last executing test programs: 12.588635648s ago: executing program 0 (id=550): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xa, &(0x7f0000000280)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000003c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x1, 0x3, 0x10000001, 0xb}, {0x4, 0x4, 0xffffffff}], 0x10, 0x6}, 0x94) socket$kcm(0x21, 0x2, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCSETS(r2, 0x40384708, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 12.408379063s ago: executing program 4 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x61) 8.003931277s ago: executing program 0 (id=558): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYRES64], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 7.315379161s ago: executing program 4 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) chroot(&(0x7f0000000100)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.411811554s ago: executing program 4 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3a}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 6.254065109s ago: executing program 4 (id=567): socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x1000006, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80002005}) 6.24236984s ago: executing program 2 (id=568): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x8a242) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfWsz\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xa8\x8c\x9e\xed\a\n0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {{0x4e21, 0x4e22, r0, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "3432d50049a01b5156c2f44c038e91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x80800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0x42, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffdfff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x5, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x100004, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x54, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0xc, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000006040)=[{{&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)='6', 0x1}], 0x1}}, {{&(0x7f0000001e00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000003300)=[{&(0x7f0000001e40)}], 0x1}}], 0x2, 0x48000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0xfbfb, 0x10200, 0x5, 0x115, r7}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r7, 0x741, 0x0, 0x7}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) 5.556887906s ago: executing program 2 (id=571): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) accept4$netrom(r0, 0x0, 0x0, 0x80000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700100000501010000001c000180060001000200000008000300000000060800b2ca030000009a4d7dcdf41fdbee9b546ef3f0543bc0ef2e982984af892813da9a5d4cb6c2998bc2bbfdd29d744fd049b45b6496408bd7b08fd4ad82248cebc02ca7118633b1769a156bd455976bff65d216f1610b4e826561107f80b1e564f135457739fe25525b3fbe19126a130aed7648ecbb90f592c639563ae3e491908f72889f9f4fbdc7dd0cbc1c1dc9b492caf7e2160a73889a058219ff2e9aca103e19e3f060c5f7ed896307ea49c33b4ba632d95ba71e9f03ae804b8972ffa9f0700a637ba86c19"], 0x30}, 0x1, 0xff07}, 0x2000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x88}}, 0x0) write(r4, &(0x7f0000000000)="05000000010001", 0x7) socket(0x2, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x40040) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x14e) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r10, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000280)={0x50, 0x0, r11, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) 5.339361184s ago: executing program 3 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x61) 5.056541675s ago: executing program 0 (id=573): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xa, &(0x7f0000000280)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000003c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x1, 0x3, 0x10000001, 0xb}, {0x4, 0x4, 0xffffffff}], 0x10, 0x6}, 0x94) socket$kcm(0x21, 0x2, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCSETS(r2, 0x40384708, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 4.95267014s ago: executing program 2 (id=574): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 4.861082557s ago: executing program 1 (id=575): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 4.790815555s ago: executing program 1 (id=576): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x15f}, {&(0x7f0000000d00)="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", 0x142}, {&(0x7f0000001300)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73", 0xe8}, {&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965", 0x2f}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='highspeed', 0x9) 3.815843789s ago: executing program 3 (id=577): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r4 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9L\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd87\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4\x00v&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x8a)\xfa\x93J\xb9\x8d\xf3\xa8\xbe\x83\x12\xb6b\xef^\x1a\x81\xe9\xfa\x11g\nZ \xb7u\xf2\xf2\x06\x04\xb0\xb0Z\xd8\xf5\x13\xb6I', 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r7, 0x0, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r8, r8, 0x0, 0x0) 3.790714326s ago: executing program 1 (id=578): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x91) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}], 0x18}}], 0x1, 0x24000084) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x82000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioprio_get$uid(0x3, r8) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0xc375300b) 3.783321982s ago: executing program 4 (id=579): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xa, &(0x7f0000000280)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000003c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x1, 0x3, 0x10000001, 0xb}, {0x4, 0x4, 0xffffffff}], 0x10, 0x6}, 0x94) socket$kcm(0x21, 0x2, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCSETS(r2, 0x40384708, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 3.744558144s ago: executing program 2 (id=580): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYRES64], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.797731499s ago: executing program 3 (id=581): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38) 2.30966299s ago: executing program 3 (id=582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000001000200000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.272140008s ago: executing program 1 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x9abdc991bbd45c89}, @TCA_NETEM_RATE={0x14, 0x6, {0xffff, 0x200, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0xa, 0x100, 0x5}}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0) 2.131362121s ago: executing program 3 (id=584): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) accept4$netrom(r0, 0x0, 0x0, 0x80000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700100000501010000001c000180060001000200000008000300000000060800b2ca030000009a4d7dcdf41fdbee9b546ef3f0543bc0ef2e982984af892813da9a5d4cb6c2998bc2bbfdd29d744fd049b45b6496408bd7b08fd4ad82248cebc02ca7118633b1769a156bd455976bff65d216f1610b4e826561107f80b1e564f135457739fe25525b3fbe19126a130aed7648ecbb90f592c639563ae3e491908f72889f9f4fbdc7dd0cbc1c1dc9b492caf7e2160a73889a058219ff2e9aca103e19e3f060c5f7ed896307ea49c33b4ba632d95ba71e9f03ae804b8972ffa9f0700a637ba86c19"], 0x30}, 0x1, 0xff07}, 0x2000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x88}}, 0x0) write(r4, &(0x7f0000000000)="05000000010001", 0x7) socket(0x2, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x40040) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x14e) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r10, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000280)={0x50, 0x0, r11, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) 1.498871571s ago: executing program 0 (id=585): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x3150, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.342029652s ago: executing program 2 (id=586): syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {{0x4e21, 0x4e22, r0, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "3432d50049a01b5156c2f44c038e91ba"}]}}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0x42, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffdfff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x5, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x100004, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x54, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0xc, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)='6', 0x1}], 0x1}}, {{&(0x7f0000001e00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000003300)=[{&(0x7f0000001e40)}], 0x1}}], 0x2, 0x48000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0xfbfb, 0x10200, 0x5, 0x115, r5}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r5, 0x741, 0x0, 0x7}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r6, 0x62c21a4ade68aba1, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) 1.341159054s ago: executing program 0 (id=587): unshare(0x60000600) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100f080667d1040207c02d1450102030109023c2287b0c5b1274b0fa2a52b2228f70ec28f6306517a2ad84063b6888b259b3c8a05afeb5b7a8529a6e8aa64161f4ef174d96f0b2576881054ade083051488e0b2dfc42eb5f55e1ef60694ca71"], 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x80805, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000046000701fefffffffcdbdf25047c0000880d6fa82fb7a30944ea0abef8831bda0a9b4a63d480ce836a17d4de60496bd9a35278beb61c2c14494295342dc2e950f66da55b1f9962292e7503bf2f8fa2142d6ac658395739d2bf605d581be2978658a25fa5fac5b09f6bde369495bb2ad4baec03e62e0ec1f9efc0f655da1c512aae340e2064c552aaada00c3488f837a99ccade662bc21ab2797fac40fd"], 0x14}}, 0xc000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x375040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) clock_gettime(0x0, &(0x7f0000000440)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0xe8a, 0x0, 0x4, 0x70000, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x3, 0x16, 0x6, 0x84, "300d8994"}, 0xf9a, 0x2, {&(0x7f0000000540)=[{0x1c00, 0x80, {&(0x7f0000000400)}, 0x3}, {0x9, 0x7a, {&(0x7f0000000480)}, 0xffffffff}]}, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003}) 1.303532034s ago: executing program 1 (id=588): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x3c, 0x2e, 0x9, 0x70bda7, 0x0, {0x4}, [@typed={0x26, 0x18, 0x0, 0x0, @binary="4fbb52fa25a3b6668c2659071fb4df57bbb92493a9b51bff3c6200da53426b3b7edc"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}]}, 0x3c}}, 0x0) 799.085875ms ago: executing program 3 (id=589): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 785.354916ms ago: executing program 2 (id=590): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 267.273364ms ago: executing program 4 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x36313b157b5716d7, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r2, 0x0, 0x7}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 60.982738][ T29] audit: type=1400 audit(1776797537.048:62): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.006537][ T29] audit: type=1400 audit(1776797537.068:63): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.010126][ T5806] cgroup: Unknown subsys name 'net' [ 61.036842][ T29] audit: type=1400 audit(1776797537.098:64): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.155736][ T5806] cgroup: Unknown subsys name 'cpuset' [ 61.164908][ T5806] cgroup: Unknown subsys name 'rlimit' [ 61.314904][ T29] audit: type=1400 audit(1776797537.378:65): avc: denied { setattr } for pid=5806 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.349272][ T29] audit: type=1400 audit(1776797537.378:66): avc: denied { create } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.394761][ T29] audit: type=1400 audit(1776797537.378:67): avc: denied { write } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.421784][ T29] audit: type=1400 audit(1776797537.378:68): avc: denied { read } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.425948][ T5809] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 61.442228][ T29] audit: type=1400 audit(1776797537.378:69): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 61.475765][ T29] audit: type=1400 audit(1776797537.378:70): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.499767][ T29] audit: type=1400 audit(1776797537.518:71): avc: denied { relabelto } for pid=5809 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.453062][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.413568][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 66.413584][ T29] audit: type=1400 audit(1776797542.468:76): avc: denied { create } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.445838][ T29] audit: type=1400 audit(1776797542.468:77): avc: denied { create } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.466466][ T29] audit: type=1400 audit(1776797542.468:78): avc: denied { create } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.486813][ T29] audit: type=1400 audit(1776797542.468:79): avc: denied { read write } for pid=5819 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.516840][ T29] audit: type=1400 audit(1776797542.468:80): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.540530][ T29] audit: type=1400 audit(1776797542.508:81): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="socket:[5184]" dev="sockfs" ino=5184 