130c173b8ea15ac39278a1cfde5eb455d03768e6ef3752e4f0062fc4907ac7f98898c4741580d95f9240d1b66299723471157322904a25c5c19") socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') (async) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f00000001c0)="88551207306279b31ab63e264294e6ccfaf3f5e3ebd40f33a73d4d5bd76e5895c7169c323db3a874b6f7428c1034c42d1a7655abb872160a495da07598e3e78d2f3af06062383584d339b4dcb925249dc293d7a009c1af7610fe02c616ef56a385d11789208200e6fe23eef1eba25e5ab4dcf265e5a9ecd1897412d1a217575c5dce8b0ffa27f9b8564662ade0a695a0fcc2ea102174cb85ce", &(0x7f0000000280)=""/209}, 0x20) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async) syz_clone(0x2001000, &(0x7f0000000000)="deba7e133af185fb491295a6d4686b366dcf6598da61d0adec746f9f49d9443eabcc414a2f61", 0x26, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="648eee56bd354ff3c751f50f60274c3ed884cd1ee130c173b8ea15ac39278a1cfde5eb455d03768e6ef3752e4f0062fc4907ac7f98898c4741580d95f9240d1b66299723471157322904a25c5c19") (async) 149.583694ms ago: executing program 3 (id=1905): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="58010000100001000000000800000000ac1414bb00000000000000000000000000000000000000000000000000000001000200004e2000500000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x24000058) 0s ago: executing program 0 (id=1906): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x1) accept4(r0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0136030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r1], 0x44}, 0x1, 0x0, 0x0, 0x20049848}, 0x20000044) kernel console output (not intermixed with test programs): T10539] ovl_lookup_layer+0x3f1/0x4b0 [ 370.800500][T10539] ? lockdep_hardirqs_on_prepare+0x26/0x1b0 [ 370.800519][T10539] ? lockdep_hardirqs_on+0x78/0x100 [ 370.800545][T10539] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 370.800569][T10539] ? avc_compute_av+0x54b/0x820 [ 370.800594][T10539] ovl_lookup_layers+0x355/0x2ac0 [ 370.800628][T10539] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 370.800647][T10539] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 370.800674][T10539] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 370.800699][T10539] ? avc_has_perm_noaudit+0x145/0x3b0 [ 370.800722][T10539] ? avc_has_perm+0x135/0x1e0 [ 370.800741][T10539] ? __pfx_avc_has_perm+0x10/0x10 [ 370.800766][T10539] ovl_lookup+0x4a8/0x6b0 [ 370.800791][T10539] ? may_create+0x285/0x440 [ 370.800814][T10539] ? __pfx_ovl_lookup+0x10/0x10 [ 370.800836][T10539] ? __pfx_may_create+0x10/0x10 [ 370.800873][T10539] ? bpf_lsm_inode_create+0x9/0x10 [ 370.800895][T10539] ? security_inode_create+0xc4/0x280 [ 370.800914][T10539] ? may_o_create+0x46/0x3a0 [ 370.800940][T10539] lookup_open.isra.0+0x631/0x11b0 [ 370.800973][T10539] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 370.801005][T10539] ? __pfx___might_resched+0x10/0x10 [ 370.801026][T10539] ? mnt_get_write_access+0x52/0x2f0 [ 370.801057][T10539] ? __pfx_down_write+0x10/0x10 [ 370.801073][T10539] ? mnt_get_write_access+0x1e9/0x2f0 [ 370.801103][T10539] path_openat+0x2291/0x31a0 [ 370.801133][T10539] ? __pfx_path_openat+0x10/0x10 [ 370.801162][T10539] do_file_open+0x20e/0x430 [ 370.801185][T10539] ? __pfx_do_file_open+0x10/0x10 [ 370.801226][T10539] ? alloc_fd+0x476/0x790 [ 370.801248][T10539] ? do_getname+0x191/0x390 [ 370.801273][T10539] do_sys_openat2+0x10d/0x1e0 [ 370.801296][T10539] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.801316][T10539] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 370.801346][T10539] ? __fget_files+0x21f/0x3d0 [ 370.801369][T10539] __x64_sys_openat+0x12d/0x210 [ 370.801393][T10539] ? __pfx___x64_sys_openat+0x10/0x10 [ 370.801414][T10539] ? ksys_write+0x1ac/0x250 [ 370.801440][T10539] do_syscall_64+0x106/0xf80 [ 370.801464][T10539] ? clear_bhb_loop+0x40/0x90 [ 370.801486][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.801503][T10539] RIP: 0033:0x7fc97739c799 [ 370.801518][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.801534][T10539] RSP: 002b:00007fc978338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.801552][T10539] RAX: ffffffffffffffda RBX: 00007fc977615fa0 RCX: 00007fc97739c799 [ 370.801563][T10539] RDX: 0000000000060642 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 370.801573][T10539] RBP: 00007fc978338090 R08: 0000000000000000 R09: 0000000000000000 [ 370.801583][T10539] R10: 0000000000000214 R11: 0000000000000246 R12: 0000000000000001 [ 370.801593][T10539] R13: 00007fc977616038 R14: 00007fc977615fa0 R15: 00007fff70e3b018 [ 370.801620][T10539] [ 371.223787][ T29] audit: type=1400 audit(1774811442.450:888): avc: denied { write } for pid=10534 comm="syz.3.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 371.243913][ T29] audit: type=1400 audit(1774811442.470:889): avc: denied { read } for pid=10534 comm="syz.3.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 371.414891][ T29] audit: type=1400 audit(1774811443.280:890): avc: denied { name_bind } for pid=10540 comm="syz.1.1274" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 371.450475][ T29] audit: type=1400 audit(1774811443.280:891): avc: denied { node_bind } for pid=10540 comm="syz.1.1274" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 371.586118][ T29] audit: type=1400 audit(1774811443.310:892): avc: denied { getopt } for pid=10540 comm="syz.1.1274" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 371.855424][ T29] audit: type=1400 audit(1774811443.310:893): avc: denied { read } for pid=10543 comm="syz.2.1275" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 371.995724][ T29] audit: type=1400 audit(1774811443.310:894): avc: denied { open } for pid=10543 comm="syz.2.1275" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 372.203940][T10553] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1277'. [ 372.335727][ T29] audit: type=1400 audit(1774811443.310:895): avc: denied { ioctl } for pid=10543 comm="syz.2.1275" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x54d2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 373.326557][ T29] audit: type=1400 audit(1774811443.340:896): avc: denied { read write } for pid=10543 comm="syz.2.1275" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 373.361390][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.367703][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.657958][T10564] binder: 10563:10564 ioctl 4018620d 0 returned -22 [ 374.696900][ T10] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 374.898227][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.973139][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.002427][ T10] usb 5-1: config 0 has no interface number 0 [ 375.043036][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 375.081049][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.117735][ T10] usb 5-1: config 0 descriptor?? [ 375.140216][ T10] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 375.275442][T10599] kvm: pic: non byte read [ 375.291072][T10599] kvm: pic: non byte read [ 375.308885][T10599] kvm: pic: non byte read [ 375.326324][T10599] kvm: pic: non byte read [ 375.345887][T10599] kvm: pic: non byte read [ 375.360564][T10599] kvm: pic: non byte read [ 375.365453][T10599] kvm: pic: non byte read [ 375.415912][T10599] kvm: pic: non byte read [ 375.430258][T10599] kvm: pic: non byte read [ 375.437425][T10599] kvm: pic: non byte read [ 375.651304][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 375.840822][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 375.864526][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 375.932952][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.099366][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.567135][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 376.567153][ T29] audit: type=1400 audit(1774811448.280:922): avc: denied { unlink } for pid=10605 comm="syz.0.1291" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 376.570793][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 376.617804][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 376.722253][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.736676][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 376.746965][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.785277][ T10] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 376.795389][ T29] audit: type=1400 audit(1774811448.660:923): avc: denied { write } for pid=10614 comm="syz.3.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.887554][ T29] audit: type=1400 audit(1774811448.750:924): avc: denied { listen } for pid=10614 comm="syz.3.1293" lport=36706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.944366][ T29] audit: type=1400 audit(1774811448.780:925): avc: denied { bind } for pid=10614 comm="syz.3.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.975063][ T29] audit: type=1400 audit(1774811448.780:926): avc: denied { name_bind } for pid=10614 comm="syz.3.1293" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 377.000232][ T29] audit: type=1400 audit(1774811448.780:927): avc: denied { node_bind } for pid=10614 comm="syz.3.1293" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 377.174281][T10627] binder: 10624:10627 ioctl 4018620d 0 returned -22 [ 377.209341][T10630] ref_ctr_offset mismatch. inode: 0x581 offset: 0x0 ref_ctr_offset(old): 0xffffffff00 ref_ctr_offset(new): 0x0 [ 377.249378][T10625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1297'. [ 377.331201][ T10] usb 5-1: USB disconnect, device number 29 [ 377.360442][ T29] audit: type=1400 audit(1774811449.220:928): avc: denied { create } for pid=10633 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 377.410584][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'. [ 377.429103][ T5873] usb 3-1: USB disconnect, device number 29 [ 377.458100][T10634] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1299'. [ 377.474710][ T29] audit: type=1400 audit(1774811449.270:929): avc: denied { append } for pid=10633 comm="syz.0.1299" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 377.520846][ T793] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 377.529871][ T29] audit: type=1400 audit(1774811449.290:930): avc: denied { read } for pid=10638 comm="syz.4.1300" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.565363][ T29] audit: type=1400 audit(1774811449.300:931): avc: denied { open } for pid=10638 comm="syz.4.1300" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.701893][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 377.722528][ T793] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 377.916701][ T793] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 377.946662][ T793] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 378.002349][ T793] usb 2-1: config 0 interface 0 has no altsetting 0 [ 378.042153][ T793] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 378.061028][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.136915][ T793] usb 2-1: Product: syz [ 378.157564][ T793] usb 2-1: Manufacturer: syz [ 378.169912][ T793] usb 2-1: SerialNumber: syz [ 378.207871][ T793] usb 2-1: config 0 descriptor?? [ 378.229325][T10654] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1303'. [ 378.504916][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.544583][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.831871][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 379.712491][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.737893][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.793733][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 379.826980][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.893756][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.932758][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.982749][ T10] usb 3-1: config 0 descriptor?? [ 380.092060][ T793] usb 2-1: Can not set alternate setting to 1, error: -71 [ 380.107063][ T793] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 380.125383][ T793] usb 2-1: USB disconnect, device number 33 [ 380.482867][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 381.175796][ T10] usb 3-1: USB disconnect, device number 30 [ 383.449047][T10714] 9p: Bad value for 'rfdno' [ 383.747998][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 384.041995][ T9] usb 2-1: device descriptor read/64, error -71 [ 384.454650][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 384.454664][ T29] audit: type=1400 audit(1774811456.320:960): avc: denied { name_bind } for pid=10716 comm="syz.2.1317" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 384.602477][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 385.032016][T10733] netlink: zone id is out of range [ 385.037242][T10733] netlink: zone id is out of range [ 385.046257][T10733] netlink: zone id is out of range [ 385.052873][T10733] netlink: zone id is out of range [ 385.058073][T10733] netlink: zone id is out of range [ 385.063677][T10733] netlink: zone id is out of range [ 385.073269][T10733] netlink: zone id is out of range [ 385.084525][T10733] netlink: zone id is out of range [ 385.163575][ T29] audit: type=1400 audit(1774811457.030:961): avc: denied { setopt } for pid=10728 comm="syz.2.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 385.171469][T10738] batadv_slave_0: entered promiscuous mode [ 385.193961][T10733] netlink: zone id is out of range [ 385.210925][T10733] netlink: zone id is out of range [ 385.216266][ T29] audit: type=1400 audit(1774811457.060:962): avc: denied { accept } for pid=10736 comm="syz.4.1325" lport=39359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.242269][T10738] batman_adv: batadv0: Adding interface: macvtap1 [ 385.254617][T10738] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.284281][T10738] batman_adv: batadv0: Interface activated: macvtap1 [ 385.311122][ T9] usb 2-1: device descriptor read/64, error -71 [ 385.329564][ T29] audit: type=1400 audit(1774811457.190:963): avc: denied { create } for pid=10748 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 385.406552][ T29] audit: type=1400 audit(1774811457.270:964): avc: denied { write } for pid=10748 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 385.431636][ T9] usb usb2-port1: attempt power cycle [ 385.503743][ T29] audit: type=1400 audit(1774811457.370:965): avc: denied { mount } for pid=10748 comm="syz.0.1328" name="/" dev="autofs" ino=26940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 385.655897][ T29] audit: type=1400 audit(1774811457.520:966): avc: denied { setopt } for pid=10755 comm="syz.4.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.707092][ T29] audit: type=1400 audit(1774811457.520:967): avc: denied { create } for pid=10755 comm="syz.4.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 385.806003][ T29] audit: type=1400 audit(1774811457.520:968): avc: denied { ioctl } for pid=10755 comm="syz.4.1330" path="socket:[26954]" dev="sockfs" ino=26954 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 385.831109][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 385.839965][T10758] netlink: 'syz.3.1320': attribute type 2 has an invalid length. [ 385.847854][T10758] netlink: 'syz.3.1320': attribute type 2 has an invalid length. [ 385.918741][ T29] audit: type=1400 audit(1774811457.630:969): avc: denied { create } for pid=10757 comm="syz.3.