last executing test programs: 10.604413407s ago: executing program 0 (id=661): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x80040) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$kcm(0xa, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x401, 0x420040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0xfffffffd, 0x4765, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x24000008, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x20442) 9.054333607s ago: executing program 0 (id=669): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) epoll_create1(0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0xfffffffb, 0x1, &(0x7f0000000180)="d30039bc344c23cfc43bf9c64cb29324e0b066304932fa86180964b3db14f67d9d27b11d1ff2f6cfdda27340939919e40dfab148f15eb0a3052c17e4be9a2f11f90df2c924ffdee94b63158e8b44b2a134d8ed0bcd247075b614c24c83854ca0a865", 0x10000, 0x0, 0x0, {0x3}}) socket$kcm(0x10, 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xbf) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(0x0, 0x0, 0x0) 7.956655076s ago: executing program 0 (id=673): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010001fff00000000800000ffffffffff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="240012800b00010062726964676500001400028005000700060000000500290005"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 7.858453299s ago: executing program 1 (id=674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x424, 0x5a, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8007, 0x180, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r7, &(0x7f0000000780)=[{{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x1, 0x40012100, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46", 0x40, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xa9d, 0x3, @mcast1}, 0x1c) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000b58610570000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$netlink(0x10, 0x3, 0x10) 7.55859717s ago: executing program 0 (id=676): ioprio_get$pid(0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000dac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044001}}, {{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x800}}], 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, &(0x7f00000002c0), 0x0, 0x0}) syz_usb_connect(0x2, 0x51, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 6.939949418s ago: executing program 2 (id=677): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7, 0x21, {0x0}, {}, 0x7, 0x8}) sched_setscheduler(r2, 0x3, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) rmdir(&(0x7f0000000100)='./file0\x00') ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @local}, 0x1, 0x4, 0x3, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x54) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000eb"], 0x80}}, 0x4814) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) io_submit(r0, 0x0, 0x0) 5.747726092s ago: executing program 1 (id=680): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x70, @string={0x70, 0x3, "68b9855d39eea022c875872551fdd18d7fc16887a63fc9a0b5e0be1224f7bbe24a8055aa16d017585c0631f89efe19c4cdb4aa973ff50915a251e581f2ee88a7150421e385c27aa134a423355205738f0cd11da7fe6f4f6d4c748e6505546f00"/110}}}, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 5.474222224s ago: executing program 2 (id=683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x100000001, 0x4) r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0xfc, 0x16, 0xa, 0x1554eb72b05aa3eb, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb01}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x2c8, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xe2, 0xd, 0x1, 0x0, "6999d34c3b74cc02f8f258900fdfe5b8481bd5cbfe78f15b51df9c88dbf3ef91344ba8175c335ec40a6c9c7a0808f097ce16ecd0cc345d0dd5ac990858a9431c4096f6898ca992d0f49d4d002d980880863d4fd0875a0a448a28659a17997dbe2dcd08fe40789c0b158345226173bcddf7ff61d7cc526c288cf35a5a726d6bfa71dcfc46a147ec7d20f909f28caecab057e69e03e4446105998cefb470d59b5a12a17634a472a065933bba252ce0c5d7e32bda7d3bc8a1810548a88b431da2bc86ba1482980d3f3475af3e8958b816dd525c3255becaf0aa4a39fc5d4cbf"}, @NFTA_SET_DESC={0x1d0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xcc}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x11c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff112}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ad9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1dbc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6cd1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x97a6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6eff30e5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb5a8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWOBJ={0x40, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x2c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xfff7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}]}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0xe8, 0x18, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xeb5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c0}, 0x1, 0x0, 0x0, 0x28005}, 0x4000880) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000006c0)=0x0) bind$nfc_llcp(r1, &(0x7f0000000700)={0x27, r2, 0xffffffffffffffff, 0x7, 0x3, 0x6, "7f634006a9378b3fdac30cc6938e7484ff3e7ddd5b02d721d45909b32d7a4bac7f6864faff6f6877477de154f51301413fe74c765ee04ae07c7ad5f43bda21", 0x1f}, 0x60) 5.437359521s ago: executing program 3 (id=684): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 9) 5.402169698s ago: executing program 2 (id=685): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_usb_connect(0x3, 0x5d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x44, 0x11, 0x63, 0x40, 0x421, 0x178, 0xa8c0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x0, 0x1, 0x0, 0x7f, [{{0x9, 0x4, 0x59, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7f, 0x695d, 0xb}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xe}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x2, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0x1, 0x10}}]}}]}}]}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x74, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004090}, 0x24000081) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 5.110658583s ago: executing program 3 (id=686): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) (async) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async) 4.974285277s ago: executing program 3 (id=688): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket(0xa, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8ccf"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000458000/0x4000)=nil) 4.838577512s ago: executing program 4 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtfilter={0x68, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xa, 0x10}, {0x2, 0x4}, {0x6, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0xffffffffffffffff, 0x0, 0x6}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xd, 0x9, 0x7fff}}}]}]}]}}]}, 0x68}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x404c880) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.428566985s ago: executing program 0 (id=690): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000000)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa0, 0x8, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x7e, 0xddb, 0xffffffffffffffff, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x63, 0x2}}, @rdmsr={0x66, 0x18, {0x80d}}, @uexit={0x0, 0x18, 0xffffffffffffff05}, @set_irq_handler={0xc8, 0x20, {0x84, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x5}, @wr_crn={0x67, 0x20, {0x0, 0x4}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x22e, 0x9}}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x64, {0x3, "c744240029000000c744240205000000ff1c24ff866ff30000642e0f01c8c481f85b000fc7290f08b94c0300000f3267672e2e0f01c5c744240092000000c7442402f0af0000ff1c240f01c3"}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_load_code={0x12e, 0x60, {0x0, "66420f23d1f36c430f7f8700000000c74424002b010000c7442402ecfe8ef2ff2c240fc76dedf2420f08460f01f80f20e035000001000f22e066b875008ed0c422710db8e5000000"}}, @code={0xa, 0x69, {"2e0f2285c4039120e1690f1389d2000000b9800000c00f3235000800000f30f20f2d1eb9800000c00f3235000800000f3066baa00066b8020066ef66400f38807542440f20c03508000000440f22c02e42dd8c4193685963"}}, @rdmsr={0x66, 0x18, {0x276}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc0a, 0xf9, 0xfffffffffffffffd, 0xfffffffffffffff9}}, @cpuid={0x64, 0x18, {0xffff2d77, 0x10000}}, @in_dx={0x69, 0x20, {0xc8df, 0x5}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x6c, {0x0, "450f01c8b9410b00000f320f567115260f0d23b9920200000f320faeaef27f0000c744240000500000c744240272740000c7442406000000000f011c24c4427d229b5c000000c4e1bdf27ab3490fc71d09000000"}}, @cpuid={0x64, 0x18, {0x4, 0x3}}, @wrmsr={0x65, 0x20, {0x95a, 0xffff}}, @code={0xa, 0x53, {"66baa000ecde06f9400f2354262666410f3882a34ad20000660fc7b047000000b805000000b9008000000f01d90fc7ac610010000066b8f4008ec08f0878c0728709"}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x4f4}) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000540)={{r0}, "21344aff253cf4ada7a64ae771bff017e37234a74174a881687246cc90c18197b7a2532a20456243889659e143bdaeb6c09ea6bbed8069d6248751344f3c90f855e22c070c878c631755e44fd50c4274e01215256d7553753b989c1f6b766e28ce3723961d7aa995ea51d454a4a9bb6a92240c9d60d4e32d572cac53887ee0adf011eb421f377653f9156c4655586e1928a410fa3cdbaddbbc1563cc49e7d59e6d67d1dfcacde66fff9fee5fddfa30330037d83744ef09fb73499ce5f909bc21c07f4e0784655fd96769eda8818419640227de9fd444ace2889e9dfa624b38a8ee3f2e93330ad6be2835b9e9e3c2d5a87e4630d5cdc672b3901a745cfdef13e7ab4b4f8e0e3f91673ec30390122c4058bc89a46011bce0c51de595409ae4c9f6a1389a7139190716af465cea0bc705024296b9bac9ad11b5a6208360765f6eb5ca3f86927823dba054fdf0b65563240a099365c6ad7bc0a4eda1032d719b6ded5ee823c8239438f730b6c9fd608948b8a0a753c6a583fcae16a412d6621d387d25a818a07c55fce0591522f8da5ca874a9a5d7a4215a48d39377a2cf92605b13c7d2d85e6d4eac21a23aa157a0be5c49c0096ad23c74595facfed358e50b02870917c2cf972cbdc0cd055f1ea83e1f35f0ead47dbf73a232cefa2d7640a8de8fb97f6bcbaf70babf1c1ee8593a9537f12fa632da9436e3b0914056db35a8c35c5afe48a7a4a66cff565364b1a7af46a49d09549dd5618d6938140e35a11724f4f39b38ac2a25a1bd5fa50a4e0340ba955fe7a999d758df9e22a3e6590ba0d63f7dc9041e2f93022124aeecb19af1ee132944c3eff381ff549cde30e921dfc0463f53928b02a129684a378875ec61b2505f928f643ccc16a169768359bfe221ff5bf3d2740b08c685456f86569310d4f81bcc630521e62c2167aa4972346b55fd57d5ade32cadbe602878c678dcd4d43c26ddf746d3c1c3e7ba3f5a0dcd0fe62b81e49f884de50944b180537801a17595ac16b522a37b5915ec7959e89c89ec0f47dc2df4b535c69b483b4082ceafc20633c979a7a75d4b76d480ea32401033a4580085fca77ba5e250809f34d666dcc49432358d97aea1e048f3385dba63d10724eb10d803343af4d326bc8fb9ba7b261cd13b0df0d6072a5cfca06c9a3ce8a8d58e7adda4ae1707d3dc8dc91ce0495586ae9fd1e4a147933c980aeaa1add9995f78d3d12f84e83e17a06e431661387cd0e4b4a347e367464ee0772359b6575489f904c97d44e2c5e7c6618e21c4e4639514ad9b211cbd6ca5c8d0fdb502c69e38a15edb29fc87801f57619ed559765e90bc9b5a5fec52ac012ca6371349c1332449a51ada0cb8f49e833cbb9716c787d2d5ab450b49931fe8c356b5963a1e9b3dc4b73178a05bb32a0f71334445fd95b51e804e4ffd095913ea0ad2e32ac38ad80c27e7f5547fedb176d88bf09d5af4aec2d3c17101da52e024d8843fd8ede5db5702cdba556e6ee5a811e19cd998c1f2f969cf4ba56709ee019cfc38974934a6879deb7daa9524484555da01d12d184e07690f14875ea9482ab8c371df3da453ce56447751a09de6a049b29ae75276a3b316a833bcee215226d50f5a3a562b170890dec8e9a1c6ec582f7b63144cb73c3393db225de30569cd1f6c2ff704622d9a33dd2f243de21b927a6aefa316efe3fc91525d2950235e4f41827e95a0b5b122479efc88559ce48aa19399c69a21c6b4aee2e7f0ad216a21ddfc9db816227ba449b64ed2cfd98f6f19eac66a323967a1cad818a4c2c25d7481a69f9a42556b6201adfc0d5e31d2d962e6a7b866e967d052fba8b93b392c0b84a69ad7c8dcd94d4b20a77b458cd2339cda25b56e9afc907aa648146a5ae83e90ae6b88e9df9e1fed1e051241af442f846bacfa9d7dfd202f4449c8216aa5337795ea34768519d404108aba69af29e75f8e294da4d2d7885cedf21831e9901efe04156bef7761b38c1add6db1c2480fb68ecad56172fd531681b5d013fdc28cc4c9b74cbc2146b710378a3a65b7e1f6973b4d784c8a10cc6b187f76b7797a267c1b17c83d7568b6cdc1d7466768c4cd9258e4b611709a66c68e8163cfa37d5cadfb49f11a231bca7e2b26c9b695e7ccaffec1821bac3729406ad20c3e75a1606ccfed8c096bdbc67df3d59f25e11abf12570015f8d31107bc619a4eb95f5e7811763069eb8a330deb2d0761addabc69c61bbc625e9ab18493576a3a9b2e4f29e932144351ac5eb3c2f247a3c794695972d5f3691e9efd1f6e3c1c0e6b549a4f0267956f84768925072598c8b6d3e17dbe683344292448ec967512650c4ad3026b9f6717337f29d956164360871791a2009adead2de170cb83d8c045779fc3e50bee26130a07fa9a3f932c4bf45c421867c59be5640b28b0c624bfe9e4ade19aba091b8a1ca0596711e26920149d1ac4d817036a3fe0287f5f007ec567ba8e99ddec933be229792b458e782229bcfcadd7100f96a95757aea6a1890acf1f620738dff6c5e449466b066f8f10ee59071bca5b72037bec676d19db1c26c283315c4291eca0cbaaf658a5b9eaefeb9ee9000bab3dcb8ab23fe1efd21eb48218fb996564d4d285d93ffa3ae12939132b9e6914b09d477db94d288cda9709662508ebff126f36be8a01ffcc6a4a7a403d2efd36a920fb59ec46db20b0dfd401e3de6523593ffb200272940c3df157f1de7e70dc9154d6b12f10a37f9e2badbb6f5622516b23c88dcb015eea89ea02f5bccf4750b8e8c49008282adf885c4eb59a8fbaae51fa126b7de02cc050de28980d944029e457bf5cf329b65403fb9b09a5bc19c9ed82f2e1a194b5993d6e2f88b0c94428a7c2f4addf7c8fadfa5f8c20ec49c1768f5dccb7f00e67e631dbeec1b116fa4386574350f516b18386e6468a69808436e224b078e3a3342ef021848e8751c3b42648fe116510bce7271cb99369fa97fb549c58efa57dbe0d169cd4496ae4ab9826e6f07ebd037f650dee68aeb58b0a38023ca6b2597fcb1c6279bceb81e41b42ff27670acf91be6166b904da9fb6407367120c868cf9310827118daebe4ca581e0bb9e96d28606ec76788d86410868a2f1d5a68210e3d396c741f24225c9c9f745d542678bea709a069856578f0bd1afe6276d3b1a2d2f4f7850132196184d22e1962436b46976a2d2b6ea736c1000e091fb8a3f86cd7fcd976483b39b47bdb4a89bafd4526c188d5982e6cf4b95d5324fbbccfca87abb23d94554e86305b0871274c1d8dfa0d48ca51abf9ca24bd1035e1074e3aa5c2794eda6fae4a52e589b3a4c6391a1620235adb6893e1d202fb048622a278b90554b604a46768f16d1a80bea46af4654235f96206bf4ac711d8b8eeccb39c52809eff41edcc2b6d05566ab05b89319c799a638883c401cdd26ad2fa0f312002837774b56a4a2c49fc1ecb1329cbec66de90426dc93a5aa58b20a55b34178d5ccc1e815b08bb824ab1d184039525fd0386fad2dd0a8174b11c8db667b93cc688bb6dae581d894868c427ad0e1815981f54ddf2e4d52f600fc3ca761dcb726a94876b3932aa8c9f2dced923567adba4f294d1df8451ff309bd9829d771287bd6b056a1775c77a29e93e58d1b134cd424d25a448028fbee781db3028124e03fb80c61256bceb3cd30e374b55a1e6d680c61b12b9089b09fa1bef8451d2d2e042657fc3fa4dc3e39076149d7733c0f0aa41a3e4faaec6a33bf508c6105d7a236bdad3b543a85e21c0aa7b4a4e3d23dc14f77ab8fd53ba846423a07388a5c7e9b364ef689c7bc17c392e0924df62eb15922bc105f9405e90d9c5b9b15880921423b847b00a0fb26fe8a56f0d9f04632fe7b5432ced67e5f41432ee41f54e6ebacdf9c55d227e9bc29fc6753c803ce85635e26ec1d93e95c784ac600a98ddc680d53b3fe75f0bbfc1143a67d1c62ff7289adaf34ed2b20b0e9d25a7fde67dbeabd9d23bf145feb8745bcd2b4defe1ad8b465464b5d39cdb307ae7043cbb5894e66025422d395934a9206c53f9499a65a94a82eae34db56421fde31c405b1e55df3358c2e498f143c4be75e72a0e1cd0280703ee456c28aac8acedc9498934039b885603e1795fed4ce386fd79ed6c7af82d6913ae16ffa218567dcab13b557b5e81d760b9836d0204d749bd64184eded20fe3984a34050fa34e4c191daaf20563cea780870a9db7b79236e04a600ceb867975fe311210befd370a8e17fc6bc7ff726844427ecb241151199958f240d79057378428d5a642ad90722158368f7e0868b959e3773388b20170bb2b1db2a9b2e7b3cb724528461a769f6b0d3d0a47848566e974a9db7d9d495ef72bf17ba3abaf60dd1ede50802d35685ae1b5a91e7413f1c2130df12613993f0ea14ad36e3d05c50335020e78a4a8e436ca17150cc04dc1fe2425e831f34fccbc4f96d5e9fad1d83a9278eaf07450980874a110a48d830c7df5cb23a2d4b1eb46ab0acdf145e8adfa5be4090ed4cebeb7259c2b606688e37b7a5b022c85269dc91063122c0c249cfa19c21e66fc10c6ce0f46eb3f11377fa7828807e8a02962e990417bf2bfa5728c8b25c140e3ac9b0cf097ea3057615d3b41e970327fa7a244cc551047dcf6ed2141a6294f8845019d11feba3a9b05469020a4a7228bcb99a700bb21a5003429cf5323c5c45287cb3213bbafd6cd7b3f63c571f7882ebfd59d0a01902a2f39d893c6dc9fdf81d03790fc7a603661a564bdff9d7a131fe3aaa4db1eadff445672b39b5193b8aacff949a77f0164336845ac5240c1df9cef00c5fcfa1e4da79b3110c0e630f6df28e7ba92bd4571c3dd0dd97091216f4c418be5e8564eabead1f7c24182a6541dbbb61801f3afb4617b2adb23a528a23f4122b800bff1d4aaf973d6b93fbf242a6842de243eb8f16f54e771831b05e3256207e0dc2c1713362515c513bb32c0858df2bc62c455178b05b96405db131e247aaa14ea5d02e25db074fb42319b9888ed62638011c07ec9b457a6b4aea83e26d1f275b560dd9c3a7e9d90c425b45a70c7e4b75202c08573b7b4a0c9e0db7d56996805a220a7364043696085e620f4cf394dfd9965d99f9c978e1b028200a130ab6980833d42009da9399d93a5d017b39214f2eb6a8ca6680db0563aceea55ca2b7b24576a18c44bf733b7e18a96dc462c4a0e03073192c31e74b5baac53ce402e2013bc1e60f12124ba2ca7d1114ea4b49c6d9b8164b2bfeca41ac042b8c9ed5cba6752d551dcba267e6fdd322dcd5b1377fcdf25ccc2126ce7980ca171b263e7148264fa28b3d3379f89ea7e1b8a43bd7a7c81ecc0a49642930b90375e077270d49db730c5aaf0390005480ee9e7ece331cfb115bd796b413bff56446e10bf16b682c6a24dcca356ae7168d315945eed9001bca09feec3ba262028dc0e5473d3b17508ce05703ae6343fd69b31cf29f19668ad8c50fe97ad8ebb49f618909c718e1a42b9bda68689b8cfb13bd198e632488b8f4d77ed15e4395a323ac85be34d3925be0d1f9cda81cd038a00933ced956d8ee00730e63f7b5b0939e912b59c2bc9541fa32160ccaba24b924a7be59e77bf1c9e2c54d29695e2b9ba21f431325f59778c3980b91932a03f7c540b6389e69651e6643995350fd2d0b09f01baac5be974f6ed73745d538db88e3d9840db5b91b73faa7bec90e111001b0bed67cbcf9352d2d098bb869e04e49e368b7bb33888d68156e537162b0433ba70b119290fab427fb2fa6862df17e52f05788888f1e"}) r1 = open(&(0x7f0000001540)='./file0\x00', 0x20000, 0x102) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x100, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f0000001d00)={&(0x7f0000001700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001780)=""/142, 0x8e}, {&(0x7f0000001840)=""/108, 0x6c}, {&(0x7f00000018c0)=""/176, 0xb0}, {&(0x7f0000001980)=""/156, 0x9c}, {&(0x7f0000001a40)=""/81, 0x51}, {&(0x7f0000001ac0)=""/192, 0xc0}, {&(0x7f0000001b80)=""/88, 0x58}], 0x7, &(0x7f0000001c80)=""/69, 0x45}, 0x2000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000001d80)={0x6, 0x28, '\x00', 0x1, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x61}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x240400d0}, 0x20000010) shutdown(r5, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000001ec0)={0x0, 0x6, 0x9, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000022c0)={r6, "5d6f80b6a437cf47c1c779fc947b11a7"}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003300), r1) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000003540)={&(0x7f00000032c0), 0xc, &(0x7f0000003500)={&(0x7f0000003340)={0x190, r7, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf69e}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ea}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003600)={'sit0\x00', &(0x7f0000003580)={'gretap0\x00', 0x0, 0x1, 0x8016, 0x5, 0x1000, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x68, 0x0, 0x5, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@ssrr={0x89, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_prespec={0x44, 0x2c, 0x32, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x2}, {@broadcast, 0x6}, {@multicast1, 0x7}, {@remote, 0xa05}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000036c0)={'syztnl2\x00', &(0x7f0000003640)={'ip6tnl0\x00', r8, 0x2f, 0x0, 0x4, 0xfffffff3, 0x6, @dev={0xfe, 0x80, '\x00', 0x36}, @local, 0x10, 0x8, 0x6}}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x19) write$P9_RWSTAT(r1, &(0x7f0000003700)={0x7, 0x7f, 0x2}, 0x7) syz_io_uring_setup(0x19ad, &(0x7f0000003740)={0x0, 0x4c92, 0x800, 0x3, 0x34, 0x0, r1}, &(0x7f00000037c0), &(0x7f0000003800)) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003880), r1) getsockname$packet(r5, &(0x7f00000038c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003900)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000003c00)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003940)={0x24c, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003c40), 0x80080, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000003c80)=0x0) fcntl$setownex(r12, 0xf, &(0x7f0000003cc0)={0x1, r13}) sendmsg$DCCPDIAG_GETSOCK(r12, &(0x7f0000004240)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004200)={&(0x7f0000003d40)={0x4bc, 0x13, 0x20, 0x70bd2d, 0x25dfdbfd, {0x6, 0x2, 0xff, 0x6, {0x4e23, 0x4e21, [0xf6d, 0x43a, 0x6, 0xc1], [0x3, 0x7d08, 0x2, 0xe54a], 0x0, [0x1000, 0x1f3]}, 0x0, 