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.577851][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.579102][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.587886][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.595152][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.607736][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.609696][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.623639][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.624000][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.633547][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.640010][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.645022][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.654208][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.659587][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.672885][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.673485][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.681609][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.689004][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.697138][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.702675][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.708840][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.718600][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.722728][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.729948][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.736505][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.758912][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.783983][ T29] audit: type=1400 audit(1776797542.808:82): avc: denied { read } for pid=5821 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.805199][ T29] audit: type=1400 audit(1776797542.818:83): avc: denied { open } for pid=5822 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.829590][ T29] audit: type=1400 audit(1776797542.818:84): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 67.217619][ T29] audit: type=1400 audit(1776797543.278:85): avc: denied { module_request } for pid=5822 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 67.335288][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 67.346225][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 67.396191][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 67.504953][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 67.580550][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 67.597619][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.604883][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.612049][ T5821] bridge_slave_0: entered allmulticast mode [ 67.619092][ T5821] bridge_slave_0: entered promiscuous mode [ 67.649345][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.656752][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.664962][ T5821] bridge_slave_1: entered allmulticast mode [ 67.671722][ T5821] bridge_slave_1: entered promiscuous mode [ 67.703702][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.710829][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.718066][ T5822] bridge_slave_0: entered allmulticast mode [ 67.724907][ T5822] bridge_slave_0: entered promiscuous mode [ 67.758879][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.766079][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.773290][ T5822] bridge_slave_1: entered allmulticast mode [ 67.780017][ T5822] bridge_slave_1: entered promiscuous mode [ 67.798316][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.805635][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.814003][ T5820] bridge_slave_0: entered allmulticast mode [ 67.820838][ T5820] bridge_slave_0: entered promiscuous mode [ 67.850302][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.859578][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.867379][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.874633][ T5820] bridge_slave_1: entered allmulticast mode [ 67.881535][ T5820] bridge_slave_1: entered promiscuous mode [ 67.909872][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.943307][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.952613][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.959688][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.968050][ T5819] bridge_slave_0: entered allmulticast mode [ 67.975053][ T5819] bridge_slave_0: entered promiscuous mode [ 68.006994][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.016544][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.023984][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.031156][ T5819] bridge_slave_1: entered allmulticast mode [ 68.038286][ T5819] bridge_slave_1: entered promiscuous mode [ 68.047040][ T5821] team0: Port device team_slave_0 added [ 68.055181][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.087626][ T5821] team0: Port device team_slave_1 added [ 68.095684][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.105038][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.112175][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.119352][ T5833] bridge_slave_0: entered allmulticast mode [ 68.126146][ T5833] bridge_slave_0: entered promiscuous mode [ 68.169717][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.176985][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.184262][ T5833] bridge_slave_1: entered allmulticast mode [ 68.190959][ T5833] bridge_slave_1: entered promiscuous mode [ 68.198993][ T5822] team0: Port device team_slave_0 added [ 68.206890][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.225832][ T5820] team0: Port device team_slave_0 added [ 68.240456][ T5822] team0: Port device team_slave_1 added [ 68.251865][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.261702][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.268911][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.294818][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.308033][ T5820] team0: Port device team_slave_1 added [ 68.346196][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.353244][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.379384][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.400506][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.434343][ T5819] team0: Port device team_slave_0 added [ 68.440480][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.447487][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.473625][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.486465][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.496269][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.503242][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.529145][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.543068][ T5819] team0: Port device team_slave_1 added [ 68.549159][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.556118][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.582130][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.601273][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.608284][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.634203][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.702604][ T5821] hsr_slave_0: entered promiscuous mode [ 68.709164][ T5821] hsr_slave_1: entered promiscuous mode [ 68.718408][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.725567][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.751615][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.764743][ T5833] team0: Port device team_slave_0 added [ 68.772985][ T5833] team0: Port device team_slave_1 added [ 68.794731][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.801755][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.828265][ T5840] Bluetooth: hci4: command tx timeout [ 68.828479][ T5840] Bluetooth: hci3: command tx timeout [ 68.833738][ T5831] Bluetooth: hci0: command tx timeout [ 68.833912][ T5831] Bluetooth: hci2: command tx timeout [ 68.839833][ T5839] Bluetooth: hci1: command tx timeout [ 68.845991][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.916499][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.923570][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.949653][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.964650][ T5820] hsr_slave_0: entered promiscuous mode [ 68.970735][ T5820] hsr_slave_1: entered promiscuous mode [ 68.976821][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 68.982834][ T5820] Cannot create hsr debugfs directory [ 68.993716][ T5822] hsr_slave_0: entered promiscuous mode [ 68.999856][ T5822] hsr_slave_1: entered promiscuous mode [ 69.005916][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 69.011632][ T5822] Cannot create hsr debugfs directory [ 69.025577][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.032598][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.058720][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.128659][ T5819] hsr_slave_0: entered promiscuous mode [ 69.134975][ T5819] hsr_slave_1: entered promiscuous mode [ 69.140926][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 69.146685][ T5819] Cannot create hsr debugfs directory [ 69.240219][ T5833] hsr_slave_0: entered promiscuous mode [ 69.246420][ T5833] hsr_slave_1: entered promiscuous mode [ 69.252312][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 69.258080][ T5833] Cannot create hsr debugfs directory [ 69.597935][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.611415][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.619934][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.629680][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.637623][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.648632][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.656373][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.665626][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.728722][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.738261][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.746397][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.755463][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.763493][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.773660][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.784301][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.795000][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.884117][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.893673][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.905461][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.916634][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.924708][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.933986][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.943392][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.953027][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.057495][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.064661][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.076133][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.084295][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.094429][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.102265][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.112009][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.119901][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.129118][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.194023][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.212732][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.226851][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.234194][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.271848][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.278958][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.301124][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.309991][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.318766][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.327754][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.347786][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.356575][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.364670][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.374286][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.395935][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.427073][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.434191][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.478132][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.485277][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.514469][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.558287][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.588005][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.607932][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.615103][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.637305][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.660627][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.667880][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.691793][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.698988][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.741245][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.748373][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.786144][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.865302][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.883167][ T5840] Bluetooth: hci2: command tx timeout [ 70.883192][ T5835] Bluetooth: hci0: command tx timeout [ 70.888626][ T5838] Bluetooth: hci4: command tx timeout [ 70.888692][ T5839] Bluetooth: hci1: command tx timeout [ 70.903531][ T5831] Bluetooth: hci3: command tx timeout [ 70.995035][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.019370][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.026593][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.057078][ T5821] veth0_vlan: entered promiscuous mode [ 71.078395][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.085580][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.114189][ T5821] veth1_vlan: entered promiscuous mode [ 71.128324][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.139462][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.145780][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.276293][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.290830][ T5821] veth0_macvtap: entered promiscuous mode [ 71.316422][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.334237][ T5820] veth0_vlan: entered promiscuous mode [ 71.344412][ T5821] veth1_macvtap: entered promiscuous mode [ 71.390891][ T5820] veth1_vlan: entered promiscuous mode [ 71.438722][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.481061][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.506106][ T5822] veth0_vlan: entered promiscuous mode [ 71.540528][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.551441][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.578157][ T5822] veth1_vlan: entered promiscuous mode [ 71.585095][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.599228][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.637832][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.662891][ T5820] veth0_macvtap: entered promiscuous mode [ 71.703428][ T5820] veth1_macvtap: entered promiscuous mode [ 71.760374][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.788144][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.802117][ T5822] veth0_macvtap: entered promiscuous mode [ 71.835579][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.840097][ T5833] veth0_vlan: entered promiscuous mode [ 71.849576][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.857299][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.869339][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.890966][ T5822] veth1_macvtap: entered promiscuous mode [ 71.898287][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.907167][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.936184][ T5819] veth0_vlan: entered promiscuous mode [ 71.961708][ T5833] veth1_vlan: entered promiscuous mode [ 71.969684][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.976298][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.985034][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.016578][ T5819] veth1_vlan: entered promiscuous mode [ 72.037071][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.044705][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 72.044719][ T29] audit: type=1400 audit(1776797548.098:87): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.lPwbfk/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.080426][ T29] audit: type=1400 audit(1776797548.098:88): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.103800][ T29] audit: type=1400 audit(1776797548.098:89): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.lPwbfk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.129671][ T29] audit: type=1400 audit(1776797548.098:90): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.158921][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.165200][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.175900][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.190294][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.192737][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.207704][ T29] audit: type=1400 audit(1776797548.108:91): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.lPwbfk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.239995][ T29] audit: type=1400 audit(1776797548.108:92): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.lPwbfk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.251831][ T5833] veth0_macvtap: entered promiscuous mode [ 72.273792][ T29] audit: type=1400 audit(1776797548.108:93): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.293586][ T5819] veth0_macvtap: entered promiscuous mode [ 72.299381][ T29] audit: type=1400 audit(1776797548.148:94): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.327779][ T29] audit: type=1400 audit(1776797548.148:95): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="gadgetfs" ino=7664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.347457][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.359632][ T29] audit: type=1400 audit(1776797548.148:96): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.363022][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.382525][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.410707][ T5819] veth1_macvtap: entered promiscuous mode [ 72.443476][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.458105][ T5833] veth1_macvtap: entered promiscuous mode [ 72.547667][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.566795][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.608954][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.669580][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.696734][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.704440][ T5940] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 72.720603][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.733776][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.760365][ T5940] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 72.779024][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.779074][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.798999][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.818892][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.836615][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.954042][ T81] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.964587][ T5831] Bluetooth: hci0: command tx timeout [ 72.964601][ T5835] Bluetooth: hci3: command tx timeout [ 72.964627][ T5835] Bluetooth: hci2: command tx timeout [ 72.970012][ T5831] Bluetooth: hci1: command tx timeout [ 72.975429][ T5835] Bluetooth: hci4: command tx timeout [ 73.046770][ T81] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.060507][ T81] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.091509][ T81] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.165954][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.204717][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.374749][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.397462][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.449970][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.478155][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.597676][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.618927][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.643361][ T5825] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.809815][ T5959] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 73.846854][ T5825] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.929936][ T5825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.971670][ T5825] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.059581][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 74.092048][ T5825] usb 3-1: SerialNumber: syz [ 74.784119][ T5972] ======================================================= [ 74.784119][ T5972] WARNING: The mand mount option has been deprecated and [ 74.784119][ T5972] and is ignored by this kernel. Remove the mand [ 74.784119][ T5972] option from the mount to silence this warning. [ 74.784119][ T5972] ======================================================= [ 74.822939][ T5972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.852460][ T5972] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 74.862686][ T5972] overlayfs: failed to look up (tracing) for ino (-66) [ 75.043756][ T5840] Bluetooth: hci4: command tx timeout [ 75.043801][ T5835] Bluetooth: hci2: command tx timeout [ 75.049487][ T5840] Bluetooth: hci0: command tx timeout [ 75.054638][ T5835] Bluetooth: hci3: command tx timeout [ 75.065931][ T5831] Bluetooth: hci1: command tx timeout [ 76.493060][ T5996] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 77.180370][ T5825] usb 3-1: 0:2 : does not exist [ 77.201725][ T5825] usb 3-1: unit 149 not found! [ 77.380177][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 77.380193][ T29] audit: type=1400 audit(1776797553.438:150): avc: denied { name_bind } for pid=6008 comm="syz.4.23" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.433133][ T6011] netlink: 'syz.2.22': attribute type 10 has an invalid length. [ 77.481922][ T5825] usb 3-1: USB disconnect, device number 2 [ 77.493524][ T5901] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 77.565243][ T29] audit: type=1400 audit(1776797553.478:151): avc: denied { node_bind } for pid=6008 comm="syz.4.23" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 77.574534][ T6014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.695861][ T6011] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 77.725266][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.756176][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.838239][ T5901] usb 4-1: not running at top speed; connect to a high speed hub [ 77.898106][ T5901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.966940][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.024281][ T5901] usb 4-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 78.084799][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.135476][ T5901] usb 4-1: Product: syz [ 78.149273][ T5901] usb 4-1: Manufacturer: syz [ 78.168510][ T5901] usb 4-1: SerialNumber: syz [ 78.537884][ T6019] block device autoloading is deprecated and will be removed. [ 79.120828][ T29] audit: type=1400 audit(1776797555.178:152): avc: denied { create } for pid=6020 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.323038][ T29] audit: type=1400 audit(1776797555.378:153): avc: denied { create } for pid=6023 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.346232][ T6027] netlink: 84 bytes leftover after parsing attributes in process `syz.4.28'. [ 79.399293][ T29] audit: type=1400 audit(1776797555.388:154): avc: denied { ioctl } for pid=6023 comm="syz.2.27" path="socket:[9743]" dev="sockfs" ino=9743 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.477350][ T29] audit: type=1400 audit(1776797555.408:155): avc: denied { write } for pid=6025 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.542093][ T6028] netlink: 'syz.2.27': attribute type 10 has an invalid length. [ 79.625313][ T29] audit: type=1400 audit(1776797555.688:156): avc: denied { read write } for pid=6025 comm="syz.4.28" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.715390][ T29] audit: type=1400 audit(1776797555.688:157): avc: denied { open } for pid=6025 comm="syz.4.28" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.840228][ T29] audit: type=1400 audit(1776797555.758:158): avc: denied { map } for pid=6025 comm="syz.4.28" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.937936][ T29] audit: type=1400 audit(1776797555.768:159): avc: denied { execute } for pid=6025 comm="syz.4.28" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.408009][ T24] cfg80211: failed to load regulatory.db [ 81.896068][ T802] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.903693][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.680576][ T6053] kvm: kvm [6051]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000011d8 [ 82.693027][ T6053] kvm: kvm [6051]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x58b9 [ 82.707290][ T6053] kvm_intel: kvm [6051]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x513f [ 82.726754][ T6053] kvm: kvm [6051]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3109 [ 82.859717][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.869981][ T802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.894312][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.903967][ T802] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.925194][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.934974][ T802] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.952847][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.38'. [ 82.979820][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 82.992452][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 83.012451][ T802] usb 3-1: SerialNumber: syz [ 83.017132][ T9] usb 1-1: SerialNumber: syz [ 83.259165][ T29] audit: type=1400 audit(1776797559.308:160): avc: denied { read } for pid=6047 comm="syz.2.36" name="video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.314048][ T29] audit: type=1400 audit(1776797559.308:161): avc: denied { open } for pid=6047 comm="syz.2.36" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.338177][ T29] audit: type=1400 audit(1776797559.308:162): avc: denied { ioctl } for pid=6047 comm="syz.2.36" path="/dev/video8" dev="devtmpfs" ino=953 ioctlcmd=0x5659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.432427][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.743752][ T5901] usb 4-1: USB disconnect, device number 2 [ 83.756792][ T802] usb 3-1: 0:2 : does not exist [ 83.775294][ T802] usb 3-1: unit 149 not found! [ 83.786356][ T29] audit: type=1400 audit(1776797559.848:163): avc: denied { read write } for pid=6066 comm="syz.1.40" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.858807][ T29] audit: type=1400 audit(1776797559.848:164): avc: denied { open } for pid=6066 comm="syz.1.40" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.894790][ T29] audit: type=1400 audit(1776797559.848:165): avc: denied { mounton } for pid=6066 comm="syz.1.40" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.899509][ T9] usb 1-1: 0:2 : does not exist [ 83.938675][ T802] usb 3-1: USB disconnect, device number 3 [ 83.941983][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.947771][ T9] usb 1-1: unit 149 not found! [ 