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 385.923008][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 386.007067][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.024044][ T9] usb 2-1: Product: syz [ 386.044879][ T9] usb 2-1: Manufacturer: syz [ 386.057206][ T9] usb 2-1: SerialNumber: syz [ 386.069817][ T9] usb 2-1: config 0 descriptor?? [ 386.080075][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 036 [ 386.363638][ T6638] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 386.461888][T10779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1339'. [ 386.493607][ T9] (null): failure reading functionality [ 386.511848][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 386.658156][T10783] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 386.665991][T10783] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1338'. [ 387.368328][T10785] Cannot find add_set index 0 as target [ 387.494650][ T5873] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 387.507070][ T6638] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 387.516357][ T6638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.528826][ T6638] usb 4-1: Product: syz [ 387.533180][ T6638] usb 4-1: Manufacturer: syz [ 387.537919][ T6638] usb 4-1: SerialNumber: syz [ 387.550281][ T6638] usb 4-1: config 0 descriptor?? [ 387.571781][ T5844] usb 2-1: USB disconnect, device number 36 [ 387.575219][ T6638] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 387.591345][ T6638] dvb-usb: bulk message failed: -22 (4/0) [ 387.599387][ T6638] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 387.616117][T10787] netlink: 'syz.4.1341': attribute type 21 has an invalid length. [ 387.621733][ T6638] dvb-usb: bulk message failed: -22 (5/0) [ 387.634331][ T6638] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 387.652342][T10787] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.654219][ T6638] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 387.675346][ T6638] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 387.684056][T10787] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 387.721600][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 387.728066][ T5873] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 387.737744][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.762456][ T5873] usb 3-1: config 0 descriptor?? [ 387.768595][ T793] usb 4-1: USB disconnect, device number 24 [ 388.185662][ T5873] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 388.894318][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1337'. [ 388.927428][ T42] usb 3-1: USB disconnect, device number 31 [ 389.368440][T10803] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1345'. [ 389.663626][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.728457][T10839] Cannot find add_set index 0 as target [ 389.901101][ T5844] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 390.097859][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.230377][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 390.230392][ T29] audit: type=1400 audit(1774811462.090:977): avc: denied { create } for pid=10835 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 390.277159][ T29] audit: type=1400 audit(1774811462.140:978): avc: denied { ioctl } for pid=10835 comm="syz.1.1352" path="socket:[28161]" dev="sockfs" ino=28161 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 391.251833][T10836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.262017][T10836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.372385][ T5844] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 391.382609][ T5844] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 391.393019][ T5844] usb 2-1: config 1 interface 0 has no altsetting 0 [ 391.418297][ T5844] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 391.434096][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.467506][ T5844] usb 2-1: Product: à° [ 391.489071][ T5844] usb 2-1: Manufacturer: Я [ 391.504996][ T29] audit: type=1400 audit(1774811463.360:979): avc: denied { append } for pid=10846 comm="syz.4.1354" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 391.535243][ T5844] usb 2-1: SerialNumber: 徴뤂í¦è§‹î¿†ç®®ï¦Œî‡ƒáƒí‚‘禘ἒè‘踧㺉ã„⻌㹹簟밢垸骕㘡á›ë«¹áµ¡å½ƒåˆ¾ì­˜æ‡¿ä¡¢èšá¾†ë—€ç°‰ëžä·è±‰é‚¬æ¥Œç‰â¥è¼¡âµ»áœï¢‡æ¡¾î“¥â¾œì´‚豽â¯íŸ›å¯¦åº†è´‹êž¦ëŽ°ï™–꡺苛蜞擫講ﰂ 䖘茀è éŒ–曀㵠罻拂ïµæ³ƒè’ë›â¬¹é‚…咓挾῀﯎ઠ핧禇ﬤ벛ዂ舼ꔻ皉êŸâš³à¬ºà½¹ê£· [ 391.545762][T10850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1356'. [ 391.570319][T10837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.610967][T10837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.629508][ T29] audit: type=1400 audit(1774811463.490:980): avc: denied { write } for pid=10851 comm="syz.2.1357" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 391.655677][T10852] input: syz1 as /devices/virtual/input/input25 [ 391.660901][ T29] audit: type=1400 audit(1774811463.520:981): avc: denied { ioctl } for pid=10851 comm="syz.2.1357" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 391.688824][ T29] audit: type=1400 audit(1774811463.560:982): avc: denied { read } for pid=5163 comm="acpid" name="js0" dev="devtmpfs" ino=3241 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.715276][ T29] audit: type=1400 audit(1774811463.560:983): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3241 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.739142][ T29] audit: type=1400 audit(1774811463.560:984): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3241 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.741299][ T5873] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 391.831264][ T5844] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 7 proto 2 vid 0x0525 pid 0xA4A8 [ 391.855081][ T5844] usb 2-1: USB disconnect, device number 37 [ 391.864731][ T5844] usblp0: removed [ 391.911676][ T6146] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 391.934576][ T5873] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 391.946293][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.958552][ T5873] usb 1-1: Product: syz [ 392.184893][ T6146] usb 5-1: config index 0 descriptor too short (expected 8707, got 36) [ 392.216387][ T5873] usb 1-1: Manufacturer: syz [ 392.223137][ T6146] usb 5-1: config 15 has too many interfaces: 177, using maximum allowed: 32 [ 392.234295][ T5873] usb 1-1: SerialNumber: syz [ 392.240819][ T6146] usb 5-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 392.262959][ T5873] usb 1-1: config 0 descriptor?? [ 392.283884][ T6146] usb 5-1: config 15 has 0 interfaces, different from the descriptor's value: 177 [ 392.295452][ T5873] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 033 [ 392.310911][ T6146] usb 5-1: string descriptor 0 read error: -22 [ 392.319171][ T6146] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 392.329420][ T6146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.425960][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.437474][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.586174][T10868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1362'. [ 392.609368][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 392.662270][ T29] audit: type=1400 audit(1774811464.530:985): avc: denied { mount } for pid=10866 comm="syz.2.1362" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 392.686108][ T29] audit: type=1400 audit(1774811464.550:986): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 392.706174][ T6146] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 392.714370][ T5873] (null): failure reading functionality [ 392.726343][ T5873] i2c i2c-1: connected i2c-tiny-usb device [ 392.982981][ T5844] usb 1-1: USB disconnect, device number 33 [ 393.223913][ T6638] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 393.242624][ T6146] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 393.251415][ T6146] usb 4-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 393.261636][ T6146] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 393.270580][ T6146] usb 4-1: config 1 has no interface number 1 [ 393.276740][ T6146] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 393.291518][ T6146] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.300563][ T6146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.309149][ T6146] usb 4-1: Product: syz [ 393.313353][ T6146] usb 4-1: Manufacturer: syz [ 393.317932][ T6146] usb 4-1: SerialNumber: syz [ 393.393194][ T6638] usb 2-1: unable to get BOS descriptor or descriptor too short [ 393.400972][ T6638] usb 2-1: too many configurations: 236, using maximum allowed: 8 [ 393.410204][ T6638] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 393.417894][ T6638] usb 2-1: can't read configurations, error -61 [ 393.535203][ T6146] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.543548][ T6146] usb 4-1: MIDIStreaming interface descriptor not found [ 393.565002][ T6638] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 393.629640][ T6146] usb 4-1: USB disconnect, device number 25 [ 393.753423][ T6638] usb 2-1: unable to get BOS descriptor or descriptor too short [ 393.792137][ T6638] usb 2-1: too many configurations: 236, using maximum allowed: 8 [ 393.806500][ T6638] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 393.815908][ T6638] usb 2-1: can't read configurations, error -61 [ 393.824440][ T6638] usb usb2-port1: attempt power cycle [ 393.847254][T10883] Cannot find add_set index 0 as target [ 394.459185][ T9520] udevd[9520]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.819719][ T9] usb 5-1: USB disconnect, device number 30 [ 394.840978][ T6638] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 394.883843][ T6638] usb 2-1: unable to get BOS descriptor or descriptor too short [ 394.913520][ T6638] usb 2-1: too many configurations: 236, using maximum allowed: 8 [ 394.950815][ T6638] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 394.967597][ T6638] usb 2-1: can't read configurations, error -61 [ 394.986029][T10891] blktrace: Concurrent blktraces are not allowed on sg0 [ 395.122134][ T6638] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 395.278446][ T6638] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.306841][ T6638] usb 2-1: too many configurations: 236, using maximum allowed: 8 [ 395.374349][ T6638] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 395.388832][ T6638] usb 2-1: can't read configurations, error -61 [ 395.442402][ T6638] usb usb2-port1: unable to enumerate USB device [ 397.994004][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 397.994017][ T29] audit: type=1326 audit(1774811469.450:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.1.1373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f088f59c799 code=0x0 [ 398.254521][ T29] audit: type=1400 audit(1774811470.110:989): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.110973][ T29] audit: type=1400 audit(1774811470.110:990): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.259392][ T29] audit: type=1400 audit(1774811470.110:991): avc: denied { search } for pid=5473 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.561608][ T29] audit: type=1400 audit(1774811470.110:992): avc: denied { read } for pid=5473 comm="dhcpcd" name="n112" dev="tmpfs" ino=7006 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.820353][T10948] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 399.869601][T10948] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 400.971498][ T29] audit: type=1400 audit(1774811470.110:993): avc: denied { open } for pid=5473 comm="dhcpcd" path="/run/udev/data/n112" dev="tmpfs" ino=7006 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.399378][ T29] audit: type=1400 audit(1774811470.120:994): avc: denied { getattr } for pid=5473 comm="dhcpcd" path="/run/udev/data/n112" dev="tmpfs" ino=7006 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.516983][ T29] audit: type=1400 audit(1774811473.240:995): avc: denied { read open } for pid=10951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.565639][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'. [ 401.657216][T10959] dummy0: entered promiscuous mode [ 401.673882][ T29] audit: type=1400 audit(1774811473.240:996): avc: denied { getattr } for pid=10951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.673888][T10959] macsec1: entered allmulticast mode [ 401.673928][ T29] audit: type=1400 audit(1774811473.420:997): avc: denied { bind } for pid=10957 comm="syz.3.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 401.725850][T10959] dummy0: entered allmulticast mode [ 401.764108][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 401.841683][T10966] bridge_slave_1: left allmulticast mode [ 401.847350][T10966] bridge_slave_1: left promiscuous mode [ 401.866245][T10966] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.897755][T10973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1390'. [ 401.914059][T10974] efs: cannot read volume header [ 401.931598][T10966] bridge_slave_0: left allmulticast mode [ 401.944538][T10966] bridge_slave_0: left promiscuous mode [ 401.950305][T10966] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.968414][T10979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1391'. [ 402.147371][T10989] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 402.163497][T10991] Option ' ' to dns_resolver key: bad/missing value [ 402.318116][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 402.324301][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 402.344205][T11002] usb usb8: usbfs: process 11002 (syz.3.1399) did not claim interface 0 before use [ 402.344598][T10996] sctp: [Deprecated]: syz.1.1377 (pid 10996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.344598][T10996] Use struct sctp_sack_info instead [ 402.475836][T10993] ceph: No mds server is up or the cluster is laggy [ 402.541218][ T6638] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 402.652538][ T793] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 403.223402][ T793] usb 1-1: Using ep0 maxpacket: 32 [ 403.235203][ T6638] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.235653][ T793] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 403.284640][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.286716][ T6638] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 403.340719][ T6638] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.350831][ T793] usb 1-1: config 0 descriptor?? [ 403.360391][ T6638] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.386898][ T6638] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 403.424010][ T6638] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 403.436989][ T6638] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.446239][ T6638] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.787969][ T5844] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 403.806223][ T793] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 403.818215][ T6638] usb 3-1: Product: syz [ 403.825685][ T6638] usb 3-1: Manufacturer: syz [ 403.854438][ T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 403.891063][T10998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 403.911564][ T793] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 403.918798][ T793] usb 1-1: media controller created [ 403.933212][ T6638] cdc_wdm 3-1:1.0: skipping garbage [ 403.948619][ T6638] cdc_wdm 3-1:1.0: skipping garbage [ 403.983061][ T6638] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 403.999599][ T6638] cdc_wdm 3-1:1.0: Unknown control protocol [ 404.097005][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.330838][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 404.330869][ T29] audit: type=1326 audit(1774811476.050:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 404.512548][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.513296][ T793] az6027: usb out operation failed. (-71) [ 404.519332][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.524991][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 404.531555][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.542745][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.549246][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.555841][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.562105][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.568680][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.574924][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.581494][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.588060][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.594644][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.601028][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.607606][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.614440][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.621018][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.627376][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.633958][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.640191][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 404.646776][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 404.656499][ T6638] usb 3-1: USB disconnect, device number 32 [ 404.662494][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 404.674714][ T29] audit: type=1326 audit(1774811476.050:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 404.675639][ T793] az6027: usb out operation failed. (-71) [ 404.698555][ T29] audit: type=1326 audit(1774811476.050:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 404.813503][T10998] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 404.823017][ T5844] usb 4-1: config 0 interface 0 altsetting 88 bulk endpoint 0x85 has invalid maxpacket 1024 [ 404.850821][ T5844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.867966][ T5844] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=ea.79 [ 404.886519][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=0 [ 404.897443][ T793] stb0899_attach: Driver disabled by Kconfig [ 404.904592][ T793] az6027: no front-end attached [ 404.904592][ T793] [ 404.911781][ T5844] usb 4-1: Product: syz [ 404.917833][ T5844] usb 4-1: Manufacturer: syz [ 404.922899][ T793] az6027: usb out operation failed. (-71) [ 404.928615][ T793] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 404.938534][ T5844] usb 4-1: config 0 descriptor?? [ 404.948338][ T29] audit: type=1326 audit(1774811476.050:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 404.952635][T11033] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 404.994587][ T793] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 405.115350][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1406'. [ 405.150519][ T793] dvb-usb: schedule remote query interval to 400 msecs. [ 405.162791][ T793] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 405.340330][ T29] audit: type=1326 audit(1774811476.050:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 405.375352][ T29] audit: type=1326 audit(1774811476.050:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 405.431106][ T793] usb 1-1: USB disconnect, device number 34 [ 405.536791][ T29] audit: type=1326 audit(1774811476.050:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 405.583727][ T793] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 405.601746][ T6638] usb 4-1: USB disconnect, device number 26 [ 405.625891][ T29] audit: type=1326 audit(1774811476.050:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 405.651887][ T29] audit: type=1326 audit(1774811476.060:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 405.675661][ T29] audit: type=1326 audit(1774811476.060:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.4.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbcc19c799 code=0x7ffc0000 [ 406.230703][T11062] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 406.342090][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 407.491852][T11096] binder: 11095:11096 ioctl 4018620d 0 returned -22 [ 408.016524][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1424'. [ 408.086433][T11109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11109 comm=syz.3.1424 [ 408.150857][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 408.229163][ T793] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 408.240831][ T6638] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 408.273006][ T793] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.312766][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 408.325865][ T9] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 408.351961][ T9] usb 1-1: config 1 has no interface number 0 [ 408.370848][ T6638] usb 2-1: device descriptor read/64, error -71 [ 408.379729][ T9] usb 1-1: config 1 interface 236 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 408.453986][ T9] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=4c.95 [ 408.492224][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.515400][ T9] usb 1-1: Product: syz [ 408.523821][ T9] usb 1-1: Manufacturer: syz [ 408.537214][ T9] usb 1-1: SerialNumber: syz [ 408.640877][ T6638] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 408.781152][ T6638] usb 2-1: device descriptor read/64, error -71 [ 408.799826][ T9] usb 1-1: bad CDC descriptors [ 408.832705][ T9] usb 1-1: USB disconnect, device number 35 [ 408.891123][ T6638] usb usb2-port1: attempt power cycle [ 409.240847][ T6638] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 409.271249][ T6638] usb 2-1: device descriptor read/8, error -71 [ 409.533924][ T6638] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 409.592042][ T6638] usb 2-1: device descriptor read/8, error -71 [ 409.721045][ T6638] usb usb2-port1: unable to enumerate USB device [ 409.770215][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 409.770234][ T29] audit: type=1400 audit(1774811481.540:1061): avc: denied { write } for pid=11136 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 410.247447][ T29] audit: type=1400 audit(1774811481.770:1062): avc: denied { firmware_load } for pid=11136 comm="syz.3.1433" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 410.262785][ T7577] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 410.309063][T11143] binder: 11141:11143 ioctl 4018620d 0 returned -22 [ 410.326332][ T7528] Bluetooth: hci5: Frame reassembly failed (-84) [ 411.176597][T11160] program syz.2.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.262635][T11160] mmap: syz.2.1435 (11160) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 411.654268][ T6638] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 411.812941][ T6638] usb 2-1: unable to get BOS descriptor or descriptor too short [ 411.826990][ T6638] usb 2-1: not running at top speed; connect to a high speed hub [ 411.855791][ T6638] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 411.887560][ T6638] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 411.921679][ T6638] usb 2-1: string descriptor 0 read error: -22 [ 411.935235][ T6638] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 411.954609][ T6638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.021360][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 412.151393][ T5873] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 412.522062][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 412.561053][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 412.607490][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 412.624229][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 412.635690][ T5873] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 412.645297][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.664691][ T5873] usb 3-1: config 0 descriptor?? [ 412.915005][ T5873] hdpvr 3-1:0.0: unexpected answer of status request, len 0 [ 412.949677][ T5873] hdpvr 3-1:0.0: device init failed [ 412.955680][ T5873] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 412.963342][ T6638] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 413.125112][ T6638] usb 1-1: Using ep0 maxpacket: 8 [ 413.134984][ T6638] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 413.149769][ T6638] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 413.159160][ T6638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.174823][ T6638] usb 1-1: Product: syz [ 413.185625][ T6638] usb 1-1: Manufacturer: syz [ 413.194609][ T6638] usb 1-1: SerialNumber: syz [ 413.210261][ T6638] usb 1-1: config 0 descriptor?? [ 413.227429][ T6638] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 413.242751][ T6638] usb 1-1: setting power ON [ 413.249075][ T6638] dvb-usb: bulk message failed: -22 (2/0) [ 413.266484][ T6638] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 413.277413][ T6638] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 413.286236][ T6638] usb 1-1: media controller created [ 413.302639][ T9] usb 2-1: USB disconnect, device number 46 [ 413.368295][ T6638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.401903][ T6638] usb 1-1: selecting invalid altsetting 6 [ 413.407783][ T6638] usb 1-1: digital interface selection failed (-22) [ 413.417003][ T6638] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 413.429471][T11186] dvb-usb: bulk message failed: -22 (3/0) [ 413.448733][ T6638] usb 1-1: setting power OFF [ 413.455548][ T6638] dvb-usb: bulk message failed: -22 (2/0) [ 413.504836][ T6638] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 413.534701][ T6638] (NULL device *): no alternate interface [ 414.014042][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.060096][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.090981][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 414.688814][ T7523] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 414.703939][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 414.718818][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 414.724900][ T7577] Bluetooth: hci5: Frame reassembly failed (-84) [ 414.742528][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.759773][ T7577] Bluetooth: hci5: Frame reassembly failed (-84) [ 414.781654][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 414.811069][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 414.835943][ T9] usb 4-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 414.869036][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 414.888197][ T9] usb 4-1: string descriptor 0 read error: -22 [ 414.904949][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.937864][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 414.967620][ T42] usb 3-1: USB disconnect, device number 33 [ 414.967907][T11201] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 415.052526][ T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 415.141678][ T29] audit: type=1400 audit(1774811487.010:1063): avc: denied { write } for pid=11214 comm="syz.4.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 415.224207][T11220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1454'. [ 416.420935][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 417.189354][ T42] usb 4-1: USB disconnect, device number 27 [ 418.743933][ T42] libceph: connect (1)[c::]:6789 error -101 [ 419.235238][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 419.400358][ T793] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 419.415401][T11267] ceph: No mds server is up or the cluster is laggy [ 419.909475][ T42] libceph: connect (1)[c::]:6789 error -101 [ 419.917124][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 419.930855][ T793] usb 4-1: Using ep0 maxpacket: 16 [ 419.938928][ T793] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 419.939117][T11281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1467'. [ 419.948088][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.971846][ T7523] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 419.987846][ T7523] Bluetooth: hci5: Frame reassembly failed (-84) [ 420.017770][ T793] usb 4-1: config 0 descriptor?? [ 420.099622][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 420.156531][ T29] audit: type=1400 audit(1774811492.020:1064): avc: denied { connect } for pid=11285 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.208894][ T29] audit: type=1400 audit(1774811492.020:1065): avc: denied { bind } for pid=11285 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.313923][ T29] audit: type=1400 audit(1774811492.020:1066): avc: denied { write } for pid=11285 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.333499][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 420.479276][ T793] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 420.561591][ T29] audit: type=1400 audit(1774811492.020:1067): avc: denied { read } for pid=11285 comm="syz.0.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.593417][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 420.603061][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.625114][ T29] audit: type=1400 audit(1774811492.240:1068): avc: denied { shutdown } for pid=11297 comm="syz.4.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 420.651094][ T9] usb 3-1: Product: syz [ 420.655267][ T9] usb 3-1: Manufacturer: syz [ 420.659852][ T9] usb 3-1: SerialNumber: syz [ 420.687440][ T29] audit: type=1400 audit(1774811492.360:1069): avc: denied { setopt } for pid=11297 comm="syz.4.