0x9e22}, [@INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "88c7856e3006ec9501592fb2b2b2c690c03a6ef1c94e5382a426214d116e6c5f6dd6e8dbcf2707bca1988c3766f65f2c82fda54c529eb73b606ec2d6bc3fa0f9cc0931d63846dd"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "28dbaafeaced80a03c02d46ec62f8a370b74c6a0a480ca814abecec2dc3b5319e5a99560f05515cd971c5a9cd44b70c287964e158fc43011f28d0c5ddcafdd8c2b8f62edf7d069b7151ab997167f4730859697cafa59dd5087bf57cabedf5522c9a8cf1824f7349bb0c7f180ad38201358b3a81895a391af20aab485adee2fd42db39fd374fb45d3dce37534d8054eb5a1e88c7d6836ea162fe66ea131d2347201e4a7acbfbcbe78f8edff9a10bd74b8093fa692c99d3a6c0dc2f4b57494701033863cd25c515147dcc63cdeceab1988bef99cca4aa0d68da85dc5f6bd"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "763da59f53780c8bf81d3cb0a206354ce2b2f62698034c10e5"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "fe04451968f8fe6651bebfd905ab4021ef8bec14c8c3b6e5ffe5dacf2d56d84fb758c4260f584d39e814228e096e1d773c2c5c04392b457fe27adcac55d4921933a1b25bc294ce1097bb98a423d586540c27a5fc9ec9204d607fb4c65072ad8cda7c19478ea0a53008602b62e99d768acb36aad7757a51b34567ceee5911e942"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "3a3291cd613d0847e69996d17223964cfd79d1f68f0f6c9a44e3fb3fca88c0ac56478d"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "aab24d2b2da8bfcbb59a0c407b6431a5e9c2e0"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "2232517d0615ae1e614b345ab156ebea0138298e872b68e5afbc7b3e893b06d713ddac9efa6f2667743429ea3976bc00d611272acf0b2741d6f6967085479e1e8b2d959f2dd9d60809c589b44a6fe59467abee728bb771d0e129f9dede17173889250627e09bc237bc8e41a0f5365f0ada81a05a"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "d1a856d7e281e0503db36895758be63dd388940871fa5b7dd631814cb13052b814269ddbccf5bb26af3efe5ce7732d7ffce3c8d95e73f3e59c7f"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "8bbfa40d97ab4f19b23fb1e0a8385706bec8c464b1478f6e7d3ec933d648868da1dcdbab67b611e775d740f231dcaef598a8d9476bae124ca8231bc184e2c3d64560c95987bc364845608ebde54d02578404e9fdbda6f9d020805233c94ef1d6477a2e8d3a601ed93d77432813f46318f26654b922757844b0e110fc53cd1333f1e7623264bb9ae7cf9be3d94bcdd49f93d0dc920a92d300c106af606013db6517dafc26352273365607fa4ab10e9b2ccad06b8774dc2f47413b86c8"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "f46e43ea02f8bd51fcfb351b2cac30f7415a23f366c581fe902915748f2c563b81926ec3b81a57dbddc26da1bb3ecddde953c0cbdb95f6dc95d6ab9fccf1a50c3b161247881573a5ed9946833847c0c4eaea8c79252cc6081443fadbda0a62805c937549022812a0144f87e3702c8a40a6fcf8c835c5aec54aed7e0c59c83c27487e78740e3eae91c0924c50196dadbada1a0ccd2405379e7278ff5c479a0af627242f4f735a0d28c838cc5f1f64f9ddc72b060b56aee8aa12880c0e332ea1b312ab01af3e473da9bd23a7061a3e609aa72ee8ffc8da6233cd88c20dae46da6f"}]}, 0x4bc}}, 0x0) ioctl$BLKDISCARDZEROES(r12, 0x127c, &(0x7f0000004280)) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000004340)={'\x00', 0x5, 0x200, 0xfa, 0x0, 0xff, 0xa000, 0x10000}) 4.374841164s ago: executing program 4 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x7, 0x4000000080000e52, 0x1, 0x1, 0x1043, 0x200000000006, 0x2, 0x5, 0x1, 0x100000000, 0x800000000000001, 0x40000000008, 0x8000000000005, 0x800040066], 0x0, 0x40110}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) sendto$packet(r8, 0x0, 0x4c, 0x5800, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 3.060390476s ago: executing program 0 (id=692): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x218, 0x218, 0xf8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2c}, 0xff000000, 0xffffffff, 'macsec0\x00', 'team_slave_0\x00', {0x1fe}, {0xff}, 0x6c, 0x1, 0x19}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x100, 0x4, [0x39, 0x2b, 0x1f, 0x6, 0x16, 0x9, 0x17, 0x23, 0x3d, 0x26, 0x30, 0x35, 0x4, 0x34, 0x4, 0xb], 0x2, 0x980, 0x8001}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x6}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 0x1ff, 0x4, [0x28, 0x2c, 0x25, 0x3f, 0x8, 0x38, 0x10, 0x3a, 0x38, 0x1b, 0x6, 0x1, 0xe, 0xd, 0x12, 0x29], 0x0, 0x7, 0x8}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x1, 0x1, 0x1, 0x1, 0x4], 0x5, 0x6}, {0x3, [0x2, 0x0, 0x5, 0x1, 0x0, 0x1], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf2509000000050007001e000000050008000e00000008000300", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x14) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0xc808) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r7, 0x0, r7) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2.823305577s ago: executing program 4 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110020", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u']) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) 2.608000413s ago: executing program 1 (id=694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100004808000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003"], 0xf0}}, 0x0) 1.97889392s ago: executing program 2 (id=695): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000002200)={0x50, r4, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbf4, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffb, 0x0, 0x28, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x2, 0x5, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000400)={r9, 0x5, &(0x7f0000000340)=[0xbfc, 0x4, 0x802, 0x1, 0x27e8], &(0x7f0000000380)=[0x0, 0xc000, 0x7fff], &(0x7f00000003c0)=[0x3, 0xc5]}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 1.754737651s ago: executing program 4 (id=696): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 10) 1.691512718s ago: executing program 1 (id=697): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x10000, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9cca, 0x2000007}) sched_setscheduler(r2, 0x7, &(0x7f0000000100)=0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000304000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a", @ANYRES32], 0x3c}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2, 0x9, 0x6a, 0x8001, 0x50, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x80, 0x7, 0x1, 0xffffffff}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x29, 0x40, 0xf8, 0x3b9b, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x1, 0x8, 0xad}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf250b0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000780001801400020064766d72703100000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300997f0886140002007465616d30000000000000000000000008000300497efdf2080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="14000200776731000000000000000000000000005c00018008000100", @ANYRES32=r8, @ANYBLOB="08000300010000001400020069703665727370616e30000000000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=r9, @ANYBLOB="08000300000000000800030002000000080003000200000054000180140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e00000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030002000000080003000100000008000300000000002400018008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="4a000611", @ANYRES32=r13, @ANYBLOB="4400018008000100", @ANYRES32=r14, @ANYBLOB="14000200626f6e645f736c6176655f3100000000140002006772653000000000000000000000000008000300030000000800030001000000"], 0x1b8}, 0x1, 0x0, 0x0, 0x48080}, 0x10) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000}) r15 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) listen(r15, 0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000}) 1.626681176s ago: executing program 2 (id=698): msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/30) r0 = msgget(0x1, 0x700) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/90) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = getgid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002140)={'\x00', 0x0, 0xffffffb6, 0x6, 0x4, 0xf3a5, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000021c0)={0x0}, &(0x7f0000002200)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002240)={{0x3, r2, 0xee01, r5, r7, 0x109, 0xd6f}, 0x0, 0x0, 0x4, 0x81, 0x5, 0x4, 0x7, 0xfff, 0x2, 0x0, r8, r9}) r10 = msgget(0x2, 0x10) msgsnd(r10, &(0x7f00000022c0)={0x2, "9c67a1a6d43b88e30d07dd34016df85971a3c826f304"}, 0x1e, 0x800) tkill(r6, 0x8) r11 = socket$inet6(0xa, 0x4, 0xff) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r11, 0x80089419, &(0x7f0000002300)) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x13) poll(&(0x7f0000002340)=[{r1, 0x200}], 0x1, 0xfff) r12 = syz_open_procfs$namespace(r9, &(0x7f0000002380)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r12, 0xb702, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000023c0)={0x85900000, 0xd4, "e1de917be7ce78c856c112f4688f72992878b4c5585461834ea9342085cd6b7904ea1b41311f9ecba8c84ddacbc5618b4c284b8c4c160c6d8a85e0db2b5ab1709a08db12b452161ee751c3cdb1c78cb4fd40e04811686ddbb0a7a5527b7899370aa3529d138cc5b0f7433b7b04fc5c36fc0bc71cd5588259eb20987f85f413188f0d16f312ec2f0d243fc3b81671940da19379402d72afd8338c2ab209fbe7fb4f14564faa4f029bd8decfc6e56751174bac546cde7e372da5bf192488d4e8821aace482db1dea07010fc46ada284b8b79db9f5b"}) getsockname$packet(r1, &(0x7f0000002500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002540)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000002640)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)=@newchain={0x5c, 0x64, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xfff2, 0xe}, {0x2, 0xfff2}, {0x0, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xadd2}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0xa, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0xc7, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) write$FUSE_ATTR(r1, &(0x7f0000002680)={0x78, 0x0, r4, {0x8, 0x3, 0x0, {0x0, 0x1, 0xfffffffffffffff9, 0x7fffffff, 0x10, 0x2, 0x4, 0x5, 0x1, 0xc000, 0x2, r2, r3, 0x9}}}, 0x78) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000002700)="58781cb54642f27a5166bcdc9d2d5b0f875bffb7f2cf6b7c8337e6045a500d86c440a99c3cd9b3742d53ef066f917544622e63b29a847a2d456a367a3f44001ca654fd059f2361296c93fbe0fc2b009f60bdb913dc12ad348de9b38f57f43fcce8943bb8dad96312420ef29a2948d3bc98b2805455ef5ba6b09fa92d095f30d76da4e89b2cd9f39166de1a162bf7aee87c281f54062a6a3a136af0a447a90d1fec1849089177725198485db21d7bb8b3f963c304fc59e5751a029f96e8b4aeb863ff6f5e9082caaa3b0178a9748cbfdfc283d73bdc671abf6f7ad0efbe296627e5ed", 0xe2) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000002800)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000002840)={r14}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000002880)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000028c0)=0xff) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x7) ioctl$EXT4_IOC_SETFSUUID(r11, 0x4008662c, &(0x7f0000002900)={0x0, 0x0, "0f81408a70753b1a7906bcb9ac980db6"}) 1.323614016s ago: executing program 4 (id=699): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150004000200142603600e12080005007a010401a800160020000340ffc60000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbacefc46fa8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d164edbb57a5025ccca9e00360db79826353d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0xfffffffffffffffc, 0x20000000, 0x2801e, 0x0, 0x1, {0x1, r1}}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x9, 0x6, 0x0, 0xff}, 0x10) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) 1.294880216s ago: executing program 3 (id=700): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) setreuid(r0, r0) 1.118384632s ago: executing program 1 (id=701): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2000, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000092acf75f1cc50132000000000000000000000000002400000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000915478b694a07cabcac3d53d389683ef375d62f4555c7cf5477ea70488a10d263c3af8a017ccdd7b87b8cf65608368dbad744cef81f0d2aa40acade29070ccfee1b2efed20bfcce222502acd81ad69fc61332878a710e7895bb32b639e6568e221d3f5ea48a93774020ee2185203ec966963be11507c2019bece554a00"/154, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240), 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) accept4(r0, 0x0, 0x0, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) prlimit64(r1, 0xd, &(0x7f0000000140)={0x4, 0x9}, 0x0) (async) getpid() 1.095630771s ago: executing program 3 (id=702): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x24008011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'caif0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@local, 0x78, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x8936, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.063349839s ago: executing program 1 (id=703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x424, 0x5a, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8007, 0x180, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r7, &(0x7f0000000780)=[{{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x1, 0x40012100, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46", 0x40, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xa9d, 0x3, @mcast1}, 0x1c) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000b586105700000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$netlink(0x10, 0x3, 0x10) 854.276448ms ago: executing program 4 (id=704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x62af, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xfdfffffffffffffe}], 0x0, 0x7}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, 0x0) capget(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x3, 0x8, 0xb, 0x8, 0x8, 0x293}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00", @ANYBLOB="266b300c659ca2c0a870054410e8af0d8b9a70b5f5af8cdede38f094286975c8a90dac9f18bd6765b297fcd1190d90dde356bfbd5add4b10ccfb7da3875f"], 0x48}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000380)="05c3f846a909eb2b91a7e3f19e5d8b8eaf137c9781309b8d64784ec9236f926d7dcd7ad16f54e80de8d5b824ceb820e761a24813974665f18b024ff8349064254aa42dbd3f2066973b25105f70", 0x4d) 29.907686ms ago: executing program 3 (id=705): r0 = socket$rds(0x15, 0x5, 0x0) creat(0x0, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="06", 0x1, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r7, 0x0) keyctl$negate(0xd, r3, 0x8000000000000000, r7) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000740)={{0x8, 0x10}, 0x60}, 0x10) 0s ago: executing program 2 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811003f", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u']) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) kernel console output (not intermixed with test programs): tooth: hci4: command 0x0c1a tx timeout [ 100.592193][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.835207][ T30] audit: type=1400 audit(1765535262.765:296): avc: denied { write } for pid=6773 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.715245][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.786430][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.786441][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.945265][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.128747][ T6807] tmpfs: Unknown parameter 'usrquotauencer' [ 102.136175][ T6807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.273'. [ 102.201572][ T30] audit: type=1400 audit(1765535264.185:297): avc: denied { read } for pid=6805 comm="syz.1.273" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 102.584819][ T30] audit: type=1400 audit(1765535264.195:298): avc: denied { open } for pid=6805 comm="syz.1.273" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 102.665231][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.847022][ T5920] usb 4-1: string descriptor 0 read error: -71 [ 102.868561][ T5920] usb 4-1: USB disconnect, device number 4 [ 102.890372][ T30] audit: type=1400 audit(1765535264.515:299): avc: denied { read } for pid=6809 comm="syz.2.274" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 103.031282][ T30] audit: type=1400 audit(1765535264.515:300): avc: denied { open } for pid=6809 comm="syz.2.274" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 103.178507][ T30] audit: type=1400 audit(1765535264.715:301): avc: denied { ioctl } for pid=6809 comm="syz.2.274" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 103.213629][ T30] audit: type=1400 audit(1765535264.875:302): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 103.235789][ T30] audit: type=1400 audit(1765535265.065:303): avc: denied { map } for pid=6819 comm="syz.3.277" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.265653][ T5921] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 103.463665][ T5921] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 103.486872][ T5921] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.500206][ T5921] usb 5-1: config 1 has no interface number 1 [ 103.510784][ T5921] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 103.553810][ T5921] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 103.588710][ T89] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.608968][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.619742][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.638323][ T5921] usb 5-1: Product: syz [ 103.645747][ T5921] usb 5-1: Manufacturer: syz [ 103.654877][ T5921] usb 5-1: SerialNumber: syz [ 103.760356][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.279'. [ 103.783173][ T89] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.792637][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.865384][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.865383][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.920375][ T5921] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.963740][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.978174][ T5921] usb 5-1: USB disconnect, device number 9 [ 104.025857][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.052695][ T89] usb 3-1: Product: syz [ 104.068370][ T89] usb 3-1: Manufacturer: syz [ 104.092718][ T89] usb 3-1: SerialNumber: syz [ 104.149204][ T89] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 104.178289][ T6115] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.514183][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 105.515459][ T89] usb 3-1: USB disconnect, device number 7 [ 105.545232][ T6115] usb 3-1: Service connection timeout for: 256 [ 105.551497][ T6115] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 105.561584][ T6115] ath9k_htc: Failed to initialize the device [ 105.568625][ T89] usb 3-1: ath9k_htc: USB layer deinitialized [ 106.145290][ T5947] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.427572][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 106.437139][ T5947] usb 5-1: config 1 interface 0 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 16 [ 106.447236][ T5947] usb 5-1: config 1 interface 0 has no altsetting 0 [ 106.449682][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 106.449693][ T30] audit: type=1400 audit(1765535268.505:311): avc: denied { watch watch_reads } for pid=6875 comm="syz.2.290" path="/66" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 106.455959][ T5947] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 106.513743][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.522558][ T5947] usb 5-1: Product: Ðœ [ 106.526682][ T5947] usb 5-1: Manufacturer: ÐŒ [ 106.531750][ T5947] usb 5-1: SerialNumber: ìºì¾Ÿï¶ƒîœ¾å•ˆìµƒâ’ꂸ滄䘓í¼ê´¼æ²¡áž¬ëœ¦à¾¤í•’ॠ츫픘娜눒펉뮦㔆꾚苜â¨=ᤀ [ 106.547650][ T6872] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.686182][ T30] audit: type=1400 audit(1765535268.735:312): avc: denied { connect } for pid=6882 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.776170][ T5947] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 11 proto 1 vid 0x04B8 pid 0x0202 [ 106.796370][ T5947] usb 5-1: USB disconnect, device number 10 [ 107.041055][ T5947] usblp0: removed [ 107.275363][ T5820] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 107.508052][ T5820] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 107.519918][ T5820] usb 4-1: config 0 has no interface number 0 [ 107.526342][ T5820] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.540859][ T5820] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 107.541725][ T30] audit: type=1400 audit(1765535269.595:313): avc: denied { relabelfrom } for pid=6901 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 107.551650][ T5820] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 107.573672][ T30] audit: type=1400 audit(1765535269.625:314): avc: denied { relabelto } for pid=6901 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 