83.975195][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.996047][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.010620][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 84.011723][ T9] usb 1-1: USB disconnect, device number 2 [ 84.019076][ T24] usb 5-1: SerialNumber: syz [ 84.046376][ T29] audit: type=1400 audit(1776797560.108:166): avc: denied { read write } for pid=6071 comm="syz.3.41" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.055338][ T6073] binder: 6071:6073 ioctl 400c620e 0 returned -14 [ 84.087007][ T29] audit: type=1400 audit(1776797560.108:167): avc: denied { open } for pid=6071 comm="syz.3.41" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.129307][ T29] audit: type=1400 audit(1776797560.108:168): avc: denied { ioctl } for pid=6071 comm="syz.3.41" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.218005][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 84.567905][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 84.633153][ T29] audit: type=1400 audit(1776797560.698:169): avc: denied { read write } for pid=6079 comm="syz.0.43" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.902466][ T5825] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 85.075160][ T5825] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 85.093536][ T5825] usb 1-1: config 0 has no interface number 0 [ 85.112586][ T5825] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 85.132403][ T5825] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.177462][ T5825] usb 1-1: config 0 interface 113 has no altsetting 0 [ 85.234109][ T5825] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 85.248287][ T6090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.279309][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.306402][ T5825] usb 1-1: Product: syz [ 85.327476][ T5825] usb 1-1: Manufacturer: syz [ 85.344737][ T5825] usb 1-1: SerialNumber: syz [ 85.368161][ T5825] usb 1-1: config 0 descriptor?? [ 85.400484][ C1] usb 1-1: NFC: Urb failure (status -71) [ 85.426699][ T5825] usb 1-1: NFC: Unable to get FW version [ 85.458410][ T24] usb 5-1: 0:2 : does not exist [ 85.464960][ T5825] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 85.476196][ T24] usb 5-1: unit 149 not found! [ 85.587250][ T24] usb 5-1: USB disconnect, device number 2 [ 86.305058][ T6099] netlink: 11 bytes leftover after parsing attributes in process `syz.2.48'. [ 86.922722][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.568068][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.597590][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 87.620808][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.645104][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.656680][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 87.667080][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.678033][ T24] usb 4-1: Product: syz [ 87.696668][ T24] usb 4-1: Manufacturer: syz [ 87.709313][ T24] usb 4-1: SerialNumber: syz [ 87.916333][ T5893] usb 1-1: USB disconnect, device number 3 [ 88.226667][ T6123] Zero length message leads to an empty skb [ 92.082449][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 92.082466][ T29] audit: type=1400 audit(1776797568.138:183): avc: denied { setopt } for pid=6160 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.483736][ T6167] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 92.492320][ T6167] overlayfs: overlapping lowerdir path [ 93.167535][ T29] audit: type=1400 audit(1776797569.228:184): avc: denied { create } for pid=6172 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.224845][ T29] audit: type=1400 audit(1776797569.288:185): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 93.270457][ T29] audit: type=1400 audit(1776797569.308:186): avc: denied { create } for pid=6172 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.569704][ T24] usb 4-1: USB disconnect, device number 3 [ 93.862441][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.024374][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.034800][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.046173][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.055671][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 94.065184][ T9] usb 2-1: SerialNumber: syz [ 94.285241][ T29] audit: type=1400 audit(1776797570.348:187): avc: denied { create } for pid=6182 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.665421][ T6192] trusted_key: encrypted_key: insufficient parameters specified [ 94.938913][ T29] audit: type=1400 audit(1776797570.998:188): avc: denied { create } for pid=6193 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.018507][ T29] audit: type=1400 audit(1776797571.018:189): avc: denied { bind } for pid=6193 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.120097][ T29] audit: type=1400 audit(1776797571.028:190): avc: denied { setopt } for pid=6193 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.277043][ T29] audit: type=1400 audit(1776797571.028:191): avc: denied { accept } for pid=6193 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.529691][ T29] audit: type=1400 audit(1776797571.028:192): avc: denied { read } for pid=6193 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.677294][ T9] usb 2-1: 0:2 : does not exist [ 95.720513][ T9] usb 2-1: unit 149 not found! [ 95.892628][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.909531][ T9] usb 2-1: USB disconnect, device number 2 [ 96.098032][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.133168][ T24] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 96.164093][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.233175][ T24] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.254506][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 96.357413][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.737390][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.754204][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.803728][ T24] usb 4-1: Product: syz [ 96.849022][ T24] usb 4-1: Manufacturer: syz [ 96.931316][ T6208] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.958572][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 96.973219][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 97.103504][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 97.114586][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 97.430740][ T802] usb 4-1: USB disconnect, device number 4 [ 97.715439][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 97.715455][ T29] audit: type=1400 audit(1776797573.778:198): avc: denied { name_bind } for pid=6231 comm="syz.0.92" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 98.358515][ T6246] netlink: 220 bytes leftover after parsing attributes in process `syz.1.97'. [ 98.375450][ T6246] netlink: 'syz.1.97': attribute type 2 has an invalid length. [ 99.199560][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 99.237689][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 99.314929][ T6258] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.382890][ T1114] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.505933][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 99.521482][ T6258] kvm: pic: level sensitive irq not supported [ 99.521548][ T1114] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.523967][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 99.537645][ T6258] kvm: pic: non byte read [ 99.553039][ T6258] kvm: pic: level sensitive irq not supported [ 99.553097][ T6258] kvm: pic: non byte read [ 99.563635][ T6258] kvm: pic: level sensitive irq not supported [ 99.563689][ T6258] kvm: pic: non byte read [ 99.739045][ T1114] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.765307][ T1114] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.393620][ T29] audit: type=1400 audit(1776797576.458:199): avc: denied { setopt } for pid=6278 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.462038][ T29] audit: type=1400 audit(1776797576.458:200): avc: denied { bind } for pid=6278 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.504620][ T29] audit: type=1400 audit(1776797576.478:201): avc: denied { name_bind } for pid=6278 comm="syz.1.108" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 100.528597][ T29] audit: type=1400 audit(1776797576.478:202): avc: denied { node_bind } for pid=6278 comm="syz.1.108" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 100.581322][ T29] audit: type=1400 audit(1776797576.478:203): avc: denied { write } for pid=6278 comm="syz.1.108" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.637565][ T29] audit: type=1400 audit(1776797576.478:204): avc: denied { connect } for pid=6278 comm="syz.1.108" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.689650][ T29] audit: type=1400 audit(1776797576.478:205): avc: denied { name_connect } for pid=6278 comm="syz.1.108" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 100.962077][ T6292] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 101.415063][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.004587][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.015147][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.025649][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.035173][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 102.044492][ T9] usb 4-1: SerialNumber: syz [ 102.553832][ T9] usb 4-1: 0:2 : does not exist [ 102.558895][ T9] usb 4-1: unit 149 not found! [ 102.597814][ T9] usb 4-1: USB disconnect, device number 5 [ 102.716178][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.817076][ T29] audit: type=1400 audit(1776797578.878:206): avc: denied { write } for pid=6310 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.904712][ T6315] process 'syz.2.115' launched '/dev/fd/8' with NULL argv: empty string added [ 102.921507][ T29] audit: type=1400 audit(1776797578.968:207): avc: denied { execute } for pid=6303 comm="syz.2.115" dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.078782][ T29] audit: type=1400 audit(1776797578.978:208): avc: denied { execute_no_trans } for pid=6303 comm="syz.2.115" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC94C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.269463][ T29] audit: type=1400 audit(1776797579.328:209): avc: denied { map } for pid=6319 comm="syz.4.119" path="socket:[11691]" dev="sockfs" ino=11691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 103.478735][ T6324] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 103.487686][ T29] audit: type=1400 audit(1776797579.558:210): avc: denied { mount } for pid=6322 comm="syz.2.122" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 103.527529][ T6324] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 103.537576][ T6324] overlayfs: failed to look up (tracing) for ino (-66) [ 103.576455][ T29] audit: type=1400 audit(1776797579.638:211): avc: denied { write } for pid=6326 comm="syz.3.121" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.418367][ T29] audit: type=1400 audit(1776797580.478:212): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.830140][ T802] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.861051][ T6343] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 105.221564][ T29] audit: type=1400 audit(1776797580.948:213): avc: denied { map } for pid=6338 comm="syz.2.125" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.281600][ T29] audit: type=1400 audit(1776797580.948:214): avc: denied { execute } for pid=6338 comm="syz.2.125" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.312594][ T29] audit: type=1400 audit(1776797581.328:215): avc: denied { mounton } for pid=6338 comm="syz.2.125" path="/28/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.392868][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.412554][ T802] usb 5-1: Using ep0 maxpacket: 32 [ 105.531307][ T802] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 105.572906][ T802] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 105.585744][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.596391][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.607769][ T6352] binder: 6349:6352 ioctl 400c620e 0 returned -14 [ 105.611031][ T802] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.627470][ T802] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 105.642496][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.653060][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 105.665970][ T802] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 105.675321][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.684369][ T9] usb 4-1: SerialNumber: syz [ 105.689131][ T802] usb 5-1: Product: syz [ 105.697301][ T802] usb 5-1: Manufacturer: syz [ 105.706115][ T802] usb 5-1: SerialNumber: syz [ 105.760652][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 105.781930][ T802] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input5 [ 106.074804][ T802] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 106.105355][ T802] (id 0x00) [ 106.252430][ T5901] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.266057][ T802] rc_core: IR keymap rc-imon-pad not found [ 106.275068][ T802] Registered IR keymap rc-empty [ 106.306774][ T802] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 106.389631][ T802] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 106.414766][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 106.475955][ T802] imon:send_packet: packet tx failed (-71) [ 106.503671][ T802] imon 5-1:155.0: remote input dev register failed [ 106.511699][ T802] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 106.581984][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.628479][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 106.637303][ T802] imon 5-1:155.0: unable to initialize intf0, err 0 [ 106.644302][ T5901] usb 2-1: can't read configurations, error -71 [ 106.650851][ T802] imon:imon_probe: failed to initialize context! [ 