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.711908][ T9] usb 3-1: config 0 descriptor?? [ 420.722186][ T9] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 034 [ 420.750975][ T29] audit: type=1400 audit(1774811492.530:1070): avc: denied { watch } for pid=11301 comm="syz.4.1473" path="/297/file0" dev="tmpfs" ino=1614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 420.851285][T11308] dvmrp9: entered allmulticast mode [ 420.876794][ T29] audit: type=1400 audit(1774811492.690:1071): avc: denied { read write } for pid=11306 comm="syz.0.1474" name="file1" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 420.953585][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1466'. [ 420.965810][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.981073][ T29] audit: type=1400 audit(1774811492.690:1072): avc: denied { ioctl open } for pid=11306 comm="syz.0.1474" path="/308/file1" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 421.016112][ T5844] usb 4-1: USB disconnect, device number 28 [ 421.035270][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.121541][ T9] (null): failure reading functionality [ 421.147963][ T9] i2c i2c-3: connected i2c-tiny-usb device [ 421.338867][ T9] usb 3-1: USB disconnect, device number 34 [ 421.610913][ T29] audit: type=1400 audit(1774811493.470:1073): avc: denied { write } for pid=11322 comm="syz.3.1476" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 421.700883][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 421.710817][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 421.861048][T11329] SET target dimension over the limit! [ 422.440805][ T793] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 422.592855][ T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.623616][ T793] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 422.653486][ T793] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 422.690805][ T793] usb 3-1: Manufacturer: syz [ 422.801457][ T793] usb 3-1: config 0 descriptor?? [ 423.339592][ T7523] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 423.392456][ T793] hub 3-1:0.0: bad descriptor, ignoring hub [ 423.410840][ T793] hub 3-1:0.0: probe with driver hub failed with error -5 [ 423.420502][ T793] usb 3-1: selecting invalid altsetting 1 [ 423.425926][ T7523] Bluetooth: hci5: Frame reassembly failed (-84) [ 423.427273][ T793] usb 3-1: Can not set alternate setting to 1, error: -22 [ 423.439757][ T793] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -22 [ 423.492543][ T793] usb 3-1: USB disconnect, device number 35 [ 423.561837][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 423.697904][T11367] bond1: Unable to set down delay as MII monitoring is disabled [ 423.715859][T11367] bond1 (unregistering): Released all slaves [ 424.938296][T11394] picdev_read: 77 callbacks suppressed [ 424.938314][T11394] kvm: pic: non byte read [ 424.948482][T11394] kvm: pic: non byte read [ 424.959773][T11394] kvm: pic: non byte read [ 424.964305][T11394] kvm: pic: non byte read [ 424.968760][T11394] kvm: pic: non byte read [ 424.973169][T11394] kvm: pic: non byte read [ 424.977530][T11394] kvm: pic: non byte read [ 424.983939][T11394] kvm: pic: non byte read [ 424.988738][T11394] kvm: pic: non byte read [ 424.993972][T11394] kvm: pic: non byte read [ 425.441505][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 425.702677][T11400] SET target dimension over the limit! [ 425.725881][T11399] input: syz0 as /devices/virtual/input/input27 [ 426.157974][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 426.157989][ T29] audit: type=1400 audit(1774811498.020:1079): avc: denied { mount } for pid=11408 comm="syz.1.1503" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 426.208867][ T29] audit: type=1400 audit(1774811498.050:1080): avc: denied { accept } for pid=11404 comm="syz.3.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 426.283910][ T29] audit: type=1400 audit(1774811498.150:1081): avc: denied { read write } for pid=11413 comm="syz.0.1504" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 426.327508][ T29] audit: type=1400 audit(1774811498.150:1082): avc: denied { open } for pid=11413 comm="syz.0.1504" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 426.388958][ T29] audit: type=1400 audit(1774811498.250:1083): avc: denied { map } for pid=11413 comm="syz.0.1504" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 426.662923][ T29] audit: type=1400 audit(1774811498.530:1084): avc: denied { ioctl } for pid=11421 comm="syz.2.1507" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 426.912667][ T29] audit: type=1400 audit(1774811498.780:1085): avc: denied { create } for pid=11432 comm="syz.2.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 427.036377][T11435] input: syz1 as /devices/virtual/input/input29 [ 427.170883][ T9] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 427.364799][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 427.376599][ T793] libceph: connect (1)[c::]:6789 error -101 [ 427.381406][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.450791][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.472346][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 427.473465][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 427.500097][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 427.511372][ T29] audit: type=1400 audit(1774811499.380:1086): avc: denied { write } for pid=11441 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 427.534995][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 427.659352][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.686240][ T29] audit: type=1400 audit(1774811499.380:1087): avc: denied { read } for pid=11441 comm="syz.0.1513" path="socket:[29554]" dev="sockfs" ino=29554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.134400][ T42] libceph: connect (1)[c::]:6789 error -101 [ 428.140460][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 428.152910][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.169656][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 428.181253][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 428.192777][T11453] binder: 11452:11453 ioctl 4018620d 0 returned -22 [ 428.195555][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 428.216932][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 428.235490][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.247720][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 428.260170][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 428.275058][ T9] usb 3-1: string descriptor 0 read error: -22 [ 428.291507][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 428.301236][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.335662][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 428.537329][ T29] audit: type=1400 audit(1774811500.400:1088): avc: denied { create } for pid=11463 comm="syz.3.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 428.620924][ T42] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 428.654450][ T793] libceph: connect (1)[c::]:6789 error -101 [ 428.674274][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 429.010490][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 429.054233][ T42] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 429.088543][ T42] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 429.103074][ T42] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=4c.95 [ 429.113218][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.122687][ T42] usb 5-1: Product: syz [ 429.145819][ T42] usb 5-1: Manufacturer: syz [ 429.155927][ T42] usb 5-1: SerialNumber: syz [ 429.438784][ T42] usb 5-1: USB disconnect, device number 31 [ 430.379951][ T42] libceph: connect (1)[c::]:6789 error -101 [ 430.389515][T11442] ceph: No mds server is up or the cluster is laggy [ 430.396516][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 430.405922][ T42] libceph: connect (1)[c::]:6789 error -101 [ 430.416287][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 431.130889][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 431.139752][T11488] net_ratelimit: 10 callbacks suppressed [ 431.139761][T11488] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 431.617488][ T793] usb 3-1: USB disconnect, device number 36 [ 431.875766][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 431.948928][ T29] audit: type=1400 audit(1774811503.740:1092): avc: denied { write } for pid=11500 comm="syz.0.1530" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 433.108478][ T29] audit: type=1400 audit(1774811504.970:1093): avc: denied { watch_sb watch_reads } for pid=11518 comm="syz.2.1534" path="/304" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 433.426442][ T29] audit: type=1400 audit(1774811505.290:1094): avc: denied { open } for pid=11509 comm="syz.3.1533" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 433.452767][ T42] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 434.137869][ T42] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 434.168276][ T42] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 434.383536][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 434.413429][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 434.427631][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 434.434449][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.445332][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.501653][ T42] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 434.516462][ T42] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 434.591394][ T42] usb 3-1: Product: syz [ 434.616970][ T42] usb 3-1: Manufacturer: syz [ 434.658998][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 434.686535][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 434.702587][T11538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.708522][T11539] overlayfs: missing 'lowerdir' [ 434.713383][ T29] audit: type=1400 audit(1774811506.570:1095): avc: denied { mounton } for pid=11532 comm="syz.1.1537" path="/file1" dev="ramfs" ino=31756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 434.742729][ T42] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 434.752913][ T42] cdc_wdm 3-1:1.0: Unknown control protocol [ 434.762439][T11538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.076379][T11545] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1538'. [ 435.151914][ T29] audit: type=1400 audit(1774811506.610:1096): avc: denied { write } for pid=11532 comm="syz.1.1537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 435.472150][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.480651][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.622835][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 435.631830][T11550] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 435.707688][T11557] overlayfs: failed lookup in lower (newroot/312, name='bus', err=-40): overlapping layers [ 435.895313][ T29] audit: type=1400 audit(1774811507.760:1097): avc: denied { append } for pid=11558 comm="syz.4.1543" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 435.923264][ T29] audit: type=1400 audit(1774811507.790:1098): avc: denied { create } for pid=11558 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 436.058435][T11565] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1543'. [ 436.727454][ T9] usb 3-1: USB disconnect, device number 37 [ 436.787966][ T29] audit: type=1400 audit(1774811508.650:1099): avc: denied { associate } for pid=11571 comm="syz.1.1546" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 438.062510][T11591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1551'. [ 438.071748][T11591] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 438.320707][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 438.329950][T11598] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 439.453090][T11612] netlink: 'syz.4.1557': attribute type 30 has an invalid length. [ 439.571008][ T5844] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 439.772195][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 439.785010][ T5844] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 439.801362][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.820618][ T5844] usb 4-1: Product: syz [ 439.829170][ T5844] usb 4-1: Manufacturer: syz [ 439.840020][ T5844] usb 4-1: SerialNumber: syz [ 439.868793][ T5844] usb 4-1: config 0 descriptor?? [ 439.900034][ T5844] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 440.210752][ T29] audit: type=1400 audit(1774811512.000:1100): avc: denied { execute_no_trans } for pid=11620 comm="syz.4.1561" path=2F6D656D66643A5B0B7827A5291AA9FDFAADD16D64C8854858A9250C1A6501202864656C6574656429 dev="tmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 440.889548][ T5844] gspca_topro: reg_w err -110 [ 440.960877][ T5844] gspca_topro: Sensor soi763a [ 441.803354][T11635] FAULT_INJECTION: forcing a failure. [ 441.803354][T11635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.883240][T11635] CPU: 0 UID: 0 PID: 11635 Comm: syz.0.1558 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.883269][T11635] Tainted: [L]=SOFTLOCKUP [ 441.883274][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.883284][T11635] Call Trace: [ 441.883290][T11635] [ 441.883296][T11635] dump_stack_lvl+0x100/0x190 [ 441.883330][T11635] should_fail_ex.cold+0x5/0xa [ 441.883353][T11635] _copy_to_user+0x32/0xd0 [ 441.883374][T11635] pagemap_read+0x51b/0x830 [ 441.883405][T11635] ? __pfx_pagemap_read+0x10/0x10 [ 441.883435][T11635] ? rw_verify_area+0xce/0x6d0 [ 441.883459][T11635] ? __pfx_pagemap_read+0x10/0x10 [ 441.883485][T11635] vfs_read+0x1e4/0xb30 [ 441.883504][T11635] ? __pfx_vfs_read+0x10/0x10 [ 441.883528][T11635] ? find_held_lock+0x2b/0x80 [ 441.883550][T11635] ? __fget_files+0x215/0x3d0 [ 441.883569][T11635] ? __fget_files+0x215/0x3d0 [ 441.883592][T11635] ? __fget_files+0x21f/0x3d0 [ 441.883617][T11635] __x64_sys_pread64+0x1eb/0x250 [ 441.883635][T11635] ? __pfx___x64_sys_pread64+0x10/0x10 [ 441.883660][T11635] do_syscall_64+0x106/0xf80 [ 441.883686][T11635] ? clear_bhb_loop+0x40/0x90 [ 441.883708][T11635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.883726][T11635] RIP: 0033:0x7fc97739c799 [ 441.883742][T11635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.883757][T11635] RSP: 002b:00007fc978317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 441.883774][T11635] RAX: ffffffffffffffda RBX: 00007fc977616090 RCX: 00007fc97739c799 [ 441.883785][T11635] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000003 [ 441.883796][T11635] RBP: 00007fc978317090 R08: 0000000000000000 R09: 0000000000000000 [ 441.883806][T11635] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.883816][T11635] R13: 00007fc977616128 R14: 00007fc977616090 R15: 00007fff70e3b018 [ 441.883839][T11635] [ 442.164902][T11640] SET target dimension over the limit! [ 442.777181][ T29] audit: type=1800 audit(1774811514.640:1101): pid=11648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1566" name="file1" dev="overlay" ino=1699 res=0 errno=0 [ 442.812236][ T5873] usb 4-1: USB disconnect, device number 29 [ 442.942817][ T29] audit: type=1400 audit(1774811514.810:1102): avc: denied { accept } for pid=11657 comm="syz.1.