107.691094][ T5820] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 107.702656][ T5820] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 107.713829][ T5820] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.730756][ T5820] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 107.790820][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.806410][ T6907] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 107.821258][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.829816][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.017116][ T5820] usb 4-1: config 0 descriptor?? [ 108.106572][ T6889] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.126408][ T6889] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.344782][ T30] audit: type=1400 audit(1765535270.345:315): avc: denied { setopt } for pid=6901 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.416091][ T5820] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 108.632593][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 108.784033][ T30] audit: type=1400 audit(1765535270.555:316): avc: denied { name_bind } for pid=6882 comm="syz.3.292" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 108.910244][ T10] usb 5-1: config 8 interface 0 has no altsetting 0 [ 108.931171][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc [ 108.967192][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.615359][ T5880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.785657][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 109.793251][ T5880] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 109.814098][ T5880] usb 2-1: config 0 has no interface number 0 [ 109.836861][ T5880] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 109.847217][ T10] usb 5-1: string descriptor 0 read error: -71 [ 109.880918][ T10] pwc: Logitech QuickCam detected (reserved ID). [ 109.888582][ T5880] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 109.901930][ T10] pwc: Failed to set LED on/off time (-71) [ 109.911510][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.921475][ T10] pwc: send_video_command error -71 [ 109.935177][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 109.942675][ T5880] usb 2-1: Product: syz [ 109.947173][ T5880] usb 2-1: Manufacturer: syz [ 109.951766][ T5880] usb 2-1: SerialNumber: syz [ 109.958028][ T10] Philips webcam 5-1:8.0: probe with driver Philips webcam failed with error -71 [ 109.971296][ T5880] usb 2-1: config 0 descriptor?? [ 109.980106][ T10] usb 5-1: USB disconnect, device number 11 [ 109.991830][ T6923] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 110.184333][ T5921] usb 4-1: USB disconnect, device number 5 [ 110.197679][ T5921] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 110.219446][ T6923] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 110.320293][ T6931] loop2: detected capacity change from 0 to 7 [ 110.338311][ T6931] Dev loop2: unable to read RDB block 7 [ 110.360536][ T6931] loop2: AHDI p1 p2 p3 [ 110.385068][ T6931] loop2: partition table partially beyond EOD, truncated [ 110.392449][ T30] audit: type=1400 audit(1765535272.445:317): avc: denied { setopt } for pid=6927 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.422878][ T30] audit: type=1400 audit(1765535272.465:318): avc: denied { write } for pid=6925 comm="syz.2.305" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 110.457689][ T5880] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 110.475362][ T6931] loop2: p1 start 1601398130 is beyond EOD, truncated [ 110.494390][ T5880] asix 2-1:0.188: probe with driver asix failed with error -61 [ 110.521403][ T6931] loop2: p2 start 1702059890 is beyond EOD, truncated [ 110.574258][ T6937] comedi comedi1: bad chanlist[0]=0x01000008 chan=8 range length=1 [ 110.758862][ T30] audit: type=1400 audit(1765535272.815:319): avc: denied { write } for pid=6939 comm="syz.0.309" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.782088][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 110.792054][ T30] audit: type=1400 audit(1765535272.815:320): avc: denied { open } for pid=6939 comm="syz.0.309" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.095018][ T6950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.315'. [ 111.192203][ T6962] Zero length message leads to an empty skb [ 111.676389][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 111.676405][ T30] audit: type=1400 audit(1765535273.645:322): avc: denied { getopt } for pid=6965 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.766043][ T6971] block nbd0: Unsupported socket: should be TCP or UNIX. [ 111.803241][ T6973] comedi comedi1: bad chanlist[0]=0x0300000c chan=12 range length=1 [ 111.889880][ T6980] QAT: Device 128 not found [ 112.029220][ T30] audit: type=1400 audit(1765535274.085:323): avc: denied { block_suspend } for pid=6987 comm="syz.3.325" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.157123][ T30] audit: type=1400 audit(1765535274.215:324): avc: denied { execute } for pid=6977 comm="syz.4.321" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.375252][ T5921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.453963][ T10] usb 2-1: USB disconnect, device number 3 [ 112.495428][ T5820] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.605249][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 112.613357][ T5921] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 112.622426][ T5921] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 112.630515][ T5921] usb 1-1: Product: syz [ 112.634673][ T5921] usb 1-1: Manufacturer: syz [ 112.642467][ T5921] usb 1-1: SerialNumber: syz [ 112.670549][ T5921] usb 1-1: config 0 descriptor?? [ 112.807292][ T5921] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 112.856101][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.008712][ T5921] gspca_zc3xx: reg_w_i err -71 [ 113.016678][ T30] audit: type=1400 audit(1765535275.065:325): avc: denied { create } for pid=6992 comm="syz.0.326" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.043194][ T5921] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 113.045232][ T5820] usb 4-1: device descriptor read/64, error -71 [ 113.057532][ T5921] usb 1-1: USB disconnect, device number 4 [ 113.116002][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 113.122246][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.132448][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.143367][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.154416][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.164348][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.177360][ T6024] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.186300][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.195510][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.203501][ T24] usb 3-1: Manufacturer: syz [ 113.209645][ T24] usb 3-1: config 0 descriptor?? [ 113.296099][ T5820] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.388678][ T6024] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.399805][ T6024] usb 5-1: config 0 interface 0 has no altsetting 0 [ 113.406859][ T6024] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 113.415978][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.426582][ T6024] usb 5-1: config 0 descriptor?? [ 113.426614][ T5820] usb 4-1: device descriptor read/64, error -71 [ 113.485252][ T24] rc_core: IR keymap rc-hauppauge not found [ 113.491398][ T24] Registered IR keymap rc-empty [ 113.498299][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.525279][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.550247][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 113.565539][ T5820] usb usb4-port1: attempt power cycle [ 113.566648][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 113.584813][ T30] audit: type=1400 audit(1765535275.645:326): avc: denied { unlink } for pid=5807 comm="syz-executor" name="file0" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.616441][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.624858][ T30] audit: type=1400 audit(1765535275.675:327): avc: denied { create } for pid=6999 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 113.645275][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.663579][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.666015][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.705606][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.735308][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.745898][ T7020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.757758][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.764908][ T30] audit: type=1400 audit(1765535275.815:328): avc: denied { bind } for pid=7019 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.805321][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.825461][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 113.841372][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.849994][ T10] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 113.857658][ T6024] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 113.866875][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.872705][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.876898][ T6024] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 113.889145][ T10] usb 2-1: Product: syz [ 113.889619][ T6024] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 113.893645][ T10] usb 2-1: Manufacturer: syz [ 113.907843][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.919294][ T6024] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 113.926725][ T6024] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 113.933920][ T6024] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 113.942919][ T24] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 113.951963][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 113.960872][ T6024] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 113.972688][ T5820] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.992852][ T10] usb 2-1: SerialNumber: syz [ 113.993001][ T6024] logitech 0003:046D:C626.0005: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.4-1/input0 [ 114.009350][ T5820] usb 4-1: device descriptor read/8, error -71 [ 114.016417][ T24] usb 3-1: USB disconnect, device number 8 [ 114.057517][ T7006] netlink: 288 bytes leftover after parsing attributes in process `syz.4.330'. [ 114.094870][ T30] audit: type=1400 audit(1765535276.115:329): avc: denied { connect } for pid=7005 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.176923][ T5880] usb 5-1: USB disconnect, device number 12 [ 114.260740][ T10] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 114.290431][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.309974][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 114.319963][ T5820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 114.335628][ T10] usb 2-1: media controller created [ 114.357418][ T5820] usb 4-1: device descriptor read/8, error -71 [ 114.385863][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.397172][ T30] audit: type=1400 audit(1765535276.455:330): avc: denied { sqpoll } for pid=7036 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 114.440289][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 114.465702][ T5820] usb usb4-port1: unable to enumerate USB device [ 114.489026][ T10] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 114.525270][ T10] usb 2-1: USB disconnect, device number 4 [ 114.857349][ T7047] netlink: 'syz.1.340': attribute type 12 has an invalid length. [ 114.955355][ T5893] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.394177][ T30] audit: type=1400 audit(1765535277.445:331): avc: denied { append } for pid=7064 comm="syz.1.346" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 115.615299][ T5893] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.625601][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.643472][ T5893] usb 1-1: Product: syz [ 115.666165][ T5893] usb 1-1: Manufacturer: syz [ 115.675050][ T5893] usb 1-1: SerialNumber: syz [ 115.675972][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 115.746154][ T5893] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 115.848356][ T5820] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.859415][ T24] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 115.917137][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.005439][ T24] usb 4-1: Product: syz [ 116.009635][ T24] usb 4-1: Manufacturer: syz [ 116.014241][ T24] usb 4-1: SerialNumber: syz [ 116.086428][ T24] usb 4-1: config 0 descriptor?? [ 116.156213][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 116.905310][ T5820] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 116.918233][ T5820] ath9k_htc: Failed to initialize the device [ 116.967986][ T5820] usb 1-1: ath9k_htc: USB layer deinitialized [ 116.986208][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 116.986222][ T30] audit: type=1400 audit(1765535279.045:333): avc: denied { mount } for pid=7060 comm="syz.3.345" name="/" dev="autofs" ino=11771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 117.275735][ T6845] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 117.291964][ T30] audit: type=1400 audit(1765535279.345:334): avc: denied { ioctl } for pid=7075 comm="syz.1.348" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.319555][ T30] audit: type=1400 audit(1765535279.345:335): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.362910][ T30] audit: type=1400 audit(1765535279.345:336): avc: denied { open } for pid=5810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.387673][ T30] audit: type=1400 audit(1765535279.345:337): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.413562][ T30] audit: type=1400 audit(1765535279.455:338): avc: denied { prog_load } for pid=7086 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.432796][ T30] audit: type=1400 audit(1765535279.455:339): avc: denied { bpf } for pid=7086 comm="syz.4.351" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.437372][ T7089] netlink: 'syz.3.345': attribute type 4 has an invalid length. [ 117.453865][ T30] audit: type=1400 audit(1765535279.455:340): avc: denied { perfmon } for pid=7086 comm="syz.4.351" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.453907][ T30] audit: type=1400 audit(1765535279.455:341): avc: denied { prog_run } for pid=7086 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.503392][ T44] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 117.518309][ T7091] netlink: 'syz.3.345': attribute type 4 has an invalid length. [ 117.526202][ T6845] usb 2-1: Invalid ep0 maxpacket: 16 [ 117.565444][ T24] gspca_stk1135: reg_w 0x5 err -110 [ 117.572650][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 117.581369][ T24] gspca_stk1135: Sensor write failed [ 117.586902][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 117.595881][ T30] audit: type=1400 audit(1765535279.655:342): avc: denied { map_create } for pid=7060 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.596911][ T24] gspca_stk1135: Sensor write failed [ 117.622000][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 117.629260][ T24] gspca_stk1135: Sensor read failed [ 117.634509][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 117.641769][ T24] gspca_stk1135: Sensor read failed [ 117.647802][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 117.654425][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 117.663037][ T6845] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 117.671241][ T24] gspca_stk1135: Sensor read failed [ 117.677330][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 117.683833][ T24] gspca_stk1135: Sensor read failed [ 117.689271][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 117.696510][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.707822][ T24] gspca_stk1135: Sensor write failed [ 117.713154][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.723023][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 117.729501][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 117.742415][ T24] gspca_stk1135: Sensor write failed [ 117.748344][ T24] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 117.756463][ T44] usb 3-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 117.778926][ T24] usb 4-1: USB disconnect, device number 10 [ 117.792557][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.825212][ T6845] usb 2-1: Invalid ep0 maxpacket: 16 [ 117.860339][ T5893] usb 1-1: USB disconnect, device number 5 [ 117.897637][ T6845] usb usb2-port1: attempt power cycle [ 117.912254][ T44] usb 3-1: config 0 descriptor?? [ 118.024643][ T7097] ªªªªªªÛœ}J¹ÖXÎ: renamed from lo (while UP) [ 118.392763][ T6845] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 118.414050][ T44] elecom 0003:056E:019B.0006: global environment stack underflow [ 118.859579][ T44] elecom 0003:056E:019B.0006: item 0 4 1 11 parsing failed [ 118.868023][ T44] elecom 0003:056E:019B.0006: probe with driver elecom failed with error -22 [ 118.877628][ T6845] usb 2-1: Invalid ep0 maxpacket: 16 [ 118.889783][ T44] usb 3-1: USB disconnect, device number 9 [ 119.004664][ T7109] netlink: 484 bytes leftover after parsing attributes in process `syz.3.355'. [ 119.045267][ T6845] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 119.086051][ T6845] usb 2-1: Invalid ep0 maxpacket: 16 [ 119.095058][ T6845] usb usb2-port1: unable to enumerate USB device [ 119.114274][ T7116] comedi comedi3: comedi_config --init_data is deprecated [ 119.187321][ T7117] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 120.464198][ T7156] macvtap1: entered promiscuous mode [ 120.469858][ T7156] macvtap1: entered allmulticast mode [ 120.475291][ T7156] veth1_vlan: entered allmulticast mode [ 121.118506][ T7160] qnx6: unable to read the first superblock [ 121.138406][ T7160] qnx6: unable to read the first superblock [ 121.144482][ T7160] qnx6: unable to read the first superblock [ 122.315033][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 122.315048][ T30] audit: type=1400 audit(1765535284.365:418): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 122.510250][ T30] audit: type=1400 audit(1765535284.565:419): avc: denied { setopt } for pid=7181 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.612213][ T7189] vivid-007: disconnect [ 122.813490][ T30] audit: type=1400 audit(1765535284.665:420): avc: denied { read write } for pid=7182 comm="syz.3.377" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.055464][ T30] audit: type=1400 audit(1765535284.665:421): avc: denied { open } for pid=7182 comm="syz.3.377" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.094816][ T30] audit: type=1400 audit(1765535284.665:422): avc: denied { ioctl } for pid=7182 comm="syz.3.377" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.245338][ T30] audit: type=1400 audit(1765535284.845:423): avc: denied { create } for pid=7181 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.434978][ T30] audit: type=1400 audit(1765535284.865:424): avc: denied { write } for pid=7181 comm="syz.1.376" path="socket:[13413]" dev="sockfs" ino=13413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.640778][ T7189] vivid-007: reconnect [ 123.755293][ T30] audit: type=1400 audit(1765535285.075:425): avc: denied { setopt } for pid=7181 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.861476][ T30] audit: type=1400 audit(1765535285.265:426): avc: denied { create } for pid=7191 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.881051][ T30] audit: type=1400 audit(1765535285.835:427): avc: denied { getopt } for pid=7191 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.027296][ T6115] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 124.415441][ T7216] futex_wake_op: syz.1.384 tries to shift op by -1; fix this program [ 124.455408][ T5866] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.470147][ T6115] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 124.479263][ T6115] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 124.510525][ T6115] usb 1-1: config 8 has no interface number 0 [ 124.527153][ T6115] usb 1-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 124.553836][ T6115] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 124.563204][ T6115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.587747][ T6115] usb 1-1: NFC: intf ffff888030a09000 id ffffffff8f322480 [ 124.635550][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 124.676784][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.700813][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.719886][ T5866] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.839969][ T5866] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 124.849623][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.868794][ T5866] hub 5-1:1.0: bad descriptor, ignoring hub [ 124.874724][ T5866] hub 5-1:1.0: probe with driver hub failed with error -5 [ 124.884979][ T5866] cdc_wdm 5-1:1.0: skipping garbage [ 124.899312][ T5866] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 124.907398][ T5893] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 125.337020][ T7142] usb 1-1: USB disconnect, device number 6 [ 125.400874][ T7233] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 125.477144][ T5893] usb 2-1: device descriptor read/64, error -71 [ 125.571349][ T5866] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 125.753383][ T5893] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 125.938509][ T5893] usb 2-1: device descriptor read/64, error -71 [ 126.095968][ T5893] usb usb2-port1: attempt power cycle [ 126.129891][ T7209] tipc: Started in network mode [ 126.134768][ T7209] tipc: Node identity ac14140f, cluster identity 4711 [ 126.142366][ T7209] tipc: New replicast peer: 255.255.255.255 [ 126.173389][ T7209] tipc: Enabled bearer , priority 10 [ 126.185810][ T7252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=7252 comm=syz.4.382 [ 126.198438][ T7247] netlink: 'syz.4.382': attribute type 4 has an invalid length. [ 126.199391][ T7209] netlink: 'syz.4.382': attribute type 11 has an invalid length. [ 126.296896][ T7250] process 'syz.0.393' launched './file0/file1' with NULL argv: empty string added [ 126.375424][ T5866] usb 5-1: USB disconnect, device number 13 [ 126.387337][ T7258] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 126.437642][ T5893] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 126.468064][ T5893] usb 2-1: device descriptor read/8, error -71 [ 126.545988][ T7258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.735295][ T5893] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 126.763725][ T5893] usb 2-1: device descriptor read/8, error -71 [ 126.763941][ T7259] bond1: (slave geneve2): making interface the new active one [ 126.859911][ T7259] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.876532][ T5893] usb usb2-port1: unable to enumerate USB device [ 127.157974][ T5893] tipc: Node number set to 2886997007 [ 127.839377][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 127.839392][ T30] audit: type=1400 audit(1765535289.895:441): avc: denied { create } for pid=7275 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.553739][ T30] audit: type=1400 audit(1765535290.565:442): avc: denied { write } for pid=7279 comm="syz.1.402" name="route" dev="proc" ino=4026532872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 128.651401][ T30] audit: type=1400 audit(1765535290.595:443): avc: denied { ioctl } for pid=7279 comm="syz.1.402" path="socket:[12180]" dev="sockfs" ino=12180 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 128.696556][ T30] audit: type=1400 audit(1765535290.675:444): avc: denied { execute } for pid=7275 comm="syz.2.400" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 128.826618][ T30] audit: type=1400 audit(1765535290.815:445): avc: denied { ioctl } for pid=7275 comm="syz.2.400" path="socket:[12173]" dev="sockfs" ino=12173 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.927215][ T7275] delete_channel: no stack [ 128.933205][ T7293] tipc: Enabling of bearer rejected, failed to enable media [ 128.934136][ T30] audit: type=1400 audit(1765535290.815:446): avc: denied { ioctl } for pid=7275 comm="syz.2.400" path="socket:[12191]" dev="sockfs" ino=12191 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.972431][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.976439][ T7293] fuse: Bad value for 'fd' [ 128.983930][ T30] audit: type=1400 audit(1765535291.025:447): avc: denied { read write } for pid=7292 comm="syz.4.405" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 129.007679][ T30] audit: type=1400 audit(1765535291.025:448): avc: denied { open } for pid=7292 comm="syz.4.405" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 129.157942][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 129.168001][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.185409][ T24] usb 1-1: Product: syz [ 129.230091][ T24] usb 1-1: Manufacturer: syz [ 129.245205][ T24] usb 1-1: SerialNumber: syz [ 129.267968][ T24] usb 1-1: config 0 descriptor?? [ 129.458401][ T30] audit: type=1400 audit(1765535291.515:449): avc: denied { ioctl } for pid=7307 comm="syz.4.409" path="socket:[13655]" dev="sockfs" ino=13655 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.925288][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.095917][ T30] audit: type=1400 audit(1765535291.515:450): avc: denied { create } for pid=7307 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.121887][ T6845] usb 1-1: USB disconnect, device number 7 [ 130.248630][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 130.336566][ T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.451081][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.471863][ T7329] 9p: Bad value for 'rfdno' [ 130.485903][ T24] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 130.524763][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.540125][ T7328] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 130.589880][ T24] usb 4-1: config 0 descriptor?? [ 130.887159][ T5880] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 131.045563][ T5880] usb 3-1: device descriptor read/64, error -71 [ 131.705929][ T5880] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 131.715733][ T24] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 131.845421][ T5880] usb 3-1: device descriptor read/64, error -71 [ 131.905125][ T7339] bridge0: entered allmulticast mode [ 131.923124][ T7339] pim6reg: entered allmulticast mode [ 132.055202][ T5880] usb usb3-port1: attempt power cycle [ 132.070413][ T7345] pim6reg: left allmulticast mode [ 132.076214][ T7142] usb 4-1: USB disconnect, device number 11 [ 132.091615][ T7345] bridge0: left allmulticast mode [ 132.549819][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.561772][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.858220][ T5880] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 132.858233][ T89] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 132.886820][ T5880] usb 3-1: device descriptor read/8, error -71 [ 133.006694][ T89] usb 5-1: config index 0 descriptor too short (expected 64051, got 10) [ 133.018907][ T89] usb 5-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 133.052699][ T89] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 133.079469][ T89] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 133.122320][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 133.122335][ T30] audit: type=1400 audit(1765535295.175:467): avc: denied { read } for pid=7355 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.135226][ T5880] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 133.148655][ T89] usb 5-1: New USB device found, idVendor=0456, idProduct=b000, bcdDevice=ab.07 [ 133.185454][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.211216][ T7358] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 133.242106][ T89] usb 5-1: Product: syz [ 133.246664][ T30] audit: type=1400 audit(1765535295.255:468): avc: denied { ioctl } for pid=7355 comm="syz.3.420" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.279694][ T89] usb 5-1: Manufacturer: syz [ 133.279781][ T5880] usb 3-1: device descriptor read/8, error -71 [ 133.296785][ T89] usb 5-1: SerialNumber: syz [ 133.310048][ T89] usb 5-1: config 0 descriptor?? [ 133.331512][ T30] audit: type=1400 audit(1765535295.265:469): avc: denied { mounton } for pid=7355 comm="syz.3.420" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 133.644257][ T5880] usb usb3-port1: unable to enumerate USB device [ 135.036055][ T7313] usb 5-1: USB disconnect, device number 14 [ 135.852899][ T7377] netlink: 'syz.0.425': attribute type 29 has an invalid length. [ 135.869282][ T7377] netlink: 548 bytes leftover after parsing attributes in process `syz.0.425'. [ 135.890198][ T30] audit: type=1400 audit(1765535297.885:470): avc: denied { ioctl } for pid=7374 comm="syz.0.425" path="socket:[13761]" dev="sockfs" ino=13761 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.223388][ T30] audit: type=1400 audit(1765535298.275:471): avc: denied { create } for pid=7378 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.255253][ T7313] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 136.275336][ T7379] syz.1.426 (7379) used greatest stack depth: 19592 bytes left [ 136.285013][ T30] audit: type=1400 audit(1765535298.295:472): avc: denied { write } for pid=7378 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.328152][ T30] audit: type=1400 audit(1765535298.325:473): avc: denied { write } for pid=7378 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.450117][ T30] audit: type=1400 audit(1765535298.325:474): avc: denied { map } for pid=7378 comm="syz.1.426" path="socket:[14386]" dev="sockfs" ino=14386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.477665][ T30] audit: type=1400 audit(1765535298.325:475): avc: denied { read accept } for pid=7378 comm="syz.1.426" path="socket:[14386]" dev="sockfs" ino=14386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.478117][ T7313] usb 5-1: Using ep0 maxpacket: 32 [ 136.513815][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 136.523269][ T30] audit: type=1400 audit(1765535298.325:476): avc: denied { setopt } for pid=7378 comm="syz.1.426" laddr=fe80::11 lport=37519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.574963][ T7313] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 136.599665][ T7313] usb 5-1: config 0 has no interface number 0 [ 136.657772][ T7313] usb 5-1: config 0 interface 29 has no altsetting 0 [ 136.676650][ T7313] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 136.685909][ T7313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.693891][ T7313] usb 5-1: Product: syz [ 136.699657][ T7313] usb 5-1: Manufacturer: syz [ 136.706900][ T7313] usb 5-1: SerialNumber: syz [ 136.707278][ T7394] netlink: 'syz.0.431': attribute type 3 has an invalid length. [ 136.722091][ T7313] usb 5-1: config 0 descriptor?? [ 136.967385][ T7313] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 137.048483][ T7383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7383 comm=syz.3.427 [ 137.127508][ T7408] 0: reclassify loop, rule prio 0, protocol 800 [ 138.653999][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 138.654135][ T30] audit: type=1400 audit(1765535300.705:484): avc: denied { ioctl } for pid=7423 comm="syz.2.436" path="socket:[13897]" dev="sockfs" ino=13897 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.119364][ T30] audit: type=1400 audit(1765535301.165:485): avc: denied { mount } for pid=7430 comm="syz.1.438" name="/" dev="ramfs" ino=13974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 139.175782][ T7313] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 139.229524][ T7313] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 139.769143][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 139.809299][ T7313] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 139.871144][ T7313] usb 5-1: USB disconnect, device number 15 [ 139.965335][ T6845] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 140.038537][ T30] audit: type=1400 audit(1765535302.075:486): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 140.322755][ T7456] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 140.593509][ T6845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.662176][ T6845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 140.695299][ T6845] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.739061][ T30] audit: type=1400 audit(1765535302.795:487): avc: denied { write } for pid=7463 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.852992][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.861073][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.869591][ T6845] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 140.880308][ T6845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.888322][ T6845] usb 3-1: Product: syz [ 140.892454][ T6845] usb 3-1: Manufacturer: syz [ 140.897058][ T6845] usb 3-1: SerialNumber: syz [ 140.903859][ T6845] usb 3-1: config 0 descriptor?? [ 140.929648][ T6845] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 141.006519][ T30] audit: type=1400 audit(1765535303.065:488): avc: denied { bind } for pid=7471 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.036098][ T30] audit: type=1400 audit(1765535303.065:489): avc: denied { name_bind } for pid=7471 comm="syz.4.449" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 141.093850][ T30] audit: type=1400 audit(1765535303.065:490): avc: denied { node_bind } for pid=7471 comm="syz.4.449" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 141.110519][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.128124][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.129316][ T30] audit: type=1400 audit(1765535303.135:491): avc: denied { mount } for pid=7475 comm="syz.3.450" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 141.188852][ T6845] usb 3-1: USB disconnect, device number 14 [ 141.297828][ T7465] veth1_vlan: left allmulticast mode [ 141.362481][ T68] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.372284][ T68] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.513784][ T68] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.524470][ T68] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.546083][ T30] audit: type=1400 audit(1765535303.595:492): avc: denied { create } for pid=7495 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.871185][ T30] audit: type=1400 audit(1765535303.625:493): avc: denied { setopt } for pid=7495 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.012252][ T7501] misc userio: Can't change port type on an already running userio instance [ 142.723586][ T7518] x_tables: duplicate underflow at hook 3 [ 142.729700][ T7518] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 142.835270][ T5921] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 142.985433][ T5921] usb 5-1: device descriptor read/64, error -71 [ 143.135542][ T6845] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 143.228038][ T5921] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 143.406518][ T6845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.417481][ T6845] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 143.426775][ T6845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.445222][ T7313] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 143.452787][ T5921] usb 5-1: device descriptor read/64, error -71 [ 143.459156][ T6845] usb 2-1: config 0 descriptor?? [ 143.565402][ T5921] usb usb5-port1: attempt power cycle [ 143.615216][ T7313] usb 4-1: Using ep0 maxpacket: 16 [ 143.622161][ T7313] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 143.630464][ T7313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.641895][ T7313] usb 4-1: config 0 has no interface number 0 [ 143.652470][ T7313] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 143.683247][ T7313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.691511][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.710469][ T7313] usb 4-1: Product: syz [ 143.715086][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.726935][ T7313] usb 4-1: Manufacturer: syz [ 143.731567][ T7313] usb 4-1: SerialNumber: syz [ 143.740763][ T7313] usb 4-1: config 0 descriptor?? [ 143.749288][ T7313] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 143.915545][ T5921] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 143.955600][ T6024] usb 4-1: USB disconnect, device number 12 [ 143.966588][ T5921] usb 5-1: device descriptor read/8, error -71 [ 143.999872][ T6845] logitech 0003:046D:C20E.0008: rdesc size test failed for formula gp [ 144.024592][ T6845] logitech 0003:046D:C20E.0008: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.1-1/input0 [ 144.155993][ T5893] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 144.205688][ T5921] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 144.237915][ T6024] usb 2-1: USB disconnect, device number 13 [ 144.247474][ T5921] usb 5-1: device descriptor read/8, error -71 [ 144.315210][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 144.322352][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 144.331508][ T5893] usb 3-1: config index 0 descriptor too short (expected 2362, got 58) [ 144.339998][ T5893] usb 3-1: config 136 has an invalid interface descriptor of length 6, skipping [ 144.349453][ T5893] usb 3-1: config 136 has an invalid descriptor of length 197, skipping remainder of the config [ 144.356968][ T5921] usb usb5-port1: unable to enumerate USB device [ 144.360834][ T5893] usb 3-1: config 136 has 0 interfaces, different from the descriptor's value: 5 [ 144.386236][ T5893] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 144.396902][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.404859][ T5893] usb 3-1: Product: syz [ 144.409470][ T5893] usb 3-1: Manufacturer: syz [ 144.414036][ T5893] usb 3-1: SerialNumber: syz [ 144.950450][ T7561] tmpfs: Unknown parameter '^g¡jÃ/Ep³HHC•zÝô&‘VhmH-Y®hé"m[' [ 145.025307][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 145.025321][ T30] audit: type=1400 audit(1765535307.075:500): avc: denied { connect } for pid=7566 comm="syz.3.475" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.085271][ T30] audit: type=1400 audit(1765535307.085:501): avc: denied { read write } for pid=7566 comm="syz.3.475" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 145.144187][ T30] audit: type=1400 audit(1765535307.085:502): avc: denied { open } for pid=7566 comm="syz.3.475" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 145.241128][ T30] audit: type=1400 audit(1765535307.085:503): avc: denied { ioctl } for pid=7566 comm="syz.3.475" path="socket:[15386]" dev="sockfs" ino=15386 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.308406][ T30] audit: type=1400 audit(1765535307.085:504): avc: denied { read } for pid=7566 comm="syz.3.475" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.362472][ T7573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.381049][ T30] audit: type=1400 audit(1765535307.085:505): avc: denied { open } for pid=7566 comm="syz.3.475" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.408562][ T7573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.451050][ T30] audit: type=1400 audit(1765535307.085:506): avc: denied { ioctl } for pid=7566 comm="syz.3.475" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.476365][ T30] audit: type=1400 audit(1765535307.085:507): avc: denied { write } for pid=7566 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.497813][ T30] audit: type=1400 audit(1765535307.285:508): avc: denied { read } for pid=7571 comm="syz.0.477" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 145.642054][ T30] audit: type=1400 audit(1765535307.285:509): avc: denied { open } for pid=7571 comm="syz.0.477" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 145.686549][ T5893] usb 3-1: USB disconnect, device number 15 [ 146.496758][ T7591] ubi31: attaching mtd0 [ 146.538741][ T7591] ubi31: scanning is finished [ 146.544462][ T7591] ubi31: empty MTD device detected [ 146.987601][ T7605] kernel read not supported for file /eth0 (pid: 7605 comm: syz.2.486) [ 147.070092][ T7606] 9p: Bad value for 'wfdno' [ 147.104858][ T7591] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 147.113498][ T7591] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 147.124678][ T7591] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 147.133293][ T7591] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 147.143037][ T7591] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 147.153223][ T7591] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 147.162747][ T7591] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2568115882 [ 147.174084][ T7591] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 147.192263][ T7609] ubi31: background thread "ubi_bgt31d" started, PID 7609 [ 147.936378][ T5893] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 148.127440][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 148.127461][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.129859][ T5893] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 148.129882][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.129899][ T5893] usb 4-1: Product: syz [ 148.129911][ T5893] usb 4-1: Manufacturer: syz [ 148.129924][ T5893] usb 4-1: SerialNumber: syz [ 148.132266][ T5893] usb 4-1: config 0 descriptor?? [ 148.133980][ T5893] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 148.383709][ T10] usb 4-1: USB disconnect, device number 13 [ 148.399135][ T7636] netlink: 240 bytes leftover after parsing attributes in process `syz.1.488'. [ 148.418977][ T7640] SET target dimension over the limit! [ 148.825396][ T5921] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.077221][ T5921] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 149.092782][ T5921] usb 1-1: config 160 has no interface number 0 [ 149.119951][ T5921] usb 1-1: config 160 interface 200 has no altsetting 0 [ 149.307441][ T7666] usb usb8: usbfs: process 7666 (syz.1.497) did not claim interface 0 before use [ 150.372926][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 150.372940][ T30] audit: type=1400 audit(1765535312.425:558): avc: denied { remove_name } for pid=7669 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=3223 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.443223][ T30] audit: type=1400 audit(1765535312.425:559): avc: denied { unlink } for pid=7669 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=3223 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.477479][ T5921] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 150.509157][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.517243][ T5921] usb 1-1: Product: syz [ 150.521405][ T5921] usb 1-1: Manufacturer: syz [ 150.575638][ T5921] usb 1-1: SerialNumber: syz [ 150.577781][ T30] audit: type=1400 audit(1765535312.485:560): avc: denied { getopt } for pid=7673 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 150.755239][ T6845] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 150.788564][ T7682] xt_TCPMSS: Only works on TCP SYN packets [ 150.925560][ T5921] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.936025][ T5921] usb 1-1: MIDIStreaming interface descriptor not found [ 150.977278][ T5921] usb 1-1: USB disconnect, device number 8 [ 151.390605][ T6845] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 151.399782][ T6845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.412230][ T6845] usb 4-1: Product: syz [ 151.421837][ T6845] usb 4-1: Manufacturer: syz [ 151.459699][ T6845] usb 4-1: SerialNumber: syz [ 151.477299][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.503398][ T6845] usb 4-1: config 0 descriptor?? [ 151.945247][ T5921] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 152.069363][ T30] audit: type=1400 audit(1765535314.125:561): avc: denied { name_connect } for pid=7703 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 152.235520][ T7706] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 152.235520][ T7706] program syz.2.504 not setting count and/or reply_len properly [ 152.292883][ T30] audit: type=1400 audit(1765535314.145:562): avc: denied { listen } for pid=7703 comm="syz.4.505" lport=56428 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.358064][ T6845] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 152.413864][ T5921] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.422844][ T30] audit: type=1400 audit(1765535314.145:563): avc: denied { write } for pid=7703 comm="syz.4.505" lport=56428 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 152.502844][ T6845] peak_usb 4-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 152.556491][ T5921] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.582434][ T5921] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.614426][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.616606][ T30] audit: type=1400 audit(1765535314.145:564): avc: denied { setopt } for pid=7703 comm="syz.4.505" lport=56428 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 152.713871][ T5921] usb 2-1: Product: syz [ 152.723808][ T5921] usb 2-1: Manufacturer: syz [ 152.728710][ T5921] usb 2-1: SerialNumber: syz [ 152.738713][ T7721] batadv_slave_1: entered promiscuous mode [ 152.771587][ T30] audit: type=1400 audit(1765535314.285:565): avc: denied { ioctl } for pid=7700 comm="syz.2.504" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.776551][ T6845] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 152.804269][ T7721] batadv_slave_1: left promiscuous mode [ 152.808569][ T5921] usb 2-1: config 0 descriptor?? [ 152.854862][ T30] audit: type=1400 audit(1765535314.405:566): avc: denied { name_bind } for pid=7714 comm="syz.4.507" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 152.886383][ T5921] usb 2-1: selecting invalid altsetting 0 [ 152.905493][ T30] audit: type=1400 audit(1765535314.405:567): avc: denied { node_bind } for pid=7714 comm="syz.4.507" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 152.954569][ T6845] usb 4-1: USB disconnect, device number 14 [ 153.181090][ T6024] usb 2-1: USB disconnect, device number 14 [ 153.373926][ T7745] usb usb8: usbfs: process 7745 (syz.2.510) did not claim interface 0 before use [ 153.649719][ T6024] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 153.972579][ T6024] usb 1-1: Using ep0 maxpacket: 16 [ 154.769472][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 154.780048][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 154.868596][ T7769] sd 0:0:1:0: device reset [ 155.075233][ T5893] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 155.085201][ T7142] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 155.214346][ T7775] block device autoloading is deprecated and will be removed. [ 155.256550][ T7142] usb 5-1: Using ep0 maxpacket: 16 [ 155.263316][ T5893] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 155.273090][ T5893] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 155.282947][ T5893] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 155.305955][ T7142] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.316434][ T7142] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 155.328704][ T7142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 155.340573][ T5893] usb 3-1: config 220 has no interface number 2 [ 155.347012][ T5893] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.360349][ T7142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 155.371373][ T5893] usb 3-1: config 220 interface 0 has no altsetting 0 [ 155.378222][ T7142] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.395379][ T5893] usb 3-1: config 220 interface 76 has no altsetting 0 [ 155.402599][ T5893] usb 3-1: config 220 interface 1 has no altsetting 0 [ 155.412308][ T5893] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 155.421713][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.430043][ T5893] usb 3-1: Product: syz [ 155.434581][ T5893] usb 3-1: Manufacturer: syz [ 155.440116][ T5893] usb 3-1: SerialNumber: syz [ 155.446078][ T7142] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 155.455437][ T7142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.463409][ T7142] usb 5-1: Product: syz [ 155.467674][ T7142] usb 5-1: Manufacturer: syz [ 155.472497][ T7142] usb 5-1: SerialNumber: syz [ 155.487153][ T7142] usb 5-1: config 0 descriptor?? [ 155.499059][ T7142] xbox_remote_probe: endpoint_in message size==0? [ 156.080370][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 156.080385][ T30] audit: type=1400 audit(1765535318.135:576): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 156.264669][ T30] audit: type=1400 audit(1765535318.315:577): avc: denied { kexec_image_load } for pid=7780 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 156.768195][ T6024] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.778147][ T6024] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 156.785850][ T6024] usb 1-1: can't read configurations, error -71 [ 156.825384][ T5814] Bluetooth: hci5: command 0x1003 tx timeout [ 156.832371][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 156.951169][ T5893] usb 3-1: selecting invalid altsetting 0 [ 156.965466][ T30] audit: type=1400 audit(1765535318.925:578): avc: denied { create } for pid=7780 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.024986][ T5893] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 157.052095][ T5893] uvcvideo 3-1:220.0: No valid video chain found. [ 157.086192][ T5893] usb 3-1: selecting invalid altsetting 0 [ 157.095328][ T30] audit: type=1400 audit(1765535318.925:579): avc: denied { connect } for pid=7780 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.546691][ T5893] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 157.674398][ T5893] usb 3-1: USB disconnect, device number 16 [ 157.682480][ T30] audit: type=1400 audit(1765535318.935:580): avc: denied { write } for pid=7780 comm="syz.3.520" path="socket:[15901]" dev="sockfs" ino=15901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.810266][ T5820] usb 5-1: USB disconnect, device number 20 [ 158.020352][ T30] audit: type=1400 audit(1765535320.075:581): avc: denied { create } for pid=7798 comm="syz.4.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 158.063526][ T30] audit: type=1400 audit(1765535320.095:582): avc: denied { create } for pid=7802 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.455222][ T5893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 158.615234][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 158.622813][ T5893] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 158.650266][ T5893] usb 2-1: config 1 has no interface number 0 [ 158.663507][ T5893] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 158.674105][ T5893] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 1224, setting to 1024 [ 158.685739][ T5893] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 158.696173][ T5893] usb 2-1: config 1 interface 105 has no altsetting 0 [ 158.728247][ T5893] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 158.740136][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.755851][ T5893] usb 2-1: Product: syz [ 158.762893][ T5893] usb 2-1: Manufacturer: syz [ 158.775207][ T5893] usb 2-1: SerialNumber: syz [ 158.782618][ T7807] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 158.792304][ T7807] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 158.807912][ T30] audit: type=1400 audit(1765535320.865:583): avc: denied { ioctl } for pid=7822 comm="syz.2.530" path="socket:[15052]" dev="sockfs" ino=15052 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.874876][ T30] audit: type=1400 audit(1765535320.865:584): avc: denied { read append } for pid=7822 comm="syz.2.530" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 158.906552][ T7142] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 158.934382][ T30] audit: type=1400 audit(1765535320.865:585): avc: denied { open } for pid=7822 comm="syz.2.530" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 159.065382][ T7142] usb 5-1: Using ep0 maxpacket: 32 [ 159.073743][ T7142] usb 5-1: config 0 has no interfaces? [ 159.079937][ T7142] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.088389][ T7835] netlink: 'syz.3.534': attribute type 21 has an invalid length. [ 159.096773][ T5820] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.108278][ T7142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.120349][ T7142] usb 5-1: config 0 descriptor?? [ 159.306517][ T7801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.313850][ T7801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.315340][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 159.327459][ T5820] usb 1-1: config index 0 descriptor too short (expected 6683, got 27) [ 159.341582][ T5820] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 159.349734][ T5820] usb 1-1: config 0 has no interface number 0 [ 159.353798][ T6024] usb 5-1: USB disconnect, device number 21 [ 159.355960][ T5820] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.372894][ T5820] usb 1-1: config 0 interface 85 has no altsetting 0 [ 159.503750][ T7848] 9p: Bad value for 'wfdno' [ 159.752595][ T5820] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 159.775633][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.789358][ T5820] usb 1-1: Product: syz [ 159.793638][ T5820] usb 1-1: Manufacturer: syz [ 159.811069][ T5820] usb 1-1: SerialNumber: syz [ 159.834799][ T5820] usb 1-1: config 0 descriptor?? [ 159.934464][ T5893] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 159.946929][ T5893] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 159.961664][ T5893] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 159.985573][ T5893] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3a:bf:40:a6:77:98 [ 160.027371][ T5893] usb 2-1: USB disconnect, device number 15 [ 160.034981][ T5893] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 160.064915][ T5820] appletouch 1-1:0.85: Failed to read mode from device. [ 160.072921][ T5820] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 160.190550][ T5893] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 160.247073][ T5893] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 160.278745][ T5893] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 160.331873][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 160.339275][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 160.352918][ T5820] usb 1-1: USB disconnect, device number 11 [ 160.955223][ T5866] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.096406][ T5893] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 161.125229][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 161.142488][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.158546][ T5866] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.179708][ T5866] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.199627][ T5866] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.212583][ T5820] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 161.225208][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.242042][ T5866] usb 4-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 1.00 [ 161.260206][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.295413][ T5893] usb 5-1: device descriptor read/64, error -71 [ 161.380624][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 161.380654][ T30] audit: type=1400 audit(1765535323.425:590): avc: denied { bind } for pid=7888 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.673582][ T5866] usb 4-1: config 0 descriptor?? [ 161.687304][ T5820] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.698999][ T5820] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.709623][ T5820] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.719219][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.740039][ T7884] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 161.753727][ T5820] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.785988][ T5893] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 161.915243][ T5893] usb 5-1: device descriptor read/64, error -71 [ 162.026482][ T5893] usb usb5-port1: attempt power cycle [ 162.029797][ T30] audit: type=1400 audit(1765535324.045:591): avc: denied { write } for pid=7883 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 162.075861][ T6024] usb 1-1: USB disconnect, device number 12 [ 162.263302][ T5826] Bluetooth: hci3: unexpected event for opcode 0x080f [ 162.289945][ T7898] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 162.296675][ T7898] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 162.300192][ T5866] usbhid 4-1:0.0: can't add hid device: -71 [ 162.305928][ T7898] vhci_hcd vhci_hcd.0: Device attached [ 162.745201][ T7901] vhci_hcd: connection closed [ 162.749554][ T1302] vhci_hcd vhci_hcd.1: stop threads [ 162.759682][ T5866] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.768137][ T1302] vhci_hcd vhci_hcd.1: release socket [ 162.777396][ T1302] vhci_hcd vhci_hcd.1: disconnect device [ 162.783427][ T5866] usb 4-1: USB disconnect, device number 15 [ 162.795211][ T5893] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 162.807595][ T5820] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 162.835832][ T5893] usb 5-1: device descriptor read/8, error -71 [ 163.145246][ T5893] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 163.165986][ T5893] usb 5-1: device descriptor read/8, error -71 [ 163.295426][ T5893] usb usb5-port1: unable to enumerate USB device [ 163.560489][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 163.580914][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.554'. [ 164.187995][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 164.188108][ T30] audit: type=1400 audit(1765535326.245:592): avc: denied { read write } for pid=7928 comm="syz.0.558" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.197104][ T7929] netlink: 'syz.4.557': attribute type 30 has an invalid length. [ 164.253150][ T7142] IPVS: starting estimator thread 0... [ 164.317770][ T3538] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.327182][ T3538] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.342892][ T3538] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.362074][ T30] audit: type=1400 audit(1765535326.285:593): avc: denied { open } for pid=7928 comm="syz.0.558" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.367930][ T7933] IPVS: using max 50 ests per chain, 120000 per kthread [ 164.385634][ T30] audit: type=1400 audit(1765535326.285:594): avc: denied { ioctl } for pid=7928 comm="syz.0.558" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.403696][ T3538] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.599766][ T5820] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 164.766960][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.776808][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.789808][ T5820] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 164.798929][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.809460][ T5820] usb 2-1: config 0 descriptor?? [ 165.713322][ T7952] kAFS: unable to lookup cell 'Þ({^ú@' [ 165.875107][ T5820] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 165.916681][ T30] audit: type=1400 audit(1765535327.975:595): avc: denied { map } for pid=7955 comm="syz.3.565" path="socket:[16240]" dev="sockfs" ino=16240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.940521][ T5820] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 165.947514][ T5820] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 165.948323][ T30] audit: type=1400 audit(1765535327.975:596): avc: denied { read accept } for pid=7955 comm="syz.3.565" path="socket:[16240]" dev="sockfs" ino=16240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.954436][ T5820] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 165.990806][ T5820] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 166.004039][ T5921] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 166.014476][ T5820] asus 0003:048D:CE50.0009: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 166.030036][ T5820] asus 0003:048D:CE50.0009: Asus input not registered [ 166.109848][ T30] audit: type=1400 audit(1765535328.145:597): avc: denied { accept } for pid=7955 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 166.140343][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.155480][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.178133][ T7959] netlink: 76 bytes leftover after parsing attributes in process `syz.3.565'. [ 166.201382][ T5820] asus 0003:048D:CE50.0009: probe with driver asus failed with error -12 [ 166.216753][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 166.247882][ T5820] usb 2-1: USB disconnect, device number 16 [ 166.248173][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.266836][ T5826] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 166.267133][ T30] audit: type=1400 audit(1765535328.295:598): avc: denied { watch } for pid=7949 comm="syz.0.564" path="/121/file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.276002][ T5826] Bluetooth: hci3: Injecting HCI hardware error event [ 166.323136][ T5814] Bluetooth: hci3: hardware error 0x00 [ 166.337669][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.347158][ T30] audit: type=1400 audit(1765535328.295:599): avc: denied { watch_sb watch_reads } for pid=7949 comm="syz.0.564" path="/121/file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.351580][ T7963] fido_id[7963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 166.423249][ T5921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 2.40 [ 166.434258][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 166.444564][ T5921] usb 3-1: Product: syz [ 166.449286][ T5921] usb 3-1: SerialNumber: syz [ 166.471399][ T7965] netlink: 484 bytes leftover after parsing attributes in process `syz.1.566'. [ 167.590233][ T30] audit: type=1400 audit(1765535329.225:600): avc: denied { bind } for pid=7970 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.838379][ T6845] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 168.416128][ T7983] bridge_slave_0: left allmulticast mode [ 168.422842][ T5814] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 168.449010][ T6845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.485985][ T7983] bridge_slave_0: left promiscuous mode [ 168.502381][ T6845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 168.570264][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.609014][ T6845] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 168.690911][ T6845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.900887][ T7983] bridge_slave_1: left allmulticast mode [ 168.950861][ T6845] usb 5-1: config 0 descriptor?? [ 169.005570][ T7983] bridge_slave_1: left promiscuous mode [ 169.120358][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.410644][ T7983] bond0: (slave bond_slave_0): Releasing backup interface [ 169.444732][ T7983] bond0: (slave bond_slave_1): Releasing backup interface [ 169.482392][ T7983] team0: Port device team_slave_0 removed [ 169.494808][ T7983] team0: Port device team_slave_1 removed [ 169.500988][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.632890][ T6845] kovaplus 0003:1E7D:2D50.