106.674224][ T802] imon 5-1:155.0: unable to register, err -19 [ 106.859677][ T802] usb 5-1: USB disconnect, device number 3 [ 107.683804][ T9] usb 4-1: 0:2 : does not exist [ 107.708493][ T9] usb 4-1: unit 149 not found! [ 107.857204][ T9] usb 4-1: USB disconnect, device number 6 [ 107.901643][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 107.901659][ T29] audit: type=1400 audit(1776797583.958:221): avc: denied { ioctl } for pid=6376 comm="syz.3.136" path="socket:[11834]" dev="sockfs" ino=11834 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.910894][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.046170][ T29] audit: type=1400 audit(1776797584.108:222): avc: denied { read } for pid=6378 comm="syz.1.138" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 108.071975][ T6381] sd 0:0:1:0: PR command failed: 1026 [ 108.111388][ T29] audit: type=1400 audit(1776797584.108:223): avc: denied { open } for pid=6378 comm="syz.1.138" path="/33/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 108.114769][ T6381] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 108.165983][ T29] audit: type=1400 audit(1776797584.128:224): avc: denied { ioctl } for pid=6378 comm="syz.1.138" path="/33/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 108.204863][ T6381] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 108.472075][ T6398] bridge_slave_0: left allmulticast mode [ 108.500205][ T6398] bridge_slave_0: left promiscuous mode [ 108.559651][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.633693][ T6398] bridge_slave_1: left allmulticast mode [ 109.051948][ T6398] bridge_slave_1: left promiscuous mode [ 109.058237][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.116982][ T6398] bond0: (slave bond_slave_0): Releasing backup interface [ 109.155217][ T6398] bond0: (slave bond_slave_1): Releasing backup interface [ 109.195082][ T6398] team0: Port device team_slave_0 removed [ 109.279662][ T29] audit: type=1400 audit(1776797585.328:225): avc: denied { setopt } for pid=6407 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.314726][ T6398] team0: Port device team_slave_1 removed [ 109.336582][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.344348][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.352540][ T5901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.465301][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.476693][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.491050][ T6398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.509786][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 109.543294][ T6411] bridge_slave_0: left allmulticast mode [ 109.559448][ T6411] bridge_slave_0: left promiscuous mode [ 109.577145][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.597738][ T6411] bridge_slave_1: left allmulticast mode [ 109.629501][ T6411] bridge_slave_1: left promiscuous mode [ 109.646665][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.665407][ T29] audit: type=1400 audit(1776797585.718:226): avc: denied { write } for pid=6417 comm="syz.2.148" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.771997][ T6411] bond0: (slave bond_slave_0): Releasing backup interface [ 109.798597][ T6411] bond0: (slave bond_slave_1): Releasing backup interface [ 109.813643][ T6411] team0: Port device team_slave_0 removed [ 109.823255][ T6411] team0: Port device team_slave_1 removed [ 109.829737][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.839961][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.887459][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.896335][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.918754][ T6411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.397184][ T29] audit: type=1400 audit(1776797586.458:227): avc: denied { bind } for pid=6435 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.418912][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 110.457077][ T5901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.466471][ T5901] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 110.483092][ T5901] usb 5-1: can't read configurations, error -71 [ 110.523135][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.530717][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.567908][ T6436] bridge0: entered promiscuous mode [ 110.585024][ T6436] bridge0: entered allmulticast mode [ 110.586496][ T6445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.685141][ T6447] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.725881][ T6447] kvm: pic: level sensitive irq not supported [ 110.731508][ T6447] kvm: pic: non byte read [ 110.744634][ T6447] kvm: pic: level sensitive irq not supported [ 110.744733][ T6447] kvm: pic: non byte read [ 110.756706][ T6447] kvm: pic: level sensitive irq not supported [ 110.756850][ T6447] kvm: pic: non byte read [ 110.916520][ T6457] binder: 6454:6457 ioctl 40406f06 200000000180 returned -22 [ 111.128887][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 111.159494][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 111.221932][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 111.235407][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 111.248299][ T71] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.257372][ T71] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.305133][ T71] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.327255][ T71] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.539317][ T6467] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 112.034999][ T29] audit: type=1400 audit(1776797588.098:228): avc: denied { getopt } for pid=6482 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.022565][ T5893] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.182568][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 113.319285][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.341641][ T5893] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 113.361308][ T5893] usb 3-1: can't read configurations, error -71 [ 113.709665][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 113.719009][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 113.804574][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 113.915220][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 114.030950][ T29] audit: type=1400 audit(1776797590.088:229): avc: denied { name_connect } for pid=6505 comm="syz.3.178" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 114.985093][ T5893] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.030583][ T29] audit: type=1400 audit(1776797591.088:230): avc: denied { write } for pid=6537 comm="syz.3.188" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.163923][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.186940][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.214797][ T5893] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.236012][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 115.250142][ T5893] usb 3-1: SerialNumber: syz [ 117.379145][ T6567] loop8: detected capacity change from 0 to 4 [ 117.417106][ T6567] Dev loop8: unable to read RDB block 4 [ 117.437761][ T6567] loop8: unable to read partition table [ 117.460736][ T6567] loop8: partition table beyond EOD, truncated [ 117.483289][ T6567] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.950815][ T5893] usb 3-1: 0:2 : does not exist [ 119.041355][ T5893] usb 3-1: unit 149 not found! [ 119.189281][ T6595] Set syz1 is full, maxelem 0 reached [ 119.363745][ T5893] usb 3-1: USB disconnect, device number 6 [ 120.098026][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.462528][ T29] audit: type=1400 audit(1776797597.478:231): avc: denied { setopt } for pid=6614 comm="syz.0.214" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.099736][ T29] audit: type=1400 audit(1776797598.138:232): avc: denied { read } for pid=6617 comm="syz.2.215" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 122.432751][ T29] audit: type=1400 audit(1776797598.138:233): avc: denied { open } for pid=6617 comm="syz.2.215" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 122.459973][ T29] audit: type=1400 audit(1776797598.148:234): avc: denied { ioctl } for pid=6617 comm="syz.2.215" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 122.842725][ T29] audit: type=1400 audit(1776797598.908:235): avc: denied { ioctl } for pid=6626 comm="syz.0.219" path="socket:[13502]" dev="sockfs" ino=13502 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.868151][ T5873] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.536205][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 123.717782][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.739949][ T5873] usb 4-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 123.751517][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.818267][ T5873] usb 4-1: Product: syz [ 124.135965][ T5873] usb 4-1: Manufacturer: syz [ 124.206659][ T5873] usb 4-1: SerialNumber: syz [ 124.274684][ T5873] usb 4-1: config 0 descriptor?? [ 125.008126][ T6623] netlink: 268 bytes leftover after parsing attributes in process `syz.3.216'. [ 125.038996][ T29] audit: type=1400 audit(1776797601.098:236): avc: denied { read } for pid=6620 comm="syz.3.216" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.058976][ T5954] usb 4-1: USB disconnect, device number 7 [ 125.069678][ T29] audit: type=1400 audit(1776797601.098:237): avc: denied { open } for pid=6620 comm="syz.3.216" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.208549][ T29] audit: type=1400 audit(1776797601.108:238): avc: denied { ioctl } for pid=6620 comm="syz.3.216" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.279087][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.464184][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.486207][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.508873][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.531925][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 125.558662][ T24] usb 1-1: SerialNumber: syz [ 125.862988][ T29] audit: type=1400 audit(1776797601.918:239): avc: denied { connect } for pid=6675 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.981370][ T6678] trusted_key: encrypted_key: insufficient parameters specified [ 127.522596][ T5954] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.649194][ T6698] binder: 6696:6698 ioctl 40406f06 200000000180 returned -22 [ 127.695471][ T5954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.726738][ T5954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.757729][ T5954] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.784840][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 127.793226][ T5954] usb 5-1: SerialNumber: syz [ 128.738097][ T24] usb 1-1: 0:2 : does not exist [ 128.758231][ T24] usb 1-1: unit 149 not found! [ 128.968496][ T24] usb 1-1: USB disconnect, device number 4 [ 129.937598][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.345153][ T5954] usb 5-1: 0:2 : does not exist [ 130.368188][ T5954] usb 5-1: unit 149 not found! [ 130.442781][ T5954] usb 5-1: USB disconnect, device number 6 [ 130.466297][ T6730] binder: 6721:6730 ioctl 400c620e 0 returned -14 [ 130.586723][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.846684][ T6736] 9p: Bad value for 'wfdno' [ 131.201258][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 131.296476][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.304213][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.325632][ T6740] bridge0: entered promiscuous mode [ 131.383353][ T6740] bridge0: entered allmulticast mode [ 132.602314][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.610275][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.322485][ T6787] binder: 6775:6787 ioctl 400c620e 0 returned -14 [ 134.717656][ T6799] netlink: 84 bytes leftover after parsing attributes in process `syz.3.272'. [ 134.913254][ T6806] netlink: 'syz.1.274': attribute type 3 has an invalid length. [ 135.197573][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 137.206318][ T29] audit: type=1400 audit(1776797613.268:240): avc: denied { write } for pid=6844 comm="syz.1.290" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 137.213966][ T6845] Bluetooth: MGMT ver 1.23 [ 137.229788][ T29] audit: type=1400 audit(1776797613.268:241): avc: denied { bind } for pid=6844 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.269164][ T29] audit: type=1400 audit(1776797613.268:242): avc: denied { write } for pid=6844 comm="syz.1.290" path="socket:[13099]" dev="sockfs" ino=13099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.305795][ T29] audit: type=1400 audit(1776797613.328:243): avc: denied { create } for pid=6844 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 137.321517][ T6845] fuse: Unknown parameter 'grou00000000000000000000' [ 137.333362][ T29] audit: type=1400 audit(1776797613.328:244): avc: denied { write } for pid=6844 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 137.382485][ T5901] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.393451][ T29] audit: type=1400 audit(1776797613.358:245): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.433945][ T29] audit: type=1400 audit(1776797613.358:246): avc: denied { open } for pid=5833 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.486155][ T29] audit: type=1400 audit(1776797613.368:247): avc: denied { ioctl } for pid=5833 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.563129][ T5901] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 137.584484][ T5901] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.067822][ T5901] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.077202][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.098676][ T5901] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.314591][ T29] audit: type=1400 audit(1776797614.378:248): avc: denied { ioctl } for pid=6860 