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 443.420419][T11682] Cannot find set identified by id 0 to match [ 443.701572][T11685] FAULT_INJECTION: forcing a failure. [ 443.701572][T11685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.732929][T11685] CPU: 0 UID: 0 PID: 11685 Comm: syz.4.1575 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.732951][T11685] Tainted: [L]=SOFTLOCKUP [ 443.732955][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.732962][T11685] Call Trace: [ 443.732966][T11685] [ 443.732971][T11685] dump_stack_lvl+0x100/0x190 [ 443.732993][T11685] should_fail_ex.cold+0x5/0xa [ 443.733008][T11685] _copy_to_user+0x32/0xd0 [ 443.733021][T11685] pagemap_read+0x51b/0x830 [ 443.733040][T11685] ? __pfx_pagemap_read+0x10/0x10 [ 443.733059][T11685] ? rw_verify_area+0xce/0x6d0 [ 443.733075][T11685] ? __pfx_pagemap_read+0x10/0x10 [ 443.733092][T11685] vfs_read+0x1e4/0xb30 [ 443.733104][T11685] ? __pfx_vfs_read+0x10/0x10 [ 443.733120][T11685] ? find_held_lock+0x2b/0x80 [ 443.733134][T11685] ? __fget_files+0x215/0x3d0 [ 443.733146][T11685] ? __fget_files+0x215/0x3d0 [ 443.733167][T11685] ? __fget_files+0x21f/0x3d0 [ 443.733193][T11685] __x64_sys_pread64+0x1eb/0x250 [ 443.733209][T11685] ? __pfx___x64_sys_pread64+0x10/0x10 [ 443.733224][T11685] do_syscall_64+0x106/0xf80 [ 443.733240][T11685] ? clear_bhb_loop+0x40/0x90 [ 443.733254][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.733266][T11685] RIP: 0033:0x7ffbcc19c799 [ 443.733275][T11685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.733285][T11685] RSP: 002b:00007ffbca3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 443.733296][T11685] RAX: ffffffffffffffda RBX: 00007ffbcc416090 RCX: 00007ffbcc19c799 [ 443.733303][T11685] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000003 [ 443.733309][T11685] RBP: 00007ffbca3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 443.733316][T11685] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.733322][T11685] R13: 00007ffbcc416128 R14: 00007ffbcc416090 R15: 00007ffc671adbe8 [ 443.733336][T11685] [ 444.759548][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.786445][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.773636][ T793] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 447.955595][ T793] usb 3-1: too many configurations: 201, using maximum allowed: 8 [ 448.012122][ T793] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 448.027293][ T793] usb 3-1: can't read configurations, error -61 [ 448.062188][ T29] audit: type=1400 audit(1774811519.930:1103): avc: denied { read } for pid=11739 comm="syz.0.1592" path="socket:[31173]" dev="sockfs" ino=31173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 448.127839][T11738] picdev_read: 77 callbacks suppressed [ 448.127855][T11738] kvm: pic: non byte read [ 448.149584][T11738] kvm: pic: non byte read [ 448.156608][T11738] kvm: pic: non byte read [ 448.161025][ T793] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 448.169720][T11738] kvm: pic: non byte read [ 448.174295][T11738] kvm: pic: non byte read [ 448.188975][T11738] kvm: pic: non byte read [ 448.199716][T11738] kvm: pic: non byte read [ 448.255699][T11738] kvm: pic: non byte read [ 448.270715][ T29] audit: type=1400 audit(1774811520.130:1104): avc: denied { append } for pid=11755 comm="syz.0.1596" name="file0" dev="fuse" ino=18446744073709551611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 448.294903][T11738] kvm: pic: non byte read [ 448.299544][T11738] kvm: pic: non byte read [ 448.308795][ T29] audit: type=1400 audit(1774811520.140:1105): avc: denied { open } for pid=11755 comm="syz.0.1596" path="/332/file0/file0" dev="fuse" ino=18446744073709551611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 448.335458][ T793] usb 3-1: too many configurations: 201, using maximum allowed: 8 [ 448.346523][ T793] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 448.355411][ T793] usb 3-1: can't read configurations, error -61 [ 448.367067][ T793] usb usb3-port1: attempt power cycle [ 448.590839][T11766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.636435][T11766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.699072][ T29] audit: type=1400 audit(1774811520.560:1106): avc: denied { bind } for pid=11765 comm="syz.0.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 448.721087][ T793] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 448.758620][T11766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.760350][ T29] audit: type=1400 audit(1774811520.620:1107): avc: denied { listen } for pid=11765 comm="syz.0.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 448.803459][ T793] usb 3-1: too many configurations: 201, using maximum allowed: 8 [ 448.833707][ T793] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 448.868323][ T793] usb 3-1: can't read configurations, error -61 [ 448.881234][T11766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.011306][ T793] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 449.041626][ T793] usb 3-1: too many configurations: 201, using maximum allowed: 8 [ 449.062543][ T793] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 449.073856][ T793] usb 3-1: can't read configurations, error -61 [ 449.089223][ T793] usb usb3-port1: unable to enumerate USB device [ 450.459191][T11792] fuse: Unknown parameter '²†òVøövŒÜB+„1Êfø+ÈÀ3ÒIÛi^¿|#rrs' [ 450.953085][T11792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1603'. [ 451.097624][T11800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11800 comm=syz.4.1603 [ 451.419438][ T42] gre0 speed is unknown, defaulting to 1000 [ 451.552825][T11817] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1611'. [ 451.681661][ T29] audit: type=1400 audit(1774811523.540:1108): avc: denied { bind } for pid=11819 comm="syz.3.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 452.938394][T11839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1617'. [ 453.482959][T11858] fuse: Unknown parameter 'fr' [ 453.487761][ T29] audit: type=1400 audit(1774811525.350:1109): avc: denied { mounton } for pid=11836 comm="syz.3.1616" path="/336/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 454.691183][ T5873] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 454.876902][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1628'. [ 454.981240][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 455.044178][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.121856][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 455.130848][T11876] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 455.201294][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 455.217694][ T5873] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 455.227036][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.238406][ T5873] usb 5-1: config 0 descriptor?? [ 455.293647][ T29] audit: type=1400 audit(1774811527.150:1110): avc: denied { ioctl } for pid=11868 comm="syz.0.1626" path="socket:[31412]" dev="sockfs" ino=31412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 455.346272][T11891] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1630'. [ 455.546298][ T29] audit: type=1400 audit(1774811527.410:1111): avc: denied { read } for pid=11896 comm="syz.3.1633" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 455.600869][ T29] audit: type=1400 audit(1774811527.440:1112): avc: denied { open } for pid=11896 comm="syz.3.1633" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 455.752825][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 455.760267][T11901] gre0 speed is unknown, defaulting to 1000 [ 455.858819][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 455.899358][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 455.919523][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 456.481712][ T29] audit: type=1400 audit(1774811528.350:1113): avc: denied { read } for pid=11854 comm="syz.4.1622" path="socket:[32444]" dev="sockfs" ino=32444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 456.563826][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 456.779964][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 456.788443][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 456.815845][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 456.842311][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 456.863509][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 456.869511][ T5873] lg-g15 0003:046D:0A07.000F: unknown main item tag 0x0 [ 456.888691][ T5873] lg-g15 0003:046D:0A07.000F: hidraw0: USB HID v0.09 Device [HID 046d:0a07] on usb-dummy_hcd.4-1/input0 [ 456.938091][ T5873] usb 5-1: USB disconnect, device number 32 [ 457.089276][T11911] fido_id[11911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 457.322240][T11916] FAULT_INJECTION: forcing a failure. [ 457.322240][T11916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.347566][T11916] CPU: 1 UID: 0 PID: 11916 Comm: syz.0.1638 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.347596][T11916] Tainted: [L]=SOFTLOCKUP [ 457.347602][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.347611][T11916] Call Trace: [ 457.347617][T11916] [ 457.347624][T11916] dump_stack_lvl+0x100/0x190 [ 457.347657][T11916] should_fail_ex.cold+0x5/0xa [ 457.347681][T11916] _copy_from_user+0x2e/0xd0 [ 457.347701][T11916] copy_msghdr_from_user+0x9f/0x4f0 [ 457.347721][T11916] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 457.347751][T11916] ___sys_sendmsg+0x106/0x1e0 [ 457.347771][T11916] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.347818][T11916] __sys_sendmsg+0x170/0x220 [ 457.347842][T11916] ? __pfx___sys_sendmsg+0x10/0x10 [ 457.347881][T11916] do_syscall_64+0x106/0xf80 [ 457.347905][T11916] ? clear_bhb_loop+0x40/0x90 [ 457.347926][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.347943][T11916] RIP: 0033:0x7fc97739c799 [ 457.347958][T11916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.347973][T11916] RSP: 002b:00007fc978338028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.347991][T11916] RAX: ffffffffffffffda RBX: 00007fc977615fa0 RCX: 00007fc97739c799 [ 457.348001][T11916] RDX: 0000000004000010 RSI: 0000200000000740 RDI: 0000000000000003 [ 457.348012][T11916] RBP: 00007fc978338090 R08: 0000000000000000 R09: 0000000000000000 [ 457.348022][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.348031][T11916] R13: 00007fc977616038 R14: 00007fc977615fa0 R15: 00007fff70e3b018 [ 457.348054][T11916] [ 457.656525][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 457.665426][T11925] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 458.027653][T11933] netlink: 'syz.4.1639': attribute type 4 has an invalid length. [ 458.041520][T11932] binder: 11931:11932 ioctl 4018620d 0 returned -22 [ 458.088119][ T29] audit: type=1400 audit(1774811529.930:1114): avc: denied { connect } for pid=11935 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 458.137840][ T29] audit: type=1400 audit(1774811529.980:1115): avc: denied { setopt } for pid=11935 comm="syz.0.1645" laddr=fe80::14 lport=4776 faddr=fe80::aa fport=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 458.205567][ T29] audit: type=1400 audit(1774811530.040:1116): avc: denied { write } for pid=11935 comm="syz.0.1645" laddr=fe80::14 lport=4776 faddr=fe80::aa fport=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 458.789101][ T29] audit: type=1400 audit(1774811530.650:1117): avc: denied { ioctl } for pid=11946 comm="syz.2.1648" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 459.448755][T11958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.776670][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 459.785675][T11967] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 459.808647][T11975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.833479][T11975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.205804][T11958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.260828][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 461.259979][T11996] input: syz1 as /devices/virtual/input/input30 [ 461.282334][ T29] audit: type=1400 audit(1774811533.140:1118): avc: denied { sys_admin } for pid=11964 comm="syz.0.1653" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 461.314820][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 461.336497][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 461.349988][T11958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.360888][ T10] usb 4-1: config 0 has no interface number 0 [ 461.379076][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.396329][ T29] audit: type=1400 audit(1774811533.260:1119): avc: denied { sys_nice } for pid=11964 comm="syz.0.1653" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 461.410351][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 461.493144][T12002] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1663'. [ 461.519074][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.571144][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 461.610823][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 461.659822][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 461.790910][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.813639][T11958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.829038][ T10] usb 4-1: config 0 descriptor?? [ 461.852676][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 462.032222][ T29] audit: type=1400 audit(1774811533.880:1120): avc: denied { bind } for pid=12009 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 462.363555][ T42] usb 4-1: USB disconnect, device number 30 [ 462.375960][ T29] audit: type=1400 audit(1774811533.950:1121): avc: denied { listen } for pid=12009 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 462.429665][ T29] audit: type=1400 audit(1774811534.220:1122): avc: denied { getopt } for pid=11973 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 462.478393][ T42] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 462.593766][ T7565] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.643109][ T7565] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.691049][ T7565] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.816387][ T7559] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.391951][ T29] audit: type=1400 audit(1774811535.250:1123): avc: denied { create } for pid=12036 comm="syz.2.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 463.688296][T12048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1673'. [ 463.735426][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 463.870626][ T29] audit: type=1400 audit(1774811535.730:1124): avc: denied { connect } for pid=12046 comm="syz.3.