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 169.696634][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.704805][ T7983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.810953][ T7984] team0: Mode changed to "loadbalance" [ 170.059517][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.149464][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.156222][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 170.157335][ T30] audit: type=1400 audit(1765535332.205:601): avc: denied { setopt } for pid=8001 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.197953][ T30] audit: type=1400 audit(1765535332.205:602): avc: denied { bind } for pid=8001 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.434538][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'. [ 170.677061][ T5921] usb 3-1: 0:2 : does not exist [ 170.816433][ T5921] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 170.974623][ T5921] usb 3-1: USB disconnect, device number 17 [ 171.595212][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 171.632232][ T30] audit: type=1400 audit(1765535333.685:603): avc: denied { override_creds } for pid=8021 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.756798][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.785223][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.814177][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.852026][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.875499][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.884522][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.926223][ T24] usb 1-1: config 0 descriptor?? [ 172.155317][ T6845] kovaplus 0003:1E7D:2D50.000A: couldn't init struct kovaplus_device [ 172.188752][ T6845] kovaplus 0003:1E7D:2D50.000A: couldn't install mouse [ 172.213193][ T6845] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -71 [ 172.289541][ T6845] usb 5-1: USB disconnect, device number 26 [ 172.396613][ T24] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 172.592477][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.615579][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.636316][ T8057] mkiss: ax0: crc mode is auto. [ 172.641742][ T30] audit: type=1400 audit(1765535334.685:604): avc: denied { setopt } for pid=8055 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.695515][ T5893] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 172.704524][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 172.727428][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.760408][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.796786][ T30] audit: type=1400 audit(1765535334.855:605): avc: denied { getopt } for pid=8055 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 172.823228][ T5866] usb 1-1: USB disconnect, device number 13 [ 172.896909][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 172.915193][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 172.941688][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 172.964856][ T5893] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 172.978926][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.991360][ T5893] usb 3-1: Product: syz [ 173.007875][ T5893] usb 3-1: Manufacturer: syz [ 173.038923][ T5893] usb 3-1: SerialNumber: syz [ 173.070527][ T5893] usb 3-1: config 0 descriptor?? [ 173.082940][ T8049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.092202][ T8049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.117139][ T5893] usb 3-1: ucan: probing device on interface #0 [ 173.557005][ T8076] sctp: [Deprecated]: syz.2.588 (pid 8076) Use of int in maxseg socket option. [ 173.557005][ T8076] Use struct sctp_assoc_value instead [ 173.571933][ T5893] ucan 3-1:0.0: probe with driver ucan failed with error -22 [ 173.606787][ T30] audit: type=1400 audit(1765535335.665:606): avc: denied { create } for pid=8079 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.753183][ T5893] usb 3-1: USB disconnect, device number 18 [ 173.769459][ T30] audit: type=1400 audit(1765535335.825:607): avc: denied { write } for pid=8083 comm="syz.0.599" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 173.876485][ T30] audit: type=1400 audit(1765535335.935:608): avc: denied { block_suspend } for pid=8083 comm="syz.0.599" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.456214][ T30] audit: type=1400 audit(1765535336.515:609): avc: denied { connect } for pid=8091 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.480182][ T30] audit: type=1400 audit(1765535336.535:610): avc: denied { bind } for pid=8091 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.983435][ T30] audit: type=1400 audit(1765535337.035:611): avc: denied { wake_alarm } for pid=8101 comm="syz.2.604" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.422556][ T8109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12039 sclass=netlink_route_socket pid=8109 comm=syz.3.605 [ 175.451634][ T6013] udevd[6013]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 175.479330][ T30] audit: type=1400 audit(1765535337.535:612): avc: denied { getopt } for pid=8110 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.500399][ T8110] delete_channel: no stack [ 176.009985][ T8125] usb usb8: usbfs: process 8125 (syz.0.608) did not claim interface 0 before use [ 176.337713][ T30] audit: type=1400 audit(1765535338.395:613): avc: denied { listen } for pid=8129 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 176.798298][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.816608][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.847699][ T8157] netlink: 'syz.3.621': attribute type 1 has an invalid length. [ 176.881817][ T8157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.895825][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.905705][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.025255][ T24] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 177.125448][ T5893] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 177.187531][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 177.204046][ T24] usb 1-1: config 179 has no interface number 0 [ 177.222883][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 177.271576][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 177.336642][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.348404][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 177.350931][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 177.383223][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 177.453498][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.478505][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 177.490686][ T5893] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 177.502886][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.511976][ T5893] usb 4-1: Product: syz [ 177.516385][ T5893] usb 4-1: Manufacturer: syz [ 177.521015][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.534637][ T5893] usb 4-1: SerialNumber: syz [ 177.541721][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 177.566096][ T5893] usb 4-1: config 0 descriptor?? [ 177.569384][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.592991][ T8158] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 177.602458][ T8154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.633243][ T24] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 177.673417][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 177.691102][ T24] xpad 1-1:179.65: probe with driver xpad failed with error -90 [ 177.698893][ T5859] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 177.725206][ T5893] rc_core: IR keymap rc-imon-rsc not found [ 177.738860][ T5893] Registered IR keymap rc-empty [ 177.750706][ T5893] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 177.761666][ T5893] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 177.789843][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 177.789853][ T30] audit: type=1400 audit(1765535339.845:616): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3021 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.828488][ T5893] usb 1-1: USB disconnect, device number 14 [ 177.844399][ T30] audit: type=1400 audit(1765535339.875:617): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3021 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.876425][ T5859] usb 2-1: device descriptor read/64, error -71 [ 177.907620][ T5820] usb 4-1: USB disconnect, device number 16 [ 177.936680][ T30] audit: type=1400 audit(1765535339.875:618): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3021 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.125738][ T5859] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 178.275363][ T5859] usb 2-1: device descriptor read/64, error -71 [ 178.496436][ T8187] orangefs_mount: mount request failed with -4 [ 178.515408][ T5859] usb usb2-port1: attempt power cycle [ 178.638154][ T30] audit: type=1400 audit(1765535340.695:619): avc: denied { read } for pid=8194 comm="syz.3.632" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.705542][ T30] audit: type=1400 audit(1765535340.695:620): avc: denied { open } for pid=8194 comm="syz.3.632" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.156910][ T30] audit: type=1400 audit(1765535340.725:621): avc: denied { ioctl } for pid=8194 comm="syz.3.632" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.215222][ T5859] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 179.256493][ T5859] usb 2-1: device descriptor read/8, error -71 [ 179.578434][ T5859] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 179.610134][ T5859] usb 2-1: device descriptor read/8, error -71 [ 179.704032][ T30] audit: type=1400 audit(1765535341.755:622): avc: denied { setopt } for pid=8222 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.726777][ T5859] usb usb2-port1: unable to enumerate USB device [ 179.795689][ T30] audit: type=1400 audit(1765535341.845:623): avc: denied { shutdown } for pid=8220 comm="syz.4.639" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.999355][ T5859] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 180.086989][ T6845] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 180.205550][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 180.238770][ T5859] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 180.248283][ T5859] usb 3-1: config 0 has no interface number 0 [ 180.258695][ T5859] usb 3-1: config 0 interface 29 has no altsetting 0 [ 180.282711][ T6845] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 180.306751][ T5859] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 180.319330][ T6845] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 180.329777][ T6845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.358023][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.376863][ T6845] usb 5-1: config 0 descriptor?? [ 180.396790][ T5859] usb 3-1: Product: syz [ 180.401032][ T5859] usb 3-1: Manufacturer: syz [ 180.416207][ T5859] usb 3-1: SerialNumber: syz [ 180.447757][ T5859] usb 3-1: config 0 descriptor?? [ 180.706686][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.640'. [ 180.720188][ T5859] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 180.897382][ T8231] netlink: 72 bytes leftover after parsing attributes in process `syz.4.639'. [ 180.972834][ T30] audit: type=1400 audit(1765535342.815:624): avc: denied { read } for pid=8220 comm="syz.4.639" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.993454][ T5859] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 181.001890][ T5859] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 181.009364][ T5859] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 181.025895][ T30] audit: type=1400 audit(1765535342.875:625): avc: denied { mount } for pid=8220 comm="syz.4.639" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 181.131190][ T5859] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -22 [ 181.199246][ T5859] usb 3-1: USB disconnect, device number 19 [ 181.580420][ T5893] IPVS: starting estimator thread 0... [ 181.688283][ T8242] IPVS: using max 77 ests per chain, 184800 per kthread [ 182.135358][ T5893] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 182.315461][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 182.380308][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.565123][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 182.594578][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.033866][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.055997][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.073983][ T5893] usb 3-1: config 0 descriptor?? [ 183.087322][ T8252] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.105313][ T5893] hub 3-1:0.0: USB hub found [ 183.260642][ T30] audit: type=1400 audit(1765535345.315:626): avc: denied { create } for pid=8285 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 183.351798][ T30] audit: type=1400 audit(1765535345.405:627): avc: denied { load_policy } for pid=8285 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 183.372791][ T8286] SELinux: policydb version -2116418798 does not match my version range 15-35 [ 183.393564][ T8286] SELinux: failed to load policy [ 183.449817][ T5859] usb 5-1: USB disconnect, device number 27 [ 183.492790][ T30] audit: type=1400 audit(1765535345.545:628): avc: denied { ioctl } for pid=8285 comm="syz.3.647" path="socket:[18108]" dev="sockfs" ino=18108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 183.638868][ T30] audit: type=1400 audit(1765535345.545:629): avc: denied { write } for pid=8285 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 183.908762][ T5893] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 184.129492][ T5893] usbhid 3-1:0.0: can't add hid device: -71 [ 184.232207][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.261897][ T5893] usb 3-1: USB disconnect, device number 20 [ 184.773558][ T30] audit: type=1800 audit(1765535346.425:630): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.650" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 184.815325][ T8305] nft_compat: unsupported protocol 0 [ 184.826776][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'. [ 184.852147][ T30] audit: type=1400 audit(1765535346.455:631): avc: denied { connect } for pid=8296 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 184.973851][ T30] audit: type=1400 audit(1765535347.005:632): avc: denied { getopt } for pid=8307 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.001268][ T30] audit: type=1400 audit(1765535347.005:633): avc: denied { read } for pid=8307 comm="syz.1.653" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 185.036713][ T30] audit: type=1400 audit(1765535347.005:634): avc: denied { open } for pid=8307 comm="syz.1.653" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 185.060883][ T5859] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 185.098008][ T30] audit: type=1400 audit(1765535347.005:635): avc: denied { ioctl } for pid=8307 comm="syz.1.653" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 185.195256][ T5859] usb 4-1: device descriptor read/64, error -71 [ 185.255278][ T5893] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 185.259632][ T8309] tmpfs: Unknown parameter 'mpol"prmfer:ê' [ 185.406790][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.435230][ T5859] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.535171][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 26216, setting to 64 [ 185.557568][ T5893] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 185.587348][ T5859] usb 4-1: device descriptor read/64, error -71 [ 185.791215][ T5859] usb usb4-port1: attempt power cycle [ 185.999868][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.008585][ T5893] usb 3-1: Product: syz [ 186.012815][ T5893] usb 3-1: Manufacturer: syz [ 186.024230][ T5893] usb 3-1: SerialNumber: syz [ 186.091810][ T5893] usb 3-1: config 0 descriptor?? [ 186.106883][ T8306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 186.205194][ T5893] rc_core: IR keymap rc-streamzap not found [ 186.211087][ T5893] Registered IR keymap rc-empty [ 186.217448][ T5893] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 186.230354][ T5893] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 186.375442][ T5859] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 186.389043][ T8330] FAULT_INJECTION: forcing a failure. [ 186.389043][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 186.402132][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: syz.0.