comm="syz.0.295" path="socket:[13136]" dev="sockfs" ino=13136 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.314647][ T6861] : renamed from bond0 (while UP) [ 138.374552][ T5901] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 138.407571][ T5901] usb 3-1: USB disconnect, device number 7 [ 139.116377][ T802] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 139.276645][ T802] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.973128][ T29] audit: type=1400 audit(1776797616.028:249): avc: denied { mount } for pid=6867 comm="syz.0.297" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 140.518131][ T802] usb 5-1: not running at top speed; connect to a high speed hub [ 140.680767][ T6883] netlink: 84 bytes leftover after parsing attributes in process `syz.0.302'. [ 140.845464][ T6887] fuse: Unknown parameter 'grou00000000000000000000' [ 141.705691][ T6907] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 141.736523][ T6907] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 141.746541][ T6907] overlayfs: failed to look up (tracing) for ino (-66) [ 144.202364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 144.262358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 145.684994][ T802] usb 5-1: unable to read config index 0 descriptor/start: -110 [ 145.718002][ T802] usb 5-1: can't read configurations, error -110 [ 146.792036][ T6954] fuse: Unknown parameter 'group_i00000000000000000000' [ 148.889351][ T6991] netlink: 68 bytes leftover after parsing attributes in process `syz.1.337'. [ 149.097506][ T6998] fuse: Unknown parameter 'group_i00000000000000000000' [ 149.208926][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 151.736138][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 151.761424][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.761530][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 151.799257][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.864752][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.879650][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 151.971100][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.213356][ T5194] Dev loop8: unable to read RDB block 4 [ 152.271080][ T5194] loop8: unable to read partition table [ 152.325615][ T5194] loop8: partition table beyond EOD, truncated [ 154.145305][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'. [ 154.588458][ T7065] futex_wake_op: syz.2.358 tries to shift op by 144; fix this program [ 154.623313][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 154.623344][ T29] audit: type=1400 audit(1776797630.658:253): avc: denied { write } for pid=7056 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 155.146920][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.882545][ T5893] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.042445][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 156.067252][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.199999][ T5893] usb 2-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 156.222405][ T5954] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.643679][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.662124][ T5893] usb 2-1: Product: syz [ 156.677026][ T5893] usb 2-1: Manufacturer: syz [ 156.696198][ T5893] usb 2-1: SerialNumber: syz [ 156.728428][ T5893] usb 2-1: config 0 descriptor?? [ 156.822494][ T5954] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.850264][ T5954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.889272][ T5954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.952625][ T5954] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.971154][ T5954] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.982275][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.991836][ T5954] usb 4-1: Product: syz [ 157.007593][ T7075] netlink: 268 bytes leftover after parsing attributes in process `syz.1.363'. [ 157.013146][ T7089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.018079][ T5954] usb 4-1: Manufacturer: syz [ 157.126285][ T5954] cdc_wdm 4-1:1.0: skipping garbage [ 157.152177][ T24] usb 2-1: USB disconnect, device number 5 [ 157.166561][ T5954] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 157.746559][ T24] usb 4-1: USB disconnect, device number 8 [ 157.903644][ T5825] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.073978][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.106471][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.135835][ T5825] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.164607][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 158.189861][ T5825] usb 1-1: SerialNumber: syz [ 158.452790][ T5893] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 158.642602][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 158.755630][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.808827][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 158.853073][ T5893] usb 2-1: can't read configurations, error -71 [ 160.753351][ T5825] usb 1-1: 0:2 : does not exist [ 160.913512][ T7149] futex_wake_op: syz.4.387 tries to shift op by 144; fix this program [ 161.180896][ T5825] usb 1-1: unit 149 not found! [ 161.325237][ T7134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.381959][ T5825] usb 1-1: USB disconnect, device number 5 [ 161.433838][ T7042] udevd[7042]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.861560][ T7165] mmap: syz.4.391 (7165) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.582547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 163.010909][ T5825] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 163.193377][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 164.586440][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.606471][ T5825] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 164.614628][ T5825] usb 5-1: can't read configurations, error -71 [ 164.687025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.587236][ T7255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.425687][ T7272] netlink: 220 bytes leftover after parsing attributes in process `syz.2.420'. [ 171.435278][ T7272] netlink: 'syz.2.420': attribute type 2 has an invalid length. [ 173.077464][ T7282] netlink: 248 bytes leftover after parsing attributes in process `syz.4.421'. [ 173.270146][ T7285] netlink: 'syz.1.423': attribute type 10 has an invalid length. [ 173.285660][ T7285] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.343656][ T7290] netlink: 248 bytes leftover after parsing attributes in process `syz.4.425'. [ 174.169332][ T5952] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 174.335127][ T5952] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.348702][ T5952] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 174.365629][ T5952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.397057][ T5952] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.421233][ T5952] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.435310][ T7309] netlink: 'syz.4.431': attribute type 10 has an invalid length. [ 174.443988][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.456328][ T7309] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 174.464932][ T5952] usb 2-1: Product: syz [ 174.469563][ T5952] usb 2-1: Manufacturer: syz [ 174.509543][ T5952] cdc_wdm 2-1:1.0: skipping garbage [ 174.524507][ T5952] cdc_wdm 2-1:1.0: skipping garbage [ 174.553348][ T5952] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 174.564501][ T7311] kvm: pic: level sensitive irq not supported [ 174.564549][ T7311] kvm: pic: non byte read [ 174.598156][ T7311] kvm: pic: level sensitive irq not supported [ 174.598202][ T7311] kvm: pic: non byte read [ 174.625447][ T7311] kvm: pic: level sensitive irq not supported [ 174.625510][ T7311] kvm: pic: non byte read [ 174.653982][ T7311] kvm: pic: level sensitive irq not supported [ 174.654027][ T7311] kvm: pic: non byte read [ 174.676986][ T7311] kvm: pic: level sensitive irq not supported [ 174.677045][ T7311] kvm: pic: non byte read [ 174.698453][ T7311] kvm: pic: level sensitive irq not supported [ 174.698503][ T7311] kvm: pic: non byte read [ 174.730324][ T5952] usb 2-1: USB disconnect, device number 8 [ 174.748667][ T7311] kvm: pic: level sensitive irq not supported [ 174.748711][ T7311] kvm: pic: non byte read [ 174.848899][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 174.880190][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 174.922895][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 174.980000][ T7322] netlink: 'syz.0.437': attribute type 10 has an invalid length. [ 174.996728][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 175.029488][ T7322] : (slave wlan1): Enslaving as an active interface with an up link [ 175.051831][ T5194] Dev loop8: unable to read RDB block 4 [ 175.072670][ T5194] loop8: unable to read partition table [ 175.098088][ T5194] loop8: partition table beyond EOD, truncated [ 175.422554][ T5952] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 175.578716][ T5952] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.600570][ T1218] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 175.608138][ T5952] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.619707][ T5952] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.629748][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 175.638924][ T5952] usb 1-1: SerialNumber: syz [ 175.765663][ T1218] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 175.788606][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 175.800602][ T1218] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 175.814764][ T1218] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 175.824253][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.835478][ T1218] usb 3-1: config 0 descriptor?? [ 176.550408][ T7336] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 176.645263][ T7349] trusted_key: encrypted_key: insufficient parameters specified [ 177.088113][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.104113][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.122668][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.133092][ T5952] usb 1-1: 0:2 : does not exist [ 177.141703][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.149490][ T5952] usb 1-1: unit 149 not found! [ 177.163900][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.272400][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.286537][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.294088][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.301355][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.302755][ T5952] usb 1-1: USB disconnect, device number 6 [ 177.315824][ T1218] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 177.322466][ T29] audit: type=1400 audit(1776797653.388:254): avc: denied { create } for pid=7335 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.349432][ T1218] logitech 0003:046D:C294.0001: hidraw0: USB HID v0.01 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 177.350330][ T7042] udevd[7042]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.369373][ T1218] logitech 0003:046D:C294.0001: no inputs found [ 177.505863][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 177.527374][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 177.552543][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 177.561569][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 177.577338][ T5194] Dev loop8: unable to read RDB block 4 [ 177.583208][ T5194] loop8: unable to read partition table [ 177.591873][ T5194] loop8: partition table beyond EOD, truncated [ 177.672806][ T7370] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 177.681747][ T7370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.443'. [ 179.403841][ T24] usb 3-1: USB disconnect, device number 8 [ 180.600958][ T7396] kvm: kvm [7389]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000011d8 [ 180.612172][ T7396] kvm: kvm [7389]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x58b9 [ 180.624620][ T7396] kvm_intel: kvm [7389]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x513f [ 180.639841][ T7396] kvm: kvm [7389]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3109 [ 180.764076][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 180.854969][ T7404] netlink: 'syz.3.460': attribute type 10 has an invalid length. [ 180.977023][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.045015][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.110123][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.160750][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 181.313604][ T10] usb 5-1: SerialNumber: syz [ 181.776702][ T10] usb 5-1: 0:2 : does not exist [ 181.792668][ T10] usb 5-1: unit 149 not found! [ 181.920995][ T10] usb 5-1: USB disconnect, device number 11 [ 182.537689][ T7422] netlink: 'syz.4.466': attribute type 10 has an invalid length. [ 185.190437][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.474'. [ 185.593212][ T7442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.702554][ T5954] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 185.912985][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 186.348143][ T5954] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.363254][ T5954] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 186.381119][ T5954] usb 3-1: can't read configurations, error -71 [ 186.467009][ T29] audit: type=1400 audit(1776797662.528:255): avc: denied { read } for pid=7478 comm="syz.0.485" name="sg0" dev="devtmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.494728][ T29] audit: type=1400 audit(1776797662.558:256): avc: denied { open } for pid=7478 comm="syz.0.485" path="/dev/sg0" dev="devtmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.494884][ T7479] netlink: 'syz.0.485': attribute type 3 has an invalid length. [ 