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 464.484102][ T29] audit: type=1400 audit(1774811536.350:1125): avc: denied { create } for pid=12065 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 464.580267][T12064] gre0 speed is unknown, defaulting to 1000 [ 464.612652][ T29] audit: type=1400 audit(1774811536.410:1126): avc: denied { write } for pid=12063 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 464.959971][ T29] audit: type=1400 audit(1774811536.820:1127): avc: denied { name_connect } for pid=12071 comm="syz.4.1680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 465.351162][ T42] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 465.451020][ T5844] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 465.527413][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 465.567482][ T42] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 465.615918][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 465.639271][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 465.649186][ T42] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 465.660247][ T5844] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 465.682717][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 465.704306][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.738828][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.774527][ T42] usb 3-1: config 0 descriptor?? [ 465.783098][ T5844] usb 4-1: config 0 descriptor?? [ 466.011017][T10488] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 466.144038][ T42] hdpvr 3-1:0.0: firmware version 0x0 dated [ 466.165156][ T42] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 466.192189][T10488] usb 5-1: Using ep0 maxpacket: 32 [ 466.208198][T10488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.246731][T10488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.266236][ T5844] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 466.287441][T10488] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 466.315222][T10488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.370099][T10488] usb 5-1: config 0 descriptor?? [ 466.412571][T10488] hub 5-1:0.0: USB hub found [ 466.607225][T10488] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 466.694615][ T10] usb 4-1: USB disconnect, device number 31 [ 467.531153][T10488] hid-generic 0003:046D:C31C.0011: item fetching failed at offset 0/1 [ 467.561393][T10488] hid-generic 0003:046D:C31C.0011: probe with driver hid-generic failed with error -22 [ 467.598253][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.606856][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.705919][T12106] binder: 12105:12106 ioctl 4018620d 0 returned -22 [ 468.776414][ T42] hdpvr 3-1:0.0: Could not setup controls [ 468.824984][ T42] hdpvr 3-1:0.0: registering videodev failed [ 468.886859][ T42] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 468.907094][T12124] xt_connbytes: Forcing CT accounting to be enabled [ 468.932349][T12124] set match dimension is over the limit! [ 468.991504][ T9] usb 5-1: USB disconnect, device number 33 [ 469.051141][ T42] usb 3-1: USB disconnect, device number 42 [ 469.720929][ T793] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 469.823849][ T42] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 470.083772][ T793] usb 5-1: Using ep0 maxpacket: 32 [ 470.109767][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.138500][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.156714][ T793] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 470.171936][ T42] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 470.180542][ T42] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 470.192058][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.222332][ T793] usb 5-1: config 0 descriptor?? [ 470.227466][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.242590][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 470.256869][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 470.272028][ T42] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 470.281671][ T42] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 470.291233][ T42] usb 3-1: Product: syz [ 470.295477][ T42] usb 3-1: Manufacturer: syz [ 470.311767][ T29] audit: type=1400 audit(1774811542.180:1128): avc: denied { ioctl } for pid=12154 comm="syz.0.1701" path="socket:[33060]" dev="sockfs" ino=33060 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 470.348912][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 470.370943][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 470.381611][ T42] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 470.387541][ T42] cdc_wdm 3-1:1.0: Unknown control protocol [ 470.411651][ T29] audit: type=1400 audit(1774811542.180:1129): avc: denied { connect } for pid=12154 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 470.448019][ T29] audit: type=1400 audit(1774811542.180:1130): avc: denied { setattr } for pid=12154 comm="syz.0.1701" name="NETLINK" dev="sockfs" ino=33826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 470.473273][ T29] audit: type=1400 audit(1774811542.260:1131): avc: denied { bind } for pid=12163 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 470.565220][ T42] usb 3-1: USB disconnect, device number 43 [ 470.589760][ T29] audit: type=1400 audit(1774811542.440:1132): avc: denied { write } for pid=12163 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 470.717549][ T793] hid_parser_main: 28 callbacks suppressed [ 470.717598][ T793] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 471.003079][ T793] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 471.045107][T12172] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1706'. [ 471.073471][ T793] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 471.248863][T12179] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 471.391012][ T42] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 471.679325][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 471.786400][T12179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.814682][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 471.895157][ T42] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 472.012089][T12180] bond1: (slave gretap1): making interface the new active one [ 472.069455][ T42] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 472.132192][T12180] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 472.241706][ T42] usb 3-1: string descriptor 0 read error: -71 [ 472.282715][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 472.324675][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.395918][ T42] usb 3-1: can't set config #1, error -71 [ 472.441413][T12186] Device name cannot be null; rc = [-22] [ 472.458230][ T42] usb 3-1: USB disconnect, device number 44 [ 472.487882][ T29] audit: type=1400 audit(1774811544.350:1133): avc: denied { bind } for pid=12185 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 472.564864][ T29] audit: type=1400 audit(1774811544.390:1134): avc: denied { read } for pid=12185 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 472.836469][T12192] SET target dimension over the limit! [ 472.896585][ T10] usb 5-1: USB disconnect, device number 34 [ 472.921355][T12193] nfs: Unknown parameter 'losk' [ 472.928744][T12197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1716'. [ 472.976459][ T29] audit: type=1400 audit(1774811544.840:1135): avc: denied { map } for pid=12199 comm="syz.4.1717" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 473.039092][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 473.048440][ T29] audit: type=1400 audit(1774811544.840:1136): avc: denied { execute } for pid=12199 comm="syz.4.1717" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 473.151561][ T29] audit: type=1400 audit(1774811544.880:1137): avc: denied { ioctl } for pid=12199 comm="syz.4.1717" path="socket:[33944]" dev="sockfs" ino=33944 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 475.323062][T12228] SET target dimension over the limit! [ 475.908904][T12231] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1728'. [ 475.967697][T12236] overlayfs: failed to resolve './file1': -2 [ 477.590359][T12251] binder: 12250:12251 ioctl 4018620d 0 returned -22 [ 478.054119][T12264] SET target dimension over the limit! [ 478.283873][T12273] dummy0: entered promiscuous mode [ 478.289126][T12273] macsec1: entered allmulticast mode [ 478.294784][T12273] dummy0: entered allmulticast mode [ 478.302850][T12273] dummy0: left allmulticast mode [ 478.312849][T12273] dummy0: left promiscuous mode [ 478.820879][ T793] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 479.185767][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1749'. [ 479.223828][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 479.248666][ T793] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 479.263070][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 479.279113][ T793] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 479.290619][T12304] SET target dimension over the limit! [ 479.299727][ T793] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 479.309411][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.319432][ T793] usb 5-1: Product: syz [ 479.324806][ T793] usb 5-1: Manufacturer: syz [ 479.337403][ T793] usb 5-1: SerialNumber: syz [ 479.347182][ T793] usb 5-1: config 0 descriptor?? [ 479.354833][ T793] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 479.586337][ T793] scsi host1: usb-storage 5-1:0.0 [ 479.659540][T12314] overlayfs: failed to clone lowerpath [ 479.667235][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 479.667266][ T29] audit: type=1400 audit(1774811551.520:1139): avc: denied { mount } for pid=12310 comm="syz.0.1751" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 479.742934][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 479.786065][T12315] erspan1: entered allmulticast mode [ 480.738933][ T793] usb 5-1: USB disconnect, device number 35 [ 480.910359][T12318] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1752'. [ 481.007451][ T29] audit: type=1400 audit(1774811552.870:1140): avc: denied { read write } for pid=12320 comm="syz.3.1754" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 481.088723][ T29] audit: type=1400 audit(1774811552.900:1141): avc: denied { open } for pid=12320 comm="syz.3.1754" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 481.722819][ T29] audit: type=1400 audit(1774811553.590:1142): avc: denied { setopt } for pid=12328 comm="syz.2.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 481.762257][ T29] audit: type=1400 audit(1774811553.610:1143): avc: denied { ioctl } for pid=12328 comm="syz.2.1757" path="socket:[34063]" dev="sockfs" ino=34063 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 481.795913][ T29] audit: type=1400 audit(1774811553.610:1144): avc: denied { write } for pid=12328 comm="syz.2.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 481.888514][ T5808] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 481.901190][ T5808] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 482.327466][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'. [ 482.336502][T12354] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 482.460198][T12352] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1766'. [ 482.582135][T12360] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 482.646537][T12361] picdev_read: 164 callbacks suppressed [ 482.646548][T12361] kvm: pic: non byte read [ 482.663776][T12361] kvm: pic: non byte read [ 482.670076][T12361] kvm: pic: non byte read [ 482.678155][T12365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1769'. [ 482.678272][T12361] kvm: pic: non byte read [ 482.693022][T12361] kvm: pic: non byte read [ 482.698784][T12361] kvm: pic: non byte read [ 482.703759][T12361] kvm: pic: non byte read [ 482.703986][T12365] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 482.716262][T12361] kvm: pic: non byte read [ 482.723403][T12361] kvm: pic: non byte read [ 482.729595][T12361] kvm: pic: non byte read [ 482.878208][T12371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1770'. [ 482.994082][ T29] audit: type=1326 audit(1774811554.850:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97739c799 code=0x7ffc0000 [ 483.447988][ T29] audit: type=1326 audit(1774811554.850:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97739c799 code=0x7ffc0000 [ 483.472215][ T29] audit: type=1326 audit(1774811554.850:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97739c799 code=0x7ffc0000 [ 483.582313][ T29] audit: type=1326 audit(1774811554.850:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7fc97739c799 code=0x7ffc0000 [ 483.772183][ T42] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 483.947657][ T42] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 483.971012][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.001710][ T42] usb 4-1: Product: syz [ 484.019146][ T42] usb 4-1: Manufacturer: syz [ 484.031124][ T42] usb 4-1: SerialNumber: syz [ 484.058015][ T42] usb 4-1: config 0 descriptor?? [ 484.092623][ T42] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 032 [ 484.226399][T12417] netlink: 'syz.2.1780': attribute type 1 has an invalid length. [ 484.348232][T12378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.456183][T12424] zonefs (nullb0) ERROR: Not a zoned block device [ 484.496189][T12378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.572288][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 485.268117][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 485.330078][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 485.366187][ T9] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 485.495630][ T9] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 485.913125][ T9] usb 5-1: config 63 has no interface number 0 [ 485.929572][ T9] usb 5-1: config 63 interface 66 has no altsetting 0 [ 485.968470][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 485.996954][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 486.055152][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.102071][ T9] usb 5-1: Product: syz [ 486.148738][ T9] usb 5-1: Manufacturer: syz [ 486.179696][ T9] usb 5-1: SerialNumber: syz [ 486.190180][ T42] (null): failure setting delay to 10us [ 486.274569][ T42] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 486.315783][ T42] usb 4-1: USB disconnect, device number 32 [ 486.489262][T12442] gre0 speed is unknown, defaulting to 1000 [ 486.766447][ T9] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 486.781995][ T9] uvcvideo 5-1:63.66: No valid video chain found. [ 486.799153][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 486.799168][ T29] audit: type=1400 audit(1774811558.660:1221): avc: denied { append } for pid=12454 comm="syz.2.1793" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 486.804984][T12455] No control pipe specified [ 486.821219][ T9] usb 5-1: USB disconnect, device number 36 [ 486.880810][ T42] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 486.978673][ T29] audit: type=1400 audit(1774811558.840:1222): avc: denied { link } for pid=12454 comm="syz.2.1793" name="#35" dev="tmpfs" ino=1823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 487.018734][ T29] audit: type=1400 audit(1774811558.850:1223): avc: denied { rename } for pid=12454 comm="syz.2.1793" name="#36" dev="tmpfs" ino=1823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 487.076543][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 487.089220][ T42] usb 4-1: config 8 has an invalid