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.402158][ T8330] Tainted: [L]=SOFTLOCKUP [ 186.402164][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.402174][ T8330] Call Trace: [ 186.402180][ T8330] [ 186.402187][ T8330] dump_stack_lvl+0x16c/0x1f0 [ 186.402210][ T8330] should_fail_ex+0x512/0x640 [ 186.402237][ T8330] strncpy_from_user+0x3b/0x2e0 [ 186.402254][ T8330] ? ktime_get+0x200/0x310 [ 186.402283][ T8330] strncpy_from_user_nofault+0x7f/0x180 [ 186.402304][ T8330] bpf_probe_read_user_str+0x26/0x70 [ 186.402331][ T8330] bpf_prog_dc7deb2a98588118+0x43/0x49 [ 186.402347][ T8330] bpf_test_run+0x3d2/0xb50 [ 186.402381][ T8330] ? __pfx_bpf_test_run+0x10/0x10 [ 186.402427][ T8330] ? eth_type_trans+0x2e3/0x740 [ 186.402448][ T8330] bpf_prog_test_run_skb+0x1035/0x31a0 [ 186.402490][ T8330] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 186.402520][ T8330] ? fput+0x70/0xf0 [ 186.402547][ T8330] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 186.402573][ T8330] __sys_bpf+0x1035/0x4980 [ 186.402601][ T8330] ? __pfx___sys_bpf+0x10/0x10 [ 186.402624][ T8330] ? find_held_lock+0x2b/0x80 [ 186.402654][ T8330] ? find_held_lock+0x2b/0x80 [ 186.402686][ T8330] ? __mutex_unlock_slowpath+0x161/0x790 [ 186.402720][ T8330] ? fput+0x70/0xf0 [ 186.402744][ T8330] ? ksys_write+0x1ac/0x250 [ 186.402764][ T8330] ? __pfx_ksys_write+0x10/0x10 [ 186.402789][ T8330] __x64_sys_bpf+0x78/0xc0 [ 186.402812][ T8330] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.402829][ T8330] do_syscall_64+0xcd/0xf80 [ 186.402848][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.402866][ T8330] RIP: 0033:0x7f9606d8f749 [ 186.402879][ T8330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.402895][ T8330] RSP: 002b:00007f9607b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.402912][ T8330] RAX: ffffffffffffffda RBX: 00007f9606fe5fa0 RCX: 00007f9606d8f749 [ 186.402923][ T8330] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 186.402933][ T8330] RBP: 00007f9607b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 186.402942][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.402952][ T8330] R13: 00007f9606fe6038 R14: 00007f9606fe5fa0 R15: 00007ffd154ef3e8 [ 186.402977][ T8330] [ 186.663971][ T5859] usb 4-1: device descriptor read/8, error -71 [ 186.677716][ T5893] usb 3-1: USB disconnect, device number 21 [ 186.955197][ T5859] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 187.178198][ T5859] usb 4-1: device not accepting address 20, error -71 [ 187.182202][ T8334] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.312509][ T5859] usb usb4-port1: unable to enumerate USB device [ 187.912017][ T89] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 187.965756][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.666'. [ 187.979853][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.666'. [ 188.085272][ T89] usb 3-1: Using ep0 maxpacket: 16 [ 188.256418][ T89] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 188.264952][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 188.277658][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 188.298230][ T89] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 188.313823][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.334642][ T89] usb 3-1: Product: syz [ 188.364790][ T89] usb 3-1: Manufacturer: syz [ 188.381490][ T89] usb 3-1: SerialNumber: syz [ 188.390042][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 188.390055][ T30] audit: type=1400 audit(1765535350.445:643): avc: denied { bind } for pid=8358 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.399976][ T89] usb 3-1: config 0 descriptor?? [ 188.418504][ T30] audit: type=1400 audit(1765535350.475:644): avc: denied { listen } for pid=8358 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.456941][ T30] audit: type=1400 audit(1765535350.475:645): avc: denied { read } for pid=8358 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.518559][ T30] audit: type=1326 audit(1765535350.545:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290db8f749 code=0x7ffc0000 [ 188.685330][ T5880] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 188.696353][ T30] audit: type=1326 audit(1765535350.545:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f290db8f749 code=0x7ffc0000 [ 188.720083][ T30] audit: type=1326 audit(1765535350.545:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290db8f749 code=0x7ffc0000 [ 189.119966][ T30] audit: type=1326 audit(1765535350.545:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290db8f749 code=0x7ffc0000 [ 189.145889][ T30] audit: type=1326 audit(1765535350.545:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f290db8f749 code=0x7ffc0000 [ 189.178598][ T30] audit: type=1326 audit(1765535350.545:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f290db8f783 code=0x7ffc0000 [ 189.203081][ T30] audit: type=1326 audit(1765535350.545:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f290db8f783 code=0x7ffc0000 [ 189.244742][ T8375] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 190.498588][ T5880] usb 3-1: USB disconnect, device number 22 [ 190.595249][ T89] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 190.795327][ T89] usb 1-1: device descriptor read/64, error -71 [ 191.035514][ T89] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 191.685301][ T89] usb 1-1: device descriptor read/64, error -71 [ 191.806776][ T89] usb usb1-port1: attempt power cycle [ 191.965227][ T5859] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 192.024055][ T8419] FAULT_INJECTION: forcing a failure. [ 192.024055][ T8419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.037173][ T8419] CPU: 1 UID: 0 PID: 8419 Comm: syz.3.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.037199][ T8419] Tainted: [L]=SOFTLOCKUP [ 192.037204][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.037214][ T8419] Call Trace: [ 192.037220][ T8419] [ 192.037226][ T8419] dump_stack_lvl+0x16c/0x1f0 [ 192.037247][ T8419] should_fail_ex+0x512/0x640 [ 192.037272][ T8419] strncpy_from_user+0x3b/0x2e0 [ 192.037290][ T8419] ? ktime_get+0x200/0x310 [ 192.037313][ T8419] strncpy_from_user_nofault+0x7f/0x180 [ 192.037333][ T8419] bpf_probe_read_user_str+0x26/0x70 [ 192.037360][ T8419] bpf_prog_dc7deb2a98588118+0x43/0x49 [ 192.037376][ T8419] bpf_test_run+0x3d2/0xb50 [ 192.037410][ T8419] ? __pfx_bpf_test_run+0x10/0x10 [ 192.037455][ T8419] ? eth_type_trans+0x2e3/0x740 [ 192.037476][ T8419] bpf_prog_test_run_skb+0x1035/0x31a0 [ 192.037518][ T8419] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 192.037548][ T8419] ? fput+0x70/0xf0 [ 192.037575][ T8419] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 192.037602][ T8419] __sys_bpf+0x1035/0x4980 [ 192.037629][ T8419] ? __pfx___sys_bpf+0x10/0x10 [ 192.037651][ T8419] ? find_held_lock+0x2b/0x80 [ 192.037682][ T8419] ? find_held_lock+0x2b/0x80 [ 192.037712][ T8419] ? __mutex_unlock_slowpath+0x161/0x790 [ 192.037747][ T8419] ? fput+0x70/0xf0 [ 192.037771][ T8419] ? ksys_write+0x1ac/0x250 [ 192.037790][ T8419] ? __pfx_ksys_write+0x10/0x10 [ 192.037815][ T8419] __x64_sys_bpf+0x78/0xc0 [ 192.037838][ T8419] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.037854][ T8419] do_syscall_64+0xcd/0xf80 [ 192.037873][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.037890][ T8419] RIP: 0033:0x7f501718f749 [ 192.037903][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.037918][ T8419] RSP: 002b:00007f50180a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.037940][ T8419] RAX: ffffffffffffffda RBX: 00007f50173e5fa0 RCX: 00007f501718f749 [ 192.037951][ T8419] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 192.037961][ T8419] RBP: 00007f50180a6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.037971][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.037980][ T8419] R13: 00007f50173e6038 R14: 00007f50173e5fa0 R15: 00007fff889ab428 [ 192.038006][ T8419] [ 192.348217][ T89] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 192.375767][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 192.381593][ T89] usb 1-1: device descriptor read/8, error -71 [ 192.388911][ T5859] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 192.398698][ T5859] usb 2-1: config 0 has no interface number 0 [ 192.404794][ T5859] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.416393][ T5859] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 192.428912][ T5859] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 192.440071][ T5859] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.572313][ T5859] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 192.581463][ T5921] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 192.595509][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.611963][ T5859] usb 2-1: Product: syz [ 192.625267][ T89] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 192.636747][ T5859] usb 2-1: Manufacturer: syz [ 192.642963][ T5859] usb 2-1: SerialNumber: syz [ 192.770475][ T5921] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 192.816818][ T89] usb 1-1: device descriptor read/8, error -71 [ 192.944094][ T5921] usb 3-1: config 0 has no interface number 0 [ 192.980335][ T5859] usb 2-1: config 0 descriptor?? [ 192.998906][ T5921] usb 3-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=a8.c0 [ 193.011205][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.029858][ T5921] usb 3-1: config 0 descriptor?? [ 193.080968][ T8438] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.090439][ T89] usb usb1-port1: unable to enumerate USB device [ 193.187968][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 193.222445][ T5859] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 194.091550][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.122374][ T5859] usb 2-1: USB disconnect, device number 21 [ 194.206133][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 194.492098][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 194.500231][ T24] usb 4-1: config 0 has no interface number 0 [ 194.506697][ T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 194.517890][ T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 194.530071][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 194.539213][ T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 194.548236][ T24] usb 4-1: Product: syz [ 194.552612][ T24] usb 4-1: SerialNumber: syz [ 194.566552][ T24] usb 4-1: config 0 descriptor?? [ 194.575088][ T24] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 194.585375][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input15 [ 194.678877][ T8452] x_tables: duplicate underflow at hook 2 [ 194.779395][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 194.782866][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 195.411472][ T5921] usb 3-1: string descriptor 0 read error: -71 [ 195.595552][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 195.595568][ T30] audit: type=1400 audit(1765535357.655:665): avc: denied { write } for pid=8462 comm="syz.2.695" name="file0" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.639747][ T30] audit: type=1400 audit(1765535357.675:666): avc: denied { open } for pid=8462 comm="syz.2.695" path="/140/file0" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.704602][ T8465] FAULT_INJECTION: forcing a failure. [ 195.704602][ T8465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.717678][ T8465] CPU: 1 UID: 0 PID: 8465 Comm: syz.4.696 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.717704][ T8465] Tainted: [L]=SOFTLOCKUP [ 195.717709][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.717718][ T8465] Call Trace: [ 195.717724][ T8465] [ 195.717730][ T8465] dump_stack_lvl+0x16c/0x1f0 [ 195.717752][ T8465] should_fail_ex+0x512/0x640 [ 195.717777][ T8465] strncpy_from_user+0x3b/0x2e0 [ 195.717795][ T8465] ? ktime_get+0x200/0x310 [ 195.717817][ T8465] strncpy_from_user_nofault+0x7f/0x180 [ 195.717837][ T8465] bpf_probe_read_user_str+0x26/0x70 [ 195.717863][ T8465] bpf_prog_dc7deb2a98588118+0x43/0x49 [ 195.717879][ T8465] bpf_test_run+0x3d2/0xb50 [ 195.717912][ T8465] ? __pfx_bpf_test_run+0x10/0x10 [ 195.717956][ T8465] ? eth_type_trans+0x2e3/0x740 [ 195.717978][ T8465] bpf_prog_test_run_skb+0x1035/0x31a0 [ 195.718020][ T8465] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 195.718049][ T8465] ? fput+0x70/0xf0 [ 195.718076][ T8465] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 195.718103][ T8465] __sys_bpf+0x1035/0x4980 [ 195.718128][ T8465] ? __pfx___sys_bpf+0x10/0x10 [ 195.718151][ T8465] ? find_held_lock+0x2b/0x80 [ 195.718182][ T8465] ? find_held_lock+0x2b/0x80 [ 195.718218][ T8465] ? __mutex_unlock_slowpath+0x161/0x790 [ 195.718251][ T8465] ? fput+0x70/0xf0 [ 195.718274][ T8465] ? ksys_write+0x1ac/0x250 [ 195.718294][ T8465] ? __pfx_ksys_write+0x10/0x10 [ 195.718319][ T8465] __x64_sys_bpf+0x78/0xc0 [ 195.718342][ T8465] ? lockdep_hardirqs_on+0x7c/0x110 [ 195.718359][ T8465] do_syscall_64+0xcd/0xf80 [ 195.718377][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.718393][ T8465] RIP: 0033:0x7f290db8f749 [ 195.718406][ T8465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.718421][ T8465] RSP: 002b:00007f290e96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.718437][ T8465] RAX: ffffffffffffffda RBX: 00007f290dde5fa0 RCX: 00007f290db8f749 [ 195.718449][ T8465] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 195.718459][ T8465] RBP: 00007f290e96e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.718469][ T8465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.718478][ T8465] R13: 00007f290dde6038 R14: 00007f290dde5fa0 R15: 00007ffca238aaa8 [ 195.718504][ T8465] [ 195.758104][ T30] audit: type=1400 audit(1765535357.685:667): avc: denied { ioctl } for pid=8462 comm="syz.2.695" path="/140/file0" dev="tmpfs" ino=765 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.803079][ T5921] rndis_host 3-1:0.89: More than one union descriptor, skipping ... [ 195.998146][ T5921] usb 3-1: bad CDC descriptors [ 196.031793][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.040072][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.047188][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.054302][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.061408][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.068519][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.075634][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.079760][ T89] usb 4-1: USB disconnect, device number 22 [ 196.082566][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 196.093324][ T5921] cdc_acm 3-1:0.89: More than one union descriptor, skipping ... [ 196.147466][ T89] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 196.155173][ T30] audit: type=1400 audit(1765535358.175:668): avc: denied { ioctl } for pid=8466 comm="syz.2.698" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 196.183379][ T8473] netlink: 'syz.4.699': attribute type 4 has an invalid length. [ 196.259313][ T8473] netlink: 'syz.4.699': attribute type 3 has an invalid length. [ 196.298759][ T5921] usb 3-1: USB disconnect, device number 23 [ 196.309090][ T8473] netlink: 132 bytes leftover after parsing attributes in process `syz.4.699'. [ 196.381976][ T30] audit: type=1400 audit(1765535358.215:669): avc: denied { listen } for pid=8469 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 197.407981][ T8493] capability: warning: `syz.4.704' uses 32-bit capabilities (legacy support in use) [ 197.731211][ T8500] netlink: 'syz.4.704': attribute type 10 has an invalid length. [ 198.955327][ T8500] netlink: 55 bytes leftover after parsing attributes in process `syz.4.704'. [ 307.045095][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 307.052047][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5801/1:b..l P5828/1:b..l P1155/1:b..l P6011/1:b..l P6013/1:b..l P7313/1:b..l [ 307.065879][ C1] rcu: (detected by 1, t=10502 jiffies, g=21857, q=952 ncpus=2) [ 307.073564][ C1] task:kworker/1:10 state:R running task stack:22408 pid:7313 tgid:7313 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 307.087450][ C1] Workqueue: events_power_efficient gc_worker [ 307.093499][ C1] Call Trace: [ 307.096748][ C1] [ 307.099656][ C1] ? __schedule+0x10b9/0x6150 [ 307.104311][ C1] __schedule+0x1139/0x6150 [ 307.108795][ C1] ? __pfx___schedule+0x10/0x10 [ 307.113630][ C1] ? mark_held_locks+0x49/0x80 [ 307.118364][ C1] preempt_schedule_irq+0x51/0x90 [ 307.123356][ C1] irqentry_exit+0x1d8/0x8c0 [ 307.128449][ C1] asm_common_interrupt+0x26/0x40 [ 307.133442][ C1] RIP: 0010:gc_worker+0x2d5/0x16e0 [ 307.138525][ C1] Code: 00 00 48 c7 c7 a8 29 89 90 e8 47 7b 06 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 35 67 2b f8 58 48 85 db 0f 85 d4 0f 00 00 56 6c 2b f8 8b 1d 30 b2 f5 06 41 89 dc 31 ff 41 83 e4 01 44 89 [ 307.158101][ C1] RSP: 0018:ffffc9000c2a7ad8 EFLAGS: 00000293 [ 307.164137][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff899382a9 [ 307.172078][ C1] RDX: ffff888074c60000 RSI: ffffffff899382b8 RDI: 0000000000000007 [ 307.180019][ C1] RBP: ffffffff9b09b86c R08: 0000000000000007 R09: 0000000000000000 [ 307.187969][ C1] R10: 0000000000000000 R11: ffff888074c60b30 R12: ffff88814d000000 [ 307.195908][ C1] R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001770 [ 307.203869][ C1] ? gc_worker+0xe19/0x16e0 [ 307.208346][ C1] ? gc_worker+0xe28/0x16e0 [ 307.212822][ C1] ? gc_worker+0xe28/0x16e0 [ 307.217295][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 307.222899][ C1] ? __pfx_gc_worker+0x10/0x10 [ 307.227632][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.232365][ C1] process_one_work+0x9ba/0x1b20 [ 307.237277][ C1] ? __pfx_gc_worker+0x10/0x10 [ 307.242022][ C1] ? __pfx_process_one_work+0x10/0x10 [ 307.247371][ C1] ? assign_work+0x1a0/0x250 [ 307.251938][ C1] worker_thread+0x6c8/0xf10 [ 307.256505][ C1] ? __kthread_parkme+0x19e/0x250 [ 307.261499][ C1] ? __pfx_worker_thread+0x10/0x10 [ 307.266581][ C1] kthread+0x3c5/0x780 [ 307.270621][ C1] ? __pfx_kthread+0x10/0x10 [ 307.275182][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.279913][ C1] ? __pfx_kthread+0x10/0x10 [ 307.284481][ C1] ret_from_fork+0x983/0xb10 [ 307.289045][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 307.294127][ C1] ? __switch_to+0x7af/0x10d0 [ 307.298776][ C1] ? __pfx_kthread+0x10/0x10 [ 307.303348][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.308091][ C1] [ 307.311091][ C1] task:udevd state:R running task stack:25544 pid:6013 tgid:6013 ppid:5184 task_flags:0x40014c flags:0x00080000 [ 307.324523][ C1] Call Trace: [ 307.327783][ C1] [ 307.330687][ C1] ? __schedule+0x10b9/0x6150 [ 307.335338][ C1] __schedule+0x1139/0x6150 [ 307.339816][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.344984][ C1] ? lock_acquire+0x179/0x330 [ 307.349645][ C1] ? __pfx___schedule+0x10/0x10 [ 307.354470][ C1] ? find_held_lock+0x2b/0x80 [ 307.359119][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 307.364459][ C1] preempt_schedule_common+0x44/0xc0 [ 307.369719][ C1] preempt_schedule_thunk+0x16/0x30 [ 307.374892][ C1] _raw_spin_unlock+0x3e/0x50 [ 307.379560][ C1] unmap_page_range+0x1047/0x43c0 [ 307.384569][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 307.389915][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 307.394828][ C1] unmap_single_vma+0x153/0x240 [ 307.399662][ C1] unmap_vmas+0x218/0x470 [ 307.403967][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 307.408790][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 307.413714][ C1] exit_mmap+0x1b0/0xb60 [ 307.417932][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 307.422671][ C1] ? __lock_acquire+0x436/0x2890 [ 307.427584][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 307.433111][ C1] __mmput+0x12a/0x410 [ 307.437154][ C1] mmput+0x62/0x70 [ 307.440847][ C1] do_exit+0x7d7/0x2bd0 [ 307.444973][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 307.449966][ C1] ? __pfx_do_exit+0x10/0x10 [ 307.454527][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.459259][ C1] do_group_exit+0xd3/0x2a0 [ 307.463734][ C1] __x64_sys_exit_group+0x3e/0x50 [ 307.468730][ C1] x64_sys_call+0x151c/0x1740 [ 307.473379][ C1] do_syscall_64+0xcd/0xf80 [ 307.477854][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.483716][ C1] RIP: 0033:0x7fef080f16c5 [ 307.488102][ C1] RSP: 002b:00007fff904807c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 307.496494][ C1] RAX: ffffffffffffffda RBX: 000055de87115d90 RCX: 00007fef080f16c5 [ 307.504436][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 307.512374][ C1] RBP: 000055de86ec62c0 R08: 0000000000000000 R09: 0000000000000000 [ 307.520314][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.528268][ C1] R13: 00007fff90480810 R14: 0000000000000000 R15: 0000000000000000 [ 307.536214][ C1] [ 307.539205][ C1] task:udevd state:R running task stack:24760 pid:6011 tgid:6011 ppid:5184 task_flags:0x40014c flags:0x00080000 [ 307.552638][ C1] Call Trace: [ 307.555887][ C1] [ 307.558791][ C1] ? __schedule+0x10b9/0x6150 [ 307.563441][ C1] __schedule+0x1139/0x6150 [ 307.567917][ C1] ? trace_sched_exit_tp+0xd1/0x110 [ 307.573089][ C1] ? __schedule+0x10b9/0x6150 [ 307.577746][ C1] ? __pfx___schedule+0x10/0x10 [ 307.582570][ C1] ? mark_held_locks+0x49/0x80 [ 307.587303][ C1] preempt_schedule_irq+0x51/0x90 [ 307.592295][ C1] irqentry_exit+0x1d8/0x8c0 [ 307.596857][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.602805][ C1] RIP: 0010:unwind_next_frame+0xb73/0x20a0 [ 307.608591][ C1] Code: f5 ff ff 4c 89 f7 e8 ec ef bb 00 e9 0f f6 ff ff 49 8d 76 f8 ba 08 00 00 00 4d 8d 7d 34 4c 89 ef 4c 89 44 24 28 48 89 4c 24 20 <48> 89 74 24 18 e8 73 f2 ff ff 84 c0 0f 84 fd f7 ff ff 48 8b 7c 24 [ 307.628168][ C1] RSP: 0018:ffffc900048af430 EFLAGS: 00000246 [ 307.634218][ C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff9125d712 [ 307.642156][ C1] RDX: 0000000000000008 RSI: ffffc900048af5c8 RDI: ffffc900048af4a0 [ 307.650095][ C1] RBP: ffffc900048af4e8 R08: ffffffff9125d716 R09: 000000000fc43284 [ 307.658045][ C1] R10: 0000000000000002 R11: 000000000000a961 R12: ffffc900048af4f0 [ 307.665984][ C1] R13: ffffc900048af4a0 R14: ffffc900048af5d0 R15: ffffc900048af4d4 [ 307.673948][ C1] ? stack_trace_save+0x8e/0xc0 [ 307.678769][ C1] ? __unwind_start+0x45f/0x7f0 [ 307.683592][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 307.689717][ C1] arch_stack_walk+0x94/0x100 [ 307.694371][ C1] ? stack_trace_save+0x8e/0xc0 [ 307.699194][ C1] stack_trace_save+0x8e/0xc0 [ 307.703840][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 307.709180][ C1] ? __lock_acquire+0x436/0x2890 [ 307.714087][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 307.719867][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.725035][ C1] save_stack+0x160/0x1f0 [ 307.729343][ C1] ? __pfx_save_stack+0x10/0x10 [ 307.734177][ C1] ? page_ext_put+0x3e/0xd0 [ 307.738667][ C1] __reset_page_owner+0x84/0x1a0 [ 307.743575][ C1] free_unref_folios+0xa22/0x1610 [ 307.748584][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 307.754365][ C1] folios_put_refs+0x4be/0x750 [ 307.759099][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 307.764356][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 307.769959][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 307.776096][ C1] ? __pfx___might_resched+0x10/0x10 [ 307.781352][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 307.787306][ C1] tlb_finish_mmu+0x168/0x7c0 [ 307.791979][ C1] exit_mmap+0x3f9/0xb60 [ 307.796194][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 307.800932][ C1] ? __lock_acquire+0x436/0x2890 [ 307.805855][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 307.811374][ C1] __mmput+0x12a/0x410 [ 307.815418][ C1] mmput+0x62/0x70 [ 307.819111][ C1] do_exit+0x7d7/0x2bd0 [ 307.823236][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 307.828232][ C1] ? __pfx_do_exit+0x10/0x10 [ 307.832793][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.837526][ C1] do_group_exit+0xd3/0x2a0 [ 307.841999][ C1] __x64_sys_exit_group+0x3e/0x50 [ 307.846992][ C1] x64_sys_call+0x151c/0x1740 [ 307.851652][ C1] do_syscall_64+0xcd/0xf80 [ 307.856125][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.861985][ C1] RIP: 0033:0x7fef080f16c5 [ 307.866367][ C1] RSP: 002b:00007fff904807c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 307.874746][ C1] RAX: ffffffffffffffda RBX: 000055de870fbbd0 RCX: 00007fef080f16c5 [ 307.882685][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 307.890626][ C1] RBP: 000055de86ec62c0 R08: 0000000000000000 R09: 0000000000000000 [ 307.898585][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.906536][ C1] R13: 00007fff90480810 R14: 0000000000000000 R15: 0000000000000000 [ 307.914484][ C1] [ 307.917486][ C1] task:kworker/u8:8 state:R running task stack:24088 pid:1155 tgid:1155 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 307.931014][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 307.937226][ C1] Call Trace: [ 307.940478][ C1] [ 307.943380][ C1] ? __schedule+0x10b9/0x6150 [ 307.948041][ C1] __schedule+0x1139/0x6150 [ 307.952521][ C1] ? __lock_acquire+0x436/0x2890 [ 307.957440][ C1] ? __pfx___schedule+0x10/0x10 [ 307.962264][ C1] ? mark_held_locks+0x49/0x80 [ 307.967000][ C1] preempt_schedule_irq+0x51/0x90 [ 307.971992][ C1] irqentry_exit+0x1d8/0x8c0 [ 307.976552][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.982501][ C1] RIP: 0010:__kasan_check_byte+0x13/0x50 [ 307.988103][ C1] Code: 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 54 49 89 f4 55 48 89 fd 53 e8 fd 24 00 00 <89> c3 84 c0 74 0b 89 d8 5b 5d 41 5c c3 cc cc cc cc 4c 89 e1 48 89 [ 308.007680][ C1] RSP: 0018:ffffc900042cecf0 EFLAGS: 00000297 [ 308.013714][ C1] RAX: 0000000000000001 RBX: ffffffff8e3c9620 RCX: 0000000000000002 [ 308.021657][ C1] RDX: 0000000000000000 RSI: ffffffff816cb681 RDI: fffffbfff1c792c4 [ 308.029597][ C1] RBP: ffffffff8e3c9620 R08: 0000000000000000 R09: 0000000000000000 [ 308.037536][ C1] R10: 0000000000000002 R11: 000000000009ea7e R12: ffffffff816cb681 [ 308.045476][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.053417][ C1] ? unwind_next_frame+0xd1/0x20a0 [ 308.058504][ C1] ? unwind_next_frame+0xd1/0x20a0 [ 308.063590][ C1] lock_acquire+0xfc/0x330 [ 308.067989][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 308.073160][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.079283][ C1] unwind_next_frame+0xd1/0x20a0 [ 308.084191][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 308.089274][ C1] ? ieee80211_iface_work+0xe28/0x1350 [ 308.094705][ C1] ? __lock_acquire+0x436/0x2890 [ 308.099615][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.105739][ C1] arch_stack_walk+0x94/0x100 [ 308.110390][ C1] ? ieee80211_iface_work+0xe28/0x1350 [ 308.115824][ C1] stack_trace_save+0x8e/0xc0 [ 308.120472][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 308.125828][ C1] kasan_save_stack+0x33/0x60 [ 308.130475][ C1] ? kasan_save_stack+0x33/0x60 [ 308.135293][ C1] ? kasan_save_track+0x14/0x30 [ 308.140111][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 308.144842][ C1] ? __kmalloc_noprof+0x33d/0x910 [ 308.149837][ C1] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 308.156235][ C1] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 308.162007][ C1] ? cfg80211_inform_bss_frame_data+0x26f/0x720 [ 308.168212][ C1] ? ieee80211_bss_info_update+0x310/0xab0 [ 308.173987][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0 [ 308.180286][ C1] ? ieee80211_iface_work+0xe28/0x1350 [ 308.185746][ C1] kasan_save_track+0x14/0x30 [ 308.190391][ C1] __kasan_kmalloc+0xaa/0xb0 [ 308.194951][ C1] __kmalloc_noprof+0x33d/0x910 [ 308.199786][ C1] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 308.206177][ C1] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 308.212567][ C1] cfg80211_inform_single_bss_data+0x542/0x1d30 [ 308.218782][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 308.223965][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 308.230622][ C1] ? stack_trace_save+0x8e/0xc0 [ 308.235441][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 308.240784][ C1] ? stack_depot_save_flags+0x29/0x9b0 [ 308.246218][ C1] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 308.251990][ C1] cfg80211_inform_bss_data+0x22b/0x3be0 [ 308.257589][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 308.262322][ C1] ? __kmalloc_noprof+0x33d/0x910 [ 308.267320][ C1] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 308.273357][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0 [ 308.279567][ C1] ? cfg80211_wiphy_work+0x3fb/0x560 [ 308.284819][ C1] ? kthread+0x3c5/0x780 [ 308.289030][ C1] ? ret_from_fork+0x983/0xb10 [ 308.293762][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 308.298680][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 308.304716][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 308.310596][ C1] ? _ieee802_11_parse_elems_full+0x695/0x45a0 [ 308.316744][ C1] ? __lock_acquire+0x436/0x2890 [ 308.321664][ C1] ? ieee802_11_parse_elems_full+0x143/0x3780 [ 308.327706][ C1] cfg80211_inform_bss_frame_data+0x26f/0x720 [ 308.333749][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 308.339353][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 308.345481][ C1] ? find_held_lock+0x2b/0x80 [ 308.350130][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x18ed/0x2fc0 [ 308.356443][ C1] ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0 [ 308.362573][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 308.369055][ C1] ? kcov_remote_start+0x399/0x680 [ 308.374137][ C1] ieee80211_iface_work+0xe28/0x1350 [ 308.379393][ C1] ? rcu_is_watching+0x12/0xc0 [ 308.384125][ C1] cfg80211_wiphy_work+0x3fb/0x560 [ 308.389216][ C1] process_one_work+0x9ba/0x1b20 [ 308.394129][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 308.399733][ C1] ? __pfx_process_one_work+0x10/0x10 [ 308.405078][ C1] ? assign_work+0x1a0/0x250 [ 308.409648][ C1] worker_thread+0x6c8/0xf10 [ 308.414216][ C1] ? __pfx_worker_thread+0x10/0x10 [ 308.419298][ C1] kthread+0x3c5/0x780 [ 308.423337][ C1] ? __pfx_kthread+0x10/0x10 [ 308.427898][ C1] ? rcu_is_watching+0x12/0xc0 [ 308.432633][ C1] ? __pfx_kthread+0x10/0x10 [ 308.437193][ C1] ret_from_fork+0x983/0xb10 [ 308.441753][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 308.446836][ C1] ? __switch_to+0x7af/0x10d0 [ 308.451483][ C1] ? __pfx_kthread+0x10/0x10 [ 308.456046][ C1] ret_from_fork_asm+0x1a/0x30 [ 308.460789][ C1] [ 308.463790][ C1] task:udevd state:R running task stack:27112 pid:5828 tgid:5828 ppid:5184 task_flags:0x40014c flags:0x00080000 [ 308.477228][ C1] Call Trace: [ 308.480480][ C1] [ 308.483382][ C1] ? __schedule+0x10b9/0x6150 [ 308.488033][ C1] __schedule+0x1139/0x6150 [ 308.492517][ C1] ? __pfx___schedule+0x10/0x10 [ 308.497340][ C1] ? mark_held_locks+0x49/0x80 [ 308.502076][ C1] preempt_schedule_irq+0x51/0x90 [ 308.507078][ C1] irqentry_exit+0x1d8/0x8c0 [ 308.511639][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.517589][ C1] RIP: 0010:lock_release+0x183/0x2d0 [ 308.522842][ C1] Code: 0f c1 05 58 83 18 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 ed 3b 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 308.542416][ C1] RSP: 0018:ffffc90003277740 EFLAGS: 00000206 [ 308.548449][ C1] RAX: 284cd0cb74a20400 RBX: ffffffff8e3c9620 RCX: ffffc9000327774c [ 308.556391][ C1] RDX: 0000000000000001 RSI: ffffffff8daa563c RDI: ffffffff8bf2a580 [ 308.564331][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 000000000fc43284 [ 308.572270][ C1] R10: 0000000000000002 R11: 0000000000011d74 R12: ffffffff816cb9a4 [ 308.580210][ C1] R13: 0000000000000206 R14: ffff888075044980 R15: 0000000000000002 [ 308.588150][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 308.593331][ C1] unwind_next_frame+0x3f9/0x20a0 [ 308.598338][ C1] ? kmem_cache_free+0x15e/0x770 [ 308.603255][ C1] ? unwind_get_return_address+0x59/0xa0 [ 308.608867][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.614989][ C1] arch_stack_walk+0x94/0x100 [ 308.619641][ C1] ? exit_mmap+0x507/0xb60 [ 308.624042][ C1] stack_trace_save+0x8e/0xc0 [ 308.628688][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 308.634032][ C1] ? kasan_save_stack+0x42/0x60 [ 308.638855][ C1] ? kasan_save_stack+0x33/0x60 [ 308.643680][ C1] kasan_save_stack+0x33/0x60 [ 308.648327][ C1] ? kasan_save_stack+0x33/0x60 [ 308.653146][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 308.658489][ C1] ? kmem_cache_free+0x15e/0x770 [ 308.663423][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 308.668599][ C1] kmem_cache_free+0x15e/0x770 [ 308.673334][ C1] ? exit_mmap+0x507/0xb60 [ 308.677728][ C1] ? exit_mmap+0x507/0xb60 [ 308.682114][ C1] exit_mmap+0x507/0xb60 [ 308.686330][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 308.691068][ C1] ? __lock_acquire+0x436/0x2890 [ 308.695982][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 308.701501][ C1] __mmput+0x12a/0x410 [ 308.705547][ C1] mmput+0x62/0x70 [ 308.709244][ C1] do_exit+0x7d7/0x2bd0 [ 308.713378][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 308.718374][ C1] ? __pfx_do_exit+0x10/0x10 [ 308.722933][ C1] ? rcu_is_watching+0x12/0xc0 [ 308.727667][ C1] do_group_exit+0xd3/0x2a0 [ 308.732139][ C1] __x64_sys_exit_group+0x3e/0x50 [ 308.737139][ C1] x64_sys_call+0x151c/0x1740 [ 308.741789][ C1] do_syscall_64+0xcd/0xf80 [ 308.746263][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.752124][ C1] RIP: 0033:0x7fef080f16c5 [ 308.756509][ C1] RSP: 002b:00007fff904807c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 308.764896][ C1] RAX: ffffffffffffffda RBX: 000055de87116b30 RCX: 00007fef080f16c5 [ 308.772836][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 308.780777][ C1] RBP: 000055de86ec62c0 R08: 0000000000000000 R09: 0000000000000000 [ 308.788724][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.796668][ C1] R13: 00007fff90480810 R14: 0000000000000000 R15: 0000000000000000 [ 308.804616][ C1] [ 308.807614][ C1] task:udevd state:R running task stack:25768 pid:5801 tgid:5801 ppid:5184 task_flags:0x40014c flags:0x00080000 [ 308.821049][ C1] Call Trace: [ 308.824298][ C1] [ 308.827201][ C1] ? __schedule+0x10b9/0x6150 [ 308.831863][ C1] __schedule+0x1139/0x6150 [ 308.836341][ C1] ? unwind_get_return_address+0x59/0xa0 [ 308.841949][ C1] ? __lock_acquire+0x436/0x2890 [ 308.846870][ C1] ? __pfx___schedule+0x10/0x10 [ 308.851696][ C1] ? mark_held_locks+0x49/0x80 [ 308.856436][ C1] preempt_schedule_irq+0x51/0x90 [ 308.861429][ C1] irqentry_exit+0x1d8/0x8c0 [ 308.866009][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.871957][ C1] RIP: 0010:__orc_find+0xab/0xf0 [ 308.876865][ C1] Code: 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 83 c4 08 31 c0 5b 5d [ 308.896441][ C1] RSP: 0018:ffffc900033c7400 EFLAGS: 00000282 [ 308.902474][ C1] RAX: ffffffff912dd98c RBX: 0000000000000001 RCX: dffffc0000000000 [ 308.910423][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffffffff90a61a20 [ 308.918363][ C1] RBP: ffffffff90a61a28 R08: ffffffff912dd992 R09: 000000000fc43284 [ 308.926303][ C1] R10: 0000000000000002 R11: 000000000001111a R12: ffffffff90a61a24 [ 308.934258][ C1] R13: ffffffff82111ae8 R14: ffffffff90a61a20 R15: 0000000000000001 [ 308.942198][ C1] ? __tlb_batch_free_encoded_pages+0xf8/0x290 [ 308.948334][ C1] ? __tlb_batch_free_encoded_pages+0xf8/0x290 [ 308.954470][ C1] unwind_next_frame+0x2ec/0x20a0 [ 308.959465][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 308.965592][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.971729][ C1] arch_stack_walk+0x94/0x100 [ 308.976381][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 308.982508][ C1] stack_trace_save+0x8e/0xc0 [ 308.987162][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 308.992505][ C1] ? __lock_acquire+0x436/0x2890 [ 308.997411][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 309.003192][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.008358][ C1] save_stack+0x160/0x1f0 [ 309.012659][ C1] ? __pfx_save_stack+0x10/0x10 [ 309.017478][ C1] ? free_unref_folios+0xa22/0x1610 [ 309.022644][ C1] ? folios_put_refs+0x4be/0x750 [ 309.027549][ C1] ? free_pages_and_swap_cache+0x245/0x4a0 [ 309.033322][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 309.039453][ C1] ? page_ext_put+0x3e/0xd0 [ 309.043939][ C1] __reset_page_owner+0x84/0x1a0 [ 309.048862][ C1] free_unref_folios+0xa22/0x1610 [ 309.053858][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 309.059652][ C1] folios_put_refs+0x4be/0x750 [ 309.064385][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 309.069646][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 309.075249][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 309.081387][ C1] ? __pfx___might_resched+0x10/0x10 [ 309.086646][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 309.092599][ C1] tlb_finish_mmu+0x168/0x7c0 [ 309.097253][ C1] exit_mmap+0x3f9/0xb60 [ 309.101481][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 309.106218][ C1] ? __lock_acquire+0x436/0x2890 [ 309.111138][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 309.116666][ C1] __mmput+0x12a/0x410 [ 309.120718][ C1] mmput+0x62/0x70 [ 309.124415][ C1] do_exit+0x7d7/0x2bd0 [ 309.129333][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 309.134336][ C1] ? __pfx_do_exit+0x10/0x10 [ 309.138896][ C1] ? rcu_is_watching+0x12/0xc0 [ 309.143628][ C1] do_group_exit+0xd3/0x2a0 [ 309.148100][ C1] __x64_sys_exit_group+0x3e/0x50 [ 309.153094][ C1] x64_sys_call+0x151c/0x1740 [ 309.157745][ C1] do_syscall_64+0xcd/0xf80 [ 309.162218][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.168078][ C1] RIP: 0033:0x7fef080f16c5 [ 309.172472][ C1] RSP: 002b:00007fff904807c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 309.180849][ C1] RAX: ffffffffffffffda RBX: 000055de87114210 RCX: 00007fef080f16c5 [ 309.188789][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 309.196731][ C1] RBP: 000055de86ec62c0 R08: 0000000000000000 R09: 0000000000000000 [ 309.204670][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.212610][ C1] R13: 00007fff90480810 R14: 0000000000000000 R15: 0000000000000000 [ 309.220558][ C1] [ 309.223551][ C1] rcu: rcu_preempt kthread starved for 10712 jiffies! g21857 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 309.234718][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 309.244660][ C1] rcu: RCU grace-period kthread stack dump: [ 309.250514][ C1] task:rcu_preempt state:R running task stack:28328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 309.263959][ C1] Call Trace: [ 309.267208][ C1] [ 309.270115][ C1] ? __schedule+0x10b9/0x6150 [ 309.274766][ C1] __schedule+0x1139/0x6150 [ 309.279251][ C1] ? __lock_acquire+0x436/0x2890 [ 309.284160][ C1] ? __mod_timer+0x8f2/0xd30 [ 309.288727][ C1] ? __pfx___schedule+0x10/0x10 [ 309.293549][ C1] ? find_held_lock+0x2b/0x80 [ 309.298198][ C1] ? schedule+0x2d7/0x3a0 [ 309.302503][ C1] schedule+0xe7/0x3a0 [ 309.306557][ C1] schedule_timeout+0x123/0x290 [ 309.311379][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 309.316726][ C1] ? __pfx_process_timeout+0x10/0x10 [ 309.321991][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 309.327785][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 309.333225][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 309.337963][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 309.343221][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.348395][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 309.353302][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 309.358126][ C1] ? rcu_gp_fqs_loop+0x90f/0xaf0 [ 309.363035][ C1] rcu_gp_kthread+0x26d/0x380 [ 309.367683][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 309.372852][ C1] ? rcu_is_watching+0x12/0xc0 [ 309.377593][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.382769][ C1] ? __kthread_parkme+0x19e/0x250 [ 309.387762][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 309.392931][ C1] kthread+0x3c5/0x780 [ 309.396973][ C1] ? __pfx_kthread+0x10/0x10 [ 309.401535][ C1] ? rcu_is_watching+0x12/0xc0 [ 309.406268][ C1] ? __pfx_kthread+0x10/0x10 [ 309.410830][ C1] ret_from_fork+0x983/0xb10 [ 309.415402][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 309.420497][ C1] ? __switch_to+0x7af/0x10d0 [ 309.425146][ C1] ? __pfx_kthread+0x10/0x10 [ 309.429709][ C1] ret_from_fork_asm+0x1a/0x30 [ 309.434456][ C1] [ 309.437457][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 309.443748][ C1] Sending NMI from CPU 1 to CPUs 0: [ 309.448934][ C0] NMI backtrace for cpu 0 [ 309.448947][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.448964][ C0] Tainted: [L]=SOFTLOCKUP [ 309.448968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.448975][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 309.448990][ C0] Code: 36 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 e9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 309.449002][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 309.449012][ C0] RAX: 00000000008086c1 RBX: 0000000000000000 RCX: ffffffff8b7776d9 [ 309.449021][ C0] RDX: 0000000000000000 RSI: ffffffff8dacb6cd RDI: ffffffff8bf2a580 [ 309.449029][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 309.449037][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 309.449045][ C0] R13: ffffffff8e097b40 R14: ffffffff90887cd0 R15: 0000000000000000 [ 309.449053][ C0] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 309.449066][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.449075][ C0] CR2: 0000200000404030 CR3: 000000000e184000 CR4: 00000000003526f0 [ 309.449083][ C0] Call Trace: [ 309.449087][ C0] [ 309.449091][ C0] default_idle+0x13/0x20 [ 309.449105][ C0] default_idle_call+0x6c/0xb0 [ 309.449119][ C0] do_idle+0x38d/0x510 [ 309.449137][ C0] ? __pfx_do_idle+0x10/0x10 [ 309.449156][ C0] cpu_startup_entry+0x4f/0x60 [ 309.449174][ C0] rest_init+0x16b/0x2b0 [ 309.449188][ C0] ? acpi_subsystem_init+0x133/0x180 [ 309.449203][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 309.449217][ C0] start_kernel+0x3ef/0x4d0 [ 309.449230][ C0] x86_64_start_reservations+0x18/0x30 [ 309.449244][ C0] x86_64_start_kernel+0x130/0x190 [ 309.449257][ C0] common_startup_64+0x13e/0x148 [ 309.449277][ C0]