186.560196][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 187.183654][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 187.614367][ T7493] netlink: 'syz.0.489': attribute type 4 has an invalid length. [ 187.622203][ T7493] netlink: 152 bytes leftover after parsing attributes in process `syz.0.489'. [ 187.665191][ T7493] wlan1: mtu less than device minimum [ 187.698168][ T29] audit: type=1400 audit(1776797663.758:257): avc: denied { create } for pid=7486 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.163575][ T7499] bridge_slave_0: left allmulticast mode [ 188.169703][ T7499] bridge_slave_0: left promiscuous mode [ 188.177033][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.189590][ T7499] bridge_slave_1: left allmulticast mode [ 188.199250][ T7499] bridge_slave_1: left promiscuous mode [ 188.205304][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.253379][ T7499] bond0: (slave bond_slave_0): Releasing backup interface [ 188.299113][ T7499] bond0: (slave bond_slave_1): Releasing backup interface [ 188.364340][ T7499] team0: Port device team_slave_0 removed [ 188.379361][ T7499] team0: Port device team_slave_1 removed [ 188.390669][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.406000][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.425485][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.435169][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.445557][ T7499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.852397][ T5954] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.049519][ T5954] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 189.084034][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.109702][ T5954] usb 1-1: Product: syz [ 189.123245][ T5954] usb 1-1: Manufacturer: syz [ 189.137076][ T5954] usb 1-1: SerialNumber: syz [ 189.182281][ T29] audit: type=1400 audit(1776797665.238:258): avc: denied { create } for pid=7515 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.483576][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 189.612416][ T5893] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.623851][ T5954] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 189.729518][ T5954] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 189.860749][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 190.892426][ T802] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 190.942516][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 190.962614][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 190.968771][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 190.968834][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 190.974850][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 190.974926][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 191.086066][ T802] usb 3-1: unable to get BOS descriptor or descriptor too short [ 191.120315][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.128354][ T802] usb 3-1: not running at top speed; connect to a high speed hub [ 191.484890][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 191.495021][ T802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.519747][ T5893] usb 2-1: can't read configurations, error -71 [ 191.526474][ T802] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.543883][ T802] usb 3-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 191.567487][ T802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.588864][ T802] usb 3-1: Product: syz [ 191.600668][ T802] usb 3-1: Manufacturer: syz [ 191.618438][ T802] usb 3-1: SerialNumber: syz [ 192.080936][ T5954] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 192.109957][ T5954] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 192.126278][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 192.136194][ T5954] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 192.162980][ T5954] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 192.191035][ T5954] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 192.223087][ T5954] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 192.249772][ T5954] usb 1-1: USB disconnect, device number 7 [ 192.356221][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.374086][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.384730][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.395932][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 192.404638][ T24] usb 5-1: SerialNumber: syz [ 193.242351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 193.787561][ T24] usb 5-1: 0:2 : does not exist [ 193.806827][ T24] usb 5-1: unit 149 not found! [ 193.933712][ T24] usb 5-1: USB disconnect, device number 12 [ 194.017400][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.028838][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.172719][ T5893] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 194.188632][ T7556] netlink: 'syz.1.512': attribute type 4 has an invalid length. [ 194.196567][ T7556] netlink: 152 bytes leftover after parsing attributes in process `syz.1.512'. [ 194.206297][ T7556] wlan1: mtu less than device minimum [ 194.399775][ T802] usb 3-1: USB disconnect, device number 11 [ 194.536285][ T7558] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 194.547505][ T5893] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.564624][ T5893] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 194.603124][ T5893] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.620619][ T5893] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.636402][ T5893] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.759089][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.779401][ T5893] usb 4-1: Product: syz [ 195.233666][ T5893] usb 4-1: Manufacturer: syz [ 195.243920][ T5893] cdc_wdm 4-1:1.0: skipping garbage [ 195.257846][ T5893] cdc_wdm 4-1:1.0: skipping garbage [ 195.266169][ T5893] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 195.529068][ T802] usb 4-1: USB disconnect, device number 9 [ 195.643825][ T5893] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.894790][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 196.100268][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.127002][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 196.145738][ T5893] usb 1-1: can't read configurations, error -71 [ 196.922564][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 197.082397][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 197.089395][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.102159][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'. [ 197.113329][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 197.132602][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.164482][ T24] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 197.174448][ T24] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 197.182570][ T24] usb 5-1: Product: syz [ 197.186880][ T24] usb 5-1: Manufacturer: syz [ 197.191486][ T24] usb 5-1: SerialNumber: syz [ 197.198141][ T24] usb 5-1: config 0 descriptor?? [ 197.672406][ T24] rc_core: IR keymap rc-imon-rsc not found [ 197.672410][ T5893] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 197.686350][ T24] Registered IR keymap rc-empty [ 197.699956][ T24] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 197.714286][ T24] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 197.757677][ T24] usb 5-1: USB disconnect, device number 13 [ 197.839387][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 197.948827][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 197.961321][ T5893] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 197.978622][ T5893] usb 1-1: config 0 has no interface number 0 [ 197.995934][ T5893] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 198.010622][ T5893] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.023038][ T5893] usb 1-1: config 0 interface 113 has no altsetting 0 [ 198.039964][ T5893] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 198.049361][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.058590][ T5893] usb 1-1: Product: syz [ 198.067707][ T5893] usb 1-1: Manufacturer: syz [ 198.072690][ T5893] usb 1-1: SerialNumber: syz [ 198.186443][ T29] audit: type=1400 audit(1776797674.238:259): avc: denied { write } for pid=7617 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.187583][ T5893] usb 1-1: config 0 descriptor?? [ 198.250362][ T7620] netlink: 'syz.1.531': attribute type 4 has an invalid length. [ 198.258468][ T7620] netlink: 152 bytes leftover after parsing attributes in process `syz.1.531'. [ 198.270750][ T7620] wlan1: mtu less than device minimum [ 198.500267][ T7622] fuse: Unknown parameter 'group_id00000000000000000000' [ 198.554196][ C0] usb 1-1: NFC: Urb failure (status -71) [ 198.561077][ T5893] usb 1-1: NFC: Unable to get FW version [ 198.575290][ T5893] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 199.232438][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 199.392381][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 199.496318][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.517221][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 199.530564][ T24] usb 2-1: can't read configurations, error -71 [ 200.141346][ T7655] netlink: 48 bytes leftover after parsing attributes in process `syz.4.543'. [ 200.232744][ T5952] usb 1-1: USB disconnect, device number 10 [ 200.259433][ T5840] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 200.269275][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 200.269306][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.269324][ T5840] Workqueue: hci2 hci_rx_work [ 200.269370][ T5840] Call Trace: [ 200.269378][ T5840] [ 200.269386][ T5840] dump_stack_lvl+0x100/0x190 [ 200.269421][ T5840] sysfs_warn_dup.cold+0x1c/0x28 [ 200.269455][ T5840] sysfs_create_dir_ns+0x24b/0x2b0 [ 200.269482][ T5840] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 200.269514][ T5840] ? find_held_lock+0x2b/0x80 [ 200.269535][ T5840] ? kobject_add_internal+0x25f/0x930 [ 200.269571][ T5840] ? kobject_add_internal+0x25f/0x930 [ 200.269608][ T5840] ? do_raw_spin_unlock+0x145/0x1e0 [ 200.269642][ T5840] kobject_add_internal+0x2c8/0x930 [ 200.269680][ T5840] kobject_add+0x16a/0x1e0 [ 200.269715][ T5840] ? __pfx_kobject_add+0x10/0x10 [ 200.269745][ T5840] ? preempt_schedule_thunk+0x16/0x30 [ 200.269784][ T5840] ? kobject_put+0xb9/0x640 [ 200.269812][ T5840] ? _raw_spin_unlock+0x3e/0x50 [ 200.269843][ T5840] device_add+0x294/0x1950 [ 200.269878][ T5840] ? __pfx_dev_set_name+0x10/0x10 [ 200.269902][ T5840] ? __pfx_device_add+0x10/0x10 [ 200.269936][ T5840] ? mgmt_send_event_skb+0x2fb/0x460 [ 200.269973][ T5840] hci_conn_add_sysfs+0x1a3/0x260 [ 200.270005][ T5840] le_conn_complete_evt+0x11eb/0x1f60 [ 200.270043][ T5840] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 200.270080][ T5840] hci_le_conn_complete_evt+0x23c/0x3a0 [ 200.270110][ T5840] ? skb_pull_data+0x15f/0x1e0 [ 200.270137][ T5840] hci_le_meta_evt+0x34a/0x5f0 [ 200.270166][ T5840] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 200.270199][ T5840] hci_event_packet+0x51c/0xcd0 [ 200.270227][ T5840] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 200.270256][ T5840] ? __pfx_hci_event_packet+0x10/0x10 [ 200.270287][ T5840] ? kcov_remote_start+0x374/0x660 [ 200.270312][ T5840] ? lockdep_hardirqs_on+0x78/0x100 [ 200.270346][ T5840] hci_rx_work+0x451/0xfc0 [ 200.270379][ T5840] process_one_work+0xa0e/0x1980 [ 200.270421][ T5840] ? __pfx_process_one_work+0x10/0x10 [ 200.270458][ T5840] ? __pfx_hci_rx_work+0x10/0x10 [ 200.270489][ T5840] worker_thread+0x5ef/0xe50 [ 200.270537][ T5840] ? kthread+0x13a/0x450 [ 200.270562][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 200.270590][ T5840] kthread+0x370/0x450 [ 200.270615][ T5840] ? __pfx_kthread+0x10/0x10 [ 200.270643][ T5840] ret_from_fork+0x72b/0xd50 [ 200.270673][ T5840] ? __pfx_ret_from_fork+0x10/0x10 [ 200.270703][ T5840] ? __switch_to+0x800/0x1100 [ 200.270735][ T5840] ? __pfx_kthread+0x10/0x10 [ 200.270762][ T5840] ret_from_fork_asm+0x1a/0x30 [ 200.270807][ T5840] [ 200.270955][ T5840] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 200.559108][ T29] audit: type=1400 audit(1776797676.318:260): avc: denied { listen } for pid=7657 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 200.593357][ T5840] Bluetooth: hci2: failed to register connection device [ 202.842440][ T5952] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 203.014285][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 203.026721][ T5952] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 203.043571][ T5952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.062436][ T5952] usb 3-1: config 0 has no interface number 0 [ 203.069012][ T5952] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 203.080175][ T5952] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 203.090153][ T5952] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 203.100745][ T5952] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 203.143826][ T5952] usb 3-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 203.174486][ T5952] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 203.184744][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.283380][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 203.348281][ T5952] usb 3-1: Product: syz [ 203.352529][ T5952] usb 3-1: Manufacturer: syz [ 203.357128][ T5952] usb 3-1: SerialNumber: syz [ 203.366383][ T5952] usb 3-1: config 0 descriptor?? [ 203.376119][ T7673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.854564][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.872423][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.876663][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.895209][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.898446][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.917873][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.924701][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 