interface number: 243 but max is 1 [ 487.102929][ T42] usb 4-1: config 8 has an invalid interface number: 165 but max is 1 [ 487.115046][ T42] usb 4-1: config 8 has no interface number 0 [ 487.121355][ T42] usb 4-1: config 8 has no interface number 1 [ 487.127568][ T42] usb 4-1: config 8 interface 243 has no altsetting 0 [ 487.134512][ T42] usb 4-1: config 8 interface 165 has no altsetting 0 [ 487.152584][ T42] usb 4-1: New USB device found, idVendor=0bda, idProduct=b82b, bcdDevice=ac.6e [ 487.164274][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.176156][ T42] usb 4-1: Product: syz [ 487.181046][ T42] usb 4-1: Manufacturer: syz [ 487.204575][ T42] usb 4-1: SerialNumber: syz [ 487.509195][ T42] hub 4-1:8.165: Invalid hub with more than one config or interface [ 487.529074][ T42] hub 4-1:8.165: probe with driver hub failed with error -22 [ 487.560201][ T42] usb 4-1: USB disconnect, device number 33 [ 487.720892][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 487.922121][ T9] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 487.930290][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 487.940174][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 487.948782][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 487.957927][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 487.966492][ T9] usb 5-1: Product: syz [ 487.970695][ T9] usb 5-1: Manufacturer: syz [ 487.975407][ T9] usb 5-1: SerialNumber: syz [ 488.006051][ T9] usb 5-1: config 0 descriptor?? [ 488.094189][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'. [ 488.110846][T12473] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.141398][T12473] bridge_slave_0 (unregistering): left allmulticast mode [ 488.148504][T12473] bridge_slave_0 (unregistering): left promiscuous mode [ 488.156442][T12473] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.332483][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 488.357163][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 488.377431][ T9] usb 5-1: selecting invalid altsetting 0 [ 488.395989][ T29] audit: type=1400 audit(1774811560.260:1224): avc: denied { ioctl } for pid=12476 comm="syz.3.1799" path="socket:[33656]" dev="sockfs" ino=33656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 488.427880][T12477] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1799'. [ 488.448687][T12477] bridge_slave_0: left allmulticast mode [ 488.460909][ T29] audit: type=1400 audit(1774811560.290:1225): avc: denied { bind } for pid=12476 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 488.480329][T12477] bridge_slave_0: left promiscuous mode [ 488.480530][T12477] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.648236][T12477] bridge_slave_1: left allmulticast mode [ 488.669720][T12477] bridge_slave_1: left promiscuous mode [ 488.678200][T12477] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.658058][T12477] bond0: (slave bond_slave_0): Releasing backup interface [ 489.851356][T12477] bond0: (slave bond_slave_1): Releasing backup interface [ 489.879577][T12477] team0: Port device team_slave_0 removed [ 490.428902][ T7577] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 490.445303][ T7539] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 490.452257][ T7539] Bluetooth: hci5: Frame reassembly failed (-84) [ 490.575902][T10488] usb 5-1: USB disconnect, device number 37 [ 490.666298][ T29] audit: type=1400 audit(1774811562.530:1226): avc: denied { getopt } for pid=12504 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 490.681065][T12477] team0: Port device team_slave_1 removed [ 490.696107][T12505] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1808'. [ 490.713450][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.742371][T12477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.750576][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1807'. [ 490.761615][ T29] audit: type=1400 audit(1774811562.610:1227): avc: denied { ioctl } for pid=12506 comm="syz.1.1807" path="socket:[33750]" dev="sockfs" ino=33750 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 490.794300][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.802479][T12477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.811986][T12477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 490.842769][T12510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1807'. [ 490.881448][ T29] audit: type=1400 audit(1774811562.730:1228): avc: denied { ioctl } for pid=12506 comm="syz.1.1807" path="socket:[33754]" dev="sockfs" ino=33754 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 490.885106][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 490.944623][T12509] gre0 speed is unknown, defaulting to 1000 [ 490.978885][ T29] audit: type=1400 audit(1774811562.730:1229): avc: denied { write } for pid=12506 comm="syz.1.1807" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 491.262834][T12536] picdev_read: 77 callbacks suppressed [ 491.262847][T12536] kvm: pic: non byte read [ 491.292473][T12536] kvm: pic: non byte read [ 491.302487][T12536] kvm: pic: non byte read [ 491.320351][T12536] kvm: pic: non byte read [ 491.334716][ T29] audit: type=1400 audit(1774811563.190:1230): avc: denied { ioctl } for pid=12518 comm="syz.1.1812" path="socket:[34531]" dev="sockfs" ino=34531 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 491.362306][T12536] kvm: pic: non byte read [ 491.371102][T12536] kvm: pic: non byte read [ 491.375614][T12536] kvm: pic: non byte read [ 491.380230][T12536] kvm: pic: non byte read [ 491.386266][T12536] kvm: pic: non byte read [ 491.390905][T12536] kvm: pic: non byte read [ 494.651150][ T5809] Bluetooth: hci5: command 0x1003 tx timeout [ 494.740987][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 495.244665][ T29] audit: type=1400 audit(1774811567.100:1231): avc: denied { ioctl } for pid=12555 comm="syz.0.1821" path="socket:[33790]" dev="sockfs" ino=33790 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 495.867989][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.874808][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.891390][ T29] audit: type=1400 audit(1774811568.730:1232): avc: denied { map } for pid=12601 comm="syz.4.1830" path="socket:[34731]" dev="sockfs" ino=34731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 496.966649][ T29] audit: type=1400 audit(1774811568.730:1233): avc: denied { read } for pid=12601 comm="syz.4.1830" path="socket:[34731]" dev="sockfs" ino=34731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 497.305985][T12612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1832'. [ 497.359810][ T29] audit: type=1400 audit(1774811569.220:1234): avc: denied { write } for pid=12614 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 497.431169][T12610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.720837][ T793] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 497.773122][T12627] siw: device registration error -23 [ 497.841085][ T29] audit: type=1400 audit(1774811569.690:1235): avc: denied { accept } for pid=12624 comm="syz.3.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 498.262577][ T793] usb 5-1: Using ep0 maxpacket: 16 [ 498.287897][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.329288][ T793] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 498.359104][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.387880][ T793] usb 5-1: config 0 descriptor?? [ 498.481080][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 498.514610][T12635] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 498.522440][T12635] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1837'. [ 498.783770][T12642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1844'. [ 498.841702][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 498.862296][ T10] usb 3-1: config 0 has no interfaces? [ 498.890087][ T793] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 498.914146][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.925756][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.936659][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 498.945555][T12651] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 498.982696][ T10] usb 3-1: Product: syz [ 498.986891][ T10] usb 3-1: Manufacturer: syz [ 499.016196][ T10] usb 3-1: SerialNumber: syz [ 499.093845][ T10] usb 3-1: config 0 descriptor?? [ 499.286399][ T10] usb 5-1: USB disconnect, device number 38 [ 499.738416][ T10] usb 3-1: USB disconnect, device number 45 [ 499.934036][T12676] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 499.942294][T12676] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1853'. [ 500.520935][ T793] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 500.741385][ T793] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 500.779905][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.814935][ T793] usb 5-1: Product: syz [ 500.835286][ T793] usb 5-1: Manufacturer: syz [ 500.849818][ T793] usb 5-1: SerialNumber: syz [ 500.886233][ T793] usb 5-1: config 0 descriptor?? [ 500.917308][ T793] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 039 [ 501.467094][ T793] (null): failure reading functionality [ 501.498670][ T793] i2c i2c-2: connected i2c-tiny-usb device [ 501.567625][T12696] xt_recent: Unsupported userspace flags (000000de) [ 501.844682][ T29] audit: type=1400 audit(1774811573.540:1236): avc: denied { bind } for pid=12695 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 501.867195][ T793] usb 5-1: USB disconnect, device number 39 [ 502.216302][ T29] audit: type=1400 audit(1774811574.080:1237): avc: denied { read } for pid=12704 comm="syz.2.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 502.314695][ T29] audit: type=1400 audit(1774811574.090:1238): avc: denied { getopt } for pid=12704 comm="syz.2.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 502.405414][ T29] audit: type=1326 audit(1774811574.160:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc97739c799 code=0x0 [ 502.519474][ T29] audit: type=1326 audit(1774811574.220:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.1865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc97739c799 code=0x0 [ 502.640653][ T29] audit: type=1400 audit(1774811574.350:1241): avc: denied { setopt } for pid=12712 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 502.747879][T12722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1869'. [ 502.783718][T12722] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 502.927707][ T29] audit: type=1400 audit(1774811574.790:1242): avc: denied { recv } for pid=5805 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.5 dest=40812 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 503.107957][ T29] audit: type=1400 audit(1774811574.960:1243): avc: denied { append } for pid=12731 comm="syz.2.1873" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 503.855551][T12751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1878'. [ 504.113065][ T29] audit: type=1400 audit(1774811575.970:1244): avc: denied { setattr } for pid=12757 comm="syz.2.1879" name="vcsa4" dev="devtmpfs" ino=3204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 504.277622][T12762] input: syz1 as /devices/virtual/input/input32 [ 504.608741][ T29] audit: type=1400 audit(1774811576.460:1245): avc: denied { lock } for pid=12770 comm="syz.0.1885" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.027344][T12780] bridge0: entered promiscuous mode [ 505.119634][T12780] bridge0: entered allmulticast mode [ 505.421678][T12780] team0: Port device bridge0 added [ 505.460302][T12781] bridge0: port 1(team0) entered blocking state [ 505.511360][T12781] bridge0: port 1(team0) entered disabled state [ 505.517863][T12781] team0: entered allmulticast mode [ 505.572454][T12781] team_slave_0: entered allmulticast mode [ 505.631078][T12781] team_slave_1: entered allmulticast mode [ 505.679312][T12781] team0: left allmulticast mode [ 505.697047][T12781] team_slave_0: left allmulticast mode [ 505.711953][T12781] team_slave_1: left allmulticast mode [ 505.782031][T12798] gre0 speed is unknown, defaulting to 1000 [ 508.318464][T12834] netlink: 'syz.4.1897': attribute type 1 has an invalid length. [ 508.326304][T12834] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1897'. [ 509.013560][T12854] dummy0: entered promiscuous mode [ 509.043434][T12854] macsec1: entered allmulticast mode [ 509.078724][T12854] dummy0: entered allmulticast mode [ 509.215671][T12854] dummy0: left allmulticast mode [ 509.238603][T12854] dummy0: left promiscuous mode [ 509.976407][ T29] audit: type=1400 audit(1774811581.840:1246): avc: denied { map } for pid=12868 comm="syz.4.1912" path="socket:[36336]" dev="sockfs" ino=36336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 510.361299][ T5873] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 510.893802][ T5873] usb 4-1: device descriptor read/64, error -71 [ 511.130825][ T5873] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 511.311372][ T5873] usb 4-1: device descriptor read/64, error -71 [ 511.421146][ T5873] usb usb4-port1: attempt power cycle [ 511.761041][ T5873] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 511.781408][ T5873] usb 4-1: device descriptor read/8, error -71 [ 512.020867][ T5873] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 512.041208][ T5873] usb 4-1: device descriptor read/8, error -71 [ 512.151201][ T5873] usb usb4-port1: unable to enumerate USB device [ 516.145538][ T5178] udevd[5178]: worker [9289] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 557.306206][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.312537][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.319612][ T29] audit: type=1400 audit(1774811629.170:1247): avc: denied { egress } for pid=12550 comm="kworker/u9:0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 557.345160][ T29] audit: type=1400 audit(1774811629.170:1248): avc: denied { sendto } for pid=12550 comm="kworker/u9:0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 567.542098][ T30] INFO: task kworker/0:6:6638 blocked for more than 143 seconds. [ 567.549846][ T30] Tainted: G L syzkaller #0 [ 567.570789][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.579469][ T30] task:kworker/0:6 state:D stack:21672 pid:6638 tgid:6638 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 567.591718][ T30] Workqueue: usb_hub_wq hub_event [ 567.597618][ T30] Call Trace: [ 567.601146][ T30] [ 567.604075][ T30] __schedule+0xfee/0x6120 [ 567.608491][ T30] ? __lock_acquire+0x4a5/0x2630 [ 567.611354][ T29] audit: type=1400 audit(1774811639.460:1249): avc: denied { write } for pid=5790 comm="syz-executor" path="pipe:[5132]" dev="pipefs" ino=5132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 567.613811][ T30] ? __pfx___schedule+0x10/0x10 [ 567.642325][ T30] ? find_held_lock+0x2b/0x80 [ 567.647010][ T30] ? schedule+0x2bf/0x390 [ 567.651614][ T30] schedule+0xdd/0x390 [ 567.655689][ T30] schedule_timeout+0x1b2/0x280 [ 567.660537][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 567.684997][ T29] audit: type=1400 audit(1774811639.460:1250): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=41356 daddr=10.128.1.5 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 567.740740][ T30] ? mark_held_locks+0x40/0x70 [ 567.745536][ T30] __wait_for_common+0x2e7/0x4c0 [ 567.750479][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 567.768844][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 567.802169][ T30] ? __pfx_device_del+0x10/0x10 [ 567.807063][ T30] ? kobject_put+0xb9/0x640 [ 567.850773][ T30] i2c_del_adapter+0x62d/0x820 [ 567.855576][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 567.870860][ T30] ? dvb_usb_device_exit+0x29a/0x520 [ 567.876164][ T30] ? rcu_is_watching+0x12/0xc0 [ 567.891154][ T30] ? dvb_usb_device_exit+0x29a/0x520 [ 567.896462][ T30] dvb_usb_i2c_exit+0x9f/0xf0 [ 567.910842][ T30] dvb_usb_device_exit+0x313/0x520 [ 567.915970][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 567.940754][ T30] ? _raw_spin_lock_irqsave+0x52/0x60 [ 567.946151][ T30] cxusb_probe.cold+0x4d/0xc2 [ 567.960742][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 567.966561][ T30] ? __pfx_cxusb_probe+0x10/0x10 [ 567.981079][ T30] ? __pm_runtime_set_status+0x13c/0x970 [ 567.986724][ T30] usb_probe_interface+0x303/0x8f0 [ 568.001232][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 568.007322][ T30] really_probe+0x241/0xa60 [ 568.021149][ T30] __driver_probe_device+0x1de/0x400 [ 568.026456][ T30] driver_probe_device+0x4c/0x1b0 [ 568.051509][ T30] __device_attach_driver+0x1df/0x340 [ 568.056894][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 568.071157][ T30] bus_for_each_drv+0x159/0x1e0 [ 568.076021][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 568.090889][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 568.096102][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 568.120810][ T30] __device_attach+0x1e4/0x4d0 [ 568.125591][ T30] ? __pfx___device_attach+0x10/0x10 [ 568.138542][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 568.143946][ T30] device_initial_probe+0xaf/0xd0 [ 568.148977][ T30] bus_probe_device+0x64/0x160 [ 568.170852][ T30] device_add+0x11d9/0x1950 [ 568.175368][ T30] ? __pfx_device_add+0x10/0x10 [ 568.180196][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 568.193321][ T30] usb_set_configuration+0xd97/0x1c60 [ 568.198695][ T30] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 568.204946][ T30] usb_generic_driver_probe+0xa1/0xe0 [ 568.210316][ T30] usb_probe_device+0xef/0x400 [ 568.215160][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 568.220531][ T30] really_probe+0x241/0xa60 [ 568.225075][ T30] __driver_probe_device+0x1de/0x400 [ 568.230360][ T30] ? usb_driver_applicable+0x1c7/0x220 [ 568.235840][ T30] driver_probe_device+0x4c/0x1b0 [ 568.241323][ T30] __device_attach_driver+0x1df/0x340 [ 568.246692][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 568.252654][ T30] bus_for_each_drv+0x159/0x1e0 [ 568.257500][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 568.262907][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 568.268108][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 568.273960][ T30] __device_attach+0x1e4/0x4d0 [ 568.278715][ T30] ? __pfx___device_attach+0x10/0x10 [ 568.284012][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 568.289200][ T30] device_initial_probe+0xaf/0xd0 [ 568.294279][ T30] bus_probe_device+0x64/0x160 [ 568.299046][ T30] device_add+0x11d9/0x1950 [ 568.303565][ T30] ? __pfx_device_add+0x10/0x10 [ 568.308405][ T30] ? add_device_randomness+0xb7/0xf0 [ 568.313826][ T30] usb_new_device.cold+0x685/0x115c [ 568.319006][ T30] ? do_raw_spin_lock+0x128/0x260 [ 568.324043][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 568.329237][ T30] ? mark_held_locks+0x40/0x70 [ 568.334057][ T30] hub_event+0x314d/0x4af0 [ 568.338482][ T30] ? __pfx_hub_event+0x10/0x10 [ 568.343708][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 568.349346][ T30] ? trace_event_raw_event_sched_process_exec+0x290/0x350 [ 568.356465][ T30] ? rcu_is_watching+0x12/0xc0 [ 568.361240][ T30] process_one_work+0xa23/0x19a0 [ 568.366160][ T30] ? __pfx_process_one_work+0x10/0x10 [ 568.371635][ T30] ? __pfx_hub_event+0x10/0x10 [ 568.376398][ T30] worker_thread+0x5ef/0xe50 [ 568.381015][ T30] ? __pfx_worker_thread+0x10/0x10 [ 568.386122][ T30] ? kthread+0x13a/0x450 [ 568.390357][ T30] ? __pfx_worker_thread+0x10/0x10 [ 568.395481][ T30] kthread+0x370/0x450 [ 568.399540][ T30] ? __pfx_kthread+0x10/0x10 [ 568.404144][ T30] ret_from_fork+0x754/0xd80 [ 568.408725][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 568.413898][ T30] ? rcu_is_watching+0x12/0xc0 [ 568.418656][ T30] ? __switch_to+0x7b4/0x1120 [ 568.423443][ T30] ? __pfx_kthread+0x10/0x10 [ 568.428019][ T30] ret_from_fork_asm+0x1a/0x30 [ 568.432799][ T30] [ 568.462248][ T30] [ 568.462248][ T30] Showing all locks held in the system: [ 568.469969][ T30] 1 lock held by khungtaskd/30: [ 568.502504][ T30] #0: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 568.521756][ T30] 3 locks held by kworker/1:1/42: [ 568.526779][ T30] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 568.570778][ T30] #1: ffffc90000b27d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 568.580480][ T30] #2: ffffffff8e7f3478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 568.610796][ T30] 2 locks held by getty/5564: [ 568.615481][ T30] #0: ffff88803a2f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 568.640815][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 568.661005][ T30] 2 locks held by syz-executor/5805: [ 568.666295][ T30] #0: ffffffff90613528 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 568.690790][ T30] #1: ffffffff8e7f3478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 568.710735][ T30] 1 lock held by syz-executor/5810: [ 568.715929][ T30] 2 locks held by syz-executor/5811: [ 568.740718][ T30] 5 locks held by kworker/0:6/6638: [ 568.745915][ T30] #0: ffff8880216b0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 568.790742][ T30] #1: ffffc90003c87d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 568.830718][ T30] #2: ffff88802b3b71e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 568.839648][ T30] #3: ffff88802e41c1e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 568.870957][ T30] #4: ffff8880212e21a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 568.880393][ T30] 2 locks held by syz.4.267/6892: [ 568.891032][ T30] 4 locks held by udevd/9289: [ 568.895705][ T30] #0: ffff88807b4652f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 568.921488][ T30] #1: ffff88805eed0c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 568.951489][ T30] #2: ffff888039027788 (kn->active#21){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 568.980858][ T30] #3: ffff88802e41c1e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 568.990218][ T30] 1 lock held by syz.0.1447/11190: [ 569.020360][ T30] [ 569.040939][ T30] ============================================= [ 569.040939][ T30] [ 569.049359][ T30] NMI backtrace for cpu 1 [ 569.049375][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 569.049399][ T30] Tainted: [L]=SOFTLOCKUP [ 569.049405][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.049415][ T30] Call Trace: [ 569.049420][ T30] [ 569.049427][ T30] dump_stack_lvl+0x100/0x190 [ 569.049460][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 569.049481][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 569.049499][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 569.049524][ T30] sys_info+0x141/0x190 [ 569.049541][ T30] watchdog+0xd25/0x1050 [ 569.049575][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.049599][ T30] ? __kthread_parkme+0x18c/0x230 [ 569.049627][ T30] ? kthread+0x13a/0x450 [ 569.049643][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.049665][ T30] kthread+0x370/0x450 [ 569.049681][ T30] ? __pfx_kthread+0x10/0x10 [ 569.049700][ T30] ret_from_fork+0x754/0xd80 [ 569.049719][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 569.049739][ T30] ? __switch_to+0x7b4/0x1120 [ 569.049760][ T30] ? __pfx_kthread+0x10/0x10 [ 569.049778][ T30] ret_from_fork_asm+0x1a/0x30 [ 569.049810][ T30] [ 569.049816][ T30] Sending NMI from CPU 1 to CPUs 0: [ 569.179056][ C0] NMI backtrace for cpu 0 [ 569.179073][ C0] CPU: 0 UID: 0 PID: 6892 Comm: syz.4.267 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.179093][ C0] Tainted: [L]=SOFTLOCKUP [ 569.179097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.179105][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x39/0x70 [ 569.179128][ C0] Code: 65 48 8b 15 41 48 05 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 82 a4 16 00 00 85 c0 74 f1 <8b> 82 80 16 00 00 83 f8 02 75 e6 48 8b 8a 88 16 00 00 8b 92 84 16 [ 569.179141][ C0] RSP: 0018:ffffc90003437008 EFLAGS: 00000046 [ 569.179152][ C0] RAX: 0000000080000002 RBX: ffff88805fa539c2 RCX: ffffffff8b8edf59 [ 569.179161][ C0] RDX: ffff8880334124c0 RSI: ffffffff8b8edf7b RDI: ffff8880334124c0 [ 569.179170][ C0] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000002 [ 569.179178][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc90003437128 [ 569.179186][ C0] R13: ffff88805f98d600 R14: 0000000000000002 R15: 0000000000000001 [ 569.179194][ C0] FS: 0000000000000000(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 569.179207][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.179215][ C0] CR2: 000055b2d686f170 CR3: 000000000e598000 CR4: 00000000003526f0 [ 569.179224][ C0] Call Trace: [ 569.179228][ C0] [ 569.179232][ C0] xas_load+0x5b/0x5c0 [ 569.179253][ C0] xas_store+0xb56/0x1a30 [ 569.179266][ C0] ? filemap_unaccount_folio+0x454/0xb30 [ 569.179284][ C0] ? rcu_is_watching+0x12/0xc0 [ 569.179299][ C0] __filemap_remove_folio+0x421/0x660 [ 569.179318][ C0] ? __pfx___filemap_remove_folio+0x10/0x10 [ 569.179337][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 569.179353][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 569.179371][ C0] filemap_remove_folio+0xfc/0x270 [ 569.179389][ C0] truncate_inode_folio+0x49/0x70 [ 569.179403][ C0] shmem_undo_range+0x3ae/0x1570 [ 569.179424][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 569.179449][ C0] ? __lock_acquire+0x4a5/0x2630 [ 569.179473][ C0] shmem_evict_inode+0x39e/0xbd0 [ 569.179491][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 569.179511][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 569.179524][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 569.179541][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 569.179561][ C0] ? find_held_lock+0x2b/0x80 [ 569.179577][ C0] ? evict+0x37e/0xad0 [ 569.179592][ C0] ? evict+0x37e/0xad0 [ 569.179609][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 569.179626][ C0] evict+0x3c2/0xad0 [ 569.179643][ C0] ? __pfx_evict+0x10/0x10 [ 569.179660][ C0] ? iput.part.0+0x5fd/0xf50 [ 569.179678][ C0] iput.part.0+0x605/0xf50 [ 569.179693][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 569.179706][ C0] iput+0x35/0x40 [ 569.179721][ C0] dentry_unlink_inode+0x2a1/0x490 [ 569.179738][ C0] __dentry_kill+0x1d0/0x600 [ 569.179754][ C0] ? shrink_dentry_list+0x10e/0x5e0 [ 569.179772][ C0] shrink_dentry_list+0x180/0x5e0 [ 569.179790][ C0] ? shrink_dcache_tree+0x98/0x570 [ 569.179807][ C0] ? __pfx_select_collect_umount+0x10/0x10 [ 569.179823][ C0] shrink_dcache_tree+0x100/0x570 [ 569.179841][ C0] ? __pfx_select_collect_umount+0x10/0x10 [ 569.179858][ C0] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 569.179880][ C0] shrink_dcache_for_umount+0xa7/0x400 [ 569.179900][ C0] generic_shutdown_super+0x7e/0x360 [ 569.179918][ C0] kill_anon_super+0x3a/0x60 [ 569.179934][ C0] deactivate_locked_super+0xc1/0x1b0 [ 569.179952][ C0] deactivate_super+0xe7/0x110 [ 569.179970][ C0] cleanup_mnt+0x21f/0x450 [ 569.179984][ C0] task_work_run+0x150/0x240 [ 569.179998][ C0] ? __pfx_task_work_run+0x10/0x10 [ 569.180019][ C0] do_exit+0x8b8/0x2b60 [ 569.180038][ C0] ? __pfx_do_exit+0x10/0x10 [ 569.180055][ C0] ? cgroup_update_frozen_flag+0x107/0x210 [ 569.180070][ C0] ? find_held_lock+0x2b/0x80 [ 569.180085][ C0] ? get_signal+0x184f/0x21e0 [ 569.180102][ C0] do_group_exit+0xd5/0x2a0 [ 569.180121][ C0] get_signal+0x1ec7/0x21e0 [ 569.180136][ C0] ? __asan_memset+0x23/0x50 [ 569.180155][ C0] ? __pfx_get_signal+0x10/0x10 [ 569.180171][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 569.180186][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 569.180202][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 569.180219][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 569.180238][ C0] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 569.180257][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 569.180271][ C0] do_syscall_64+0x67c/0xf80 [ 569.180288][ C0] ? clear_bhb_loop+0x40/0x90 [ 569.180303][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.180316][ C0] RIP: 0033:0x7ffbcc15cfce [ 569.180326][ C0] Code: Unable to access opcode bytes at 0x7ffbcc15cfa4. [ 569.180332][ C0] RSP: 002b:00007ffbca3f5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 569.180344][ C0] RAX: fffffffffffffdfc RBX: 00007ffbca3f66c0 RCX: 00007ffbcc15cfce [ 569.180352][ C0] RDX: 00007ffbca3f5fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.180361][ C0] RBP: 00007ffbcc232c99 R08: 0000000000000000 R09: 0000000000000000 [ 569.180369][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.180377][ C0] R13: 00007ffbcc416038 R14: 00007ffbcc415fa0 R15: 00007ffc671adbe8 [ 569.180390][ C0] [ 569.330758][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 569.330778][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 569.330800][ T30] Tainted: [L]=SOFTLOCKUP [ 569.330806][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.330816][ T30] Call Trace: [ 569.330822][ T30] [ 569.330828][ T30] dump_stack_lvl+0x100/0x190 [ 569.330858][ T30] vpanic+0x552/0x970 [ 569.330874][ T30] ? __pfx_vpanic+0x10/0x10 [ 569.330890][ T30] ? rcu_is_watching+0x12/0xc0 [ 569.330914][ T30] panic+0xd1/0xe0 [ 569.330929][ T30] ? __pfx_panic+0x10/0x10 [ 569.330946][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 569.330966][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 569.330990][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 569.331007][ T30] ? watchdog.cold+0x198/0x1ca [ 569.331024][ T30] ? watchdog+0xd35/0x1050 [ 569.331047][ T30] watchdog.cold+0x1a9/0x1ca [ 569.331070][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.331092][ T30] ? __kthread_parkme+0x18c/0x230 [ 569.331118][ T30] ? kthread+0x13a/0x450 [ 569.331133][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.331152][ T30] kthread+0x370/0x450 [ 569.331167][ T30] ? __pfx_kthread+0x10/0x10 [ 569.331183][ T30] ret_from_fork+0x754/0xd80 [ 569.331201][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 569.331219][ T30] ? __switch_to+0x7b4/0x1120 [ 569.331239][ T30] ? __pfx_kthread+0x10/0x10 [ 569.331255][ T30] ret_from_fork_asm+0x1a/0x30 [ 569.331285][ T30] [ 569.835361][ T30] Kernel Offset: disabled [ 569.839663][ T30] Rebooting in 86400 seconds..