203.930644][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.956326][ T10] usb 1-1: SerialNumber: syz [ 203.958271][ T5952] usb 3-1: NFC: intf ffff88802e3c7000 id ffffffff8f7db4a0 [ 204.050192][ T5952] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 204.075155][ T5952] usb 3-1: USB disconnect, device number 12 [ 204.110475][ T5952] usb 3-1: NFC: intf ffff88802e3c7000 [ 204.487103][ T7699] trusted_key: encrypted_key: insufficient parameters specified [ 205.562646][ T10] usb 1-1: 0:2 : does not exist [ 205.577369][ T10] usb 1-1: unit 149 not found! [ 206.814808][ T802] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 206.831058][ T10] usb 1-1: USB disconnect, device number 11 [ 207.338764][ T7710] netlink: 'syz.2.557': attribute type 4 has an invalid length. [ 207.346815][ T7710] netlink: 152 bytes leftover after parsing attributes in process `syz.2.557'. [ 207.356975][ T7710] wlan1: mtu less than device minimum [ 207.581885][ T7042] udevd[7042]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.691013][ T802] usb 2-1: Using ep0 maxpacket: 32 [ 207.698152][ T802] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 207.724053][ T802] usb 2-1: config 0 has no interface number 0 [ 207.745708][ T802] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 207.774849][ T802] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 207.797508][ T802] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 207.821598][ T802] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 207.839020][ T802] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 208.020224][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 208.028732][ T802] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.197961][ T802] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 208.213216][ T802] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 208.226499][ T802] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.275815][ T802] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 208.295539][ T802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.304044][ T802] usb 2-1: Product: syz [ 208.308237][ T802] usb 2-1: Manufacturer: syz [ 208.326797][ T802] usb 2-1: SerialNumber: syz [ 208.356164][ T7728] netlink: 220 bytes leftover after parsing attributes in process `syz.2.562'. [ 208.357156][ T802] usb 2-1: config 0 descriptor?? [ 208.372184][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.382271][ T10] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 208.403575][ T7703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.417218][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.426578][ T7703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.434241][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.448435][ T802] usb 2-1: will this work? Response EP is not usually 3 [ 208.458198][ T802] usb 2-1: will this work? Image data EP is not usually 2 [ 208.468079][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.479791][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.487871][ T10] usb 1-1: Product: syz [ 208.493329][ T802] scsi host1: microtekX6 [ 208.502366][ T10] usb 1-1: Manufacturer: syz [ 208.524915][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 208.533308][ T802] usb 2-1: USB disconnect, device number 13 [ 208.566884][ T5159] usb 2-1: error -19 submitting URB [ 208.612415][ T5159] usb 2-1: error -19 submitting URB [ 208.856975][ T5825] usb 1-1: USB disconnect, device number 12 [ 209.799537][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 209.874566][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 209.893359][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 209.902867][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 209.919321][ T5194] Dev loop8: unable to read RDB block 4 [ 209.935241][ T5194] loop8: unable to read partition table [ 209.945289][ T5194] loop8: partition table beyond EOD, truncated [ 210.234060][ T802] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 210.512405][ T802] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.538364][ T802] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 210.554851][ T7759] fuse: Unknown parameter '0x000000000000001000000000000000000000' [ 210.565910][ T802] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.604744][ T802] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 210.623509][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 210.637928][ T802] usb 5-1: Product: syz [ 210.647849][ T802] usb 5-1: Manufacturer: syz [ 210.652674][ T802] usb 5-1: SerialNumber: syz [ 210.812390][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.892792][ T802] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 210.974307][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.004378][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.031795][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.049251][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 211.073494][ T24] usb 1-1: SerialNumber: syz [ 211.130119][ T29] audit: type=1400 audit(1776797687.188:261): avc: denied { read write } for pid=7748 comm="syz.4.567" name="lp0" dev="devtmpfs" ino=2942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 211.137274][ T802] usb 5-1: USB disconnect, device number 14 [ 211.219217][ T29] audit: type=1400 audit(1776797687.188:262): avc: denied { open } for pid=7748 comm="syz.4.567" path="/dev/usb/lp0" dev="devtmpfs" ino=2942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 211.229361][ T802] usblp0: removed [ 212.185520][ T802] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 212.624884][ T7787] netlink: 'syz.1.578': attribute type 4 has an invalid length. [ 212.632756][ T7787] netlink: 152 bytes leftover after parsing attributes in process `syz.1.578'. [ 212.642473][ T7787] wlan1: mtu less than device minimum [ 212.801392][ T5952] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 213.023900][ T802] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.102202][ T802] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 213.118026][ T802] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.161660][ T802] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.195847][ T802] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.207391][ T802] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.214878][ T5952] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.228649][ T5952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.241948][ T5952] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.254595][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 213.265233][ T5952] usb 5-1: SerialNumber: syz [ 213.316649][ T802] usb 3-1: Product: syz [ 213.331487][ T802] usb 3-1: Manufacturer: syz [ 213.357481][ T802] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 213.449738][ T24] usb 1-1: 0:2 : does not exist [ 213.464792][ T24] usb 1-1: unit 149 not found! [ 213.505946][ T24] usb 1-1: USB disconnect, device number 13 [ 213.706016][ T5901] usb 3-1: USB disconnect, device number 13 [ 213.728702][ T7042] udevd[7042]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.040412][ T7801] fuse: Unknown parameter '0x000000000000001000000000000000000000' [ 214.044894][ T5952] usb 5-1: 0:2 : does not exist [ 214.056375][ T5952] usb 5-1: unit 149 not found! [ 214.098801][ T5952] usb 5-1: USB disconnect, device number 15 [ 214.132051][ T7042] udevd[7042]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.362433][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 215.370153][ T5952] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 215.453138][ T802] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 215.618527][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.638211][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.735777][ T802] usb 1-1: Using ep0 maxpacket: 16 [ 215.801114][ T24] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 215.813487][ T5952] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.822997][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.831004][ T5952] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 215.843013][ T5952] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.852049][ T5952] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.867753][ T24] usb 4-1: config 0 descriptor?? [ 215.889966][ T5952] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 215.895819][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 215.912536][ T7825] kvm_intel: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 215.922618][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956 [ 215.931797][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5 [ 215.943217][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x61ea [ 215.952908][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939 [ 215.961532][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 215.970759][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4a56 [ 215.981346][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8 [ 215.994265][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2262 [ 216.002327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 216.002892][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 216.024122][ T7825] kvm_intel: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2 [ 216.102331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 216.202350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 216.302336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 216.652337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 219.067936][ T7825] kvm_intel: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa43 [ 220.885877][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 221.058029][ T7825] kvm_pr_unimpl_wrmsr: 7 callbacks suppressed [ 221.058043][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x40e2 [ 221.073537][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1ec [ 221.082612][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x41f1 [ 221.091533][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x181f [ 221.103032][ T7825] kvm_intel: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x17b [ 222.890393][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000059ea [ 222.903245][ T7825] kvm_intel: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x8b3 [ 222.913263][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x69d2 [ 222.921856][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 222.931817][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2242 [ 222.940635][ T7825] kvm: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x18c4 [ 222.950775][ T7825] kvm_intel: kvm [7824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x59c7 [ 255.446108][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.922313][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 320.929368][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7826/1:b..l [ 320.937935][ C1] rcu: (detected by 1, t=10502 jiffies, g=27825, q=527 ncpus=2) [ 320.945659][ C1] task:syz.4.591 state:R running task stack:26152 pid:7826 tgid:7824 ppid:5833 task_flags:0x400040 flags:0x00080000 [ 320.960076][ C1] Call Trace: [ 320.963362][ C1] [ 320.966306][ C1] __schedule+0x10e9/0x6820 [ 320.970845][ C1] ? __pfx___schedule+0x10/0x10 [ 320.975703][ C1] ? rcu_is_watching+0x12/0xc0 [ 320.980489][ C1] preempt_schedule_irq+0x50/0x90 [ 320.985521][ C1] irqentry_exit+0x1fe/0x790 [ 320.990120][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.996127][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 321.001354][ C1] Code: 05 3b 92 2e 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 46 b0 f6 0e 0f 82 a4 02 00 00 8b 35 ce e3 f6 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 91 2e 12 0f 85 ed 02 00 00 48 83 c4 [ 321.020972][ C1] RSP: 0018:ffffc9000509f1b8 EFLAGS: 00000206 [ 321.027164][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 321.035158][ C1] RDX: 0000000000000000 RSI: ffffffff8df33fcc RDI: ffffffff8c1c1f00 [ 321.043146][ C1] RBP: ffffffff8e7e5460 R08: 0000000086db7919 R09: 0000000000000007 [ 321.051116][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 321.059097][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.067089][ C1] ? unwind_next_frame+0x3be/0x2090 [ 321.072307][ C1] ? unwind_next_frame+0x3be/0x2090 [ 321.077523][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 321.083684][ C1] unwind_next_frame+0xd1/0x2090 [ 321.088639][ C1] ? unwind_next_frame+0xbd/0x2090 [ 321.093758][ C1] ? __fput+0x519/0xb50 [ 321.097929][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 321.104090][ C1] arch_stack_walk+0x94/0xf0 [ 321.108697][ C1] ? __fput+0x519/0xb50 [ 321.112869][ C1] stack_trace_save+0x8e/0xc0 [ 321.117552][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 321.122933][ C1] ? __lock_acquire+0x4a5/0x2630 [ 321.127886][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.133694][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 321.138897][ C1] save_stack+0x162/0x1e0 [ 321.143229][ C1] ? __pfx_save_stack+0x10/0x10 [ 321.148089][ C1] ? free_unref_folios+0xa0d/0x16f0 [ 321.153304][ C1] ? folios_put_refs+0x571/0xa90 [ 321.158263][ C1] ? shmem_undo_range+0x5e5/0x1570 [ 321.163391][ C1] ? shmem_evict_inode+0x3f3/0xc40 [ 321.168519][ C1] ? evict+0x3c2/0xad0 [ 321.172599][ C1] ? iput.part.0+0x605/0xf50 [ 321.177202][ C1] ? iput+0x35/0x40 [ 321.181024][ C1] ? dentry_unlink_inode+0x2a1/0x490 [ 321.186315][ C1] ? __dentry_kill+0x1d0/0x600 [ 321.191091][ C1] ? finish_dput+0x76/0x480 [ 321.195607][ C1] ? dput.part.0+0x456/0x570 [ 321.200203][ C1] ? dput+0x1f/0x30 [ 321.204019][ C1] ? __fput+0x519/0xb50 [ 321.208189][ C1] ? page_ext_put+0x3e/0xd0 [ 321.212707][ C1] __reset_page_owner+0x84/0x190 [ 321.217663][ C1] free_unref_folios+0xa0d/0x16f0 [ 321.222700][ C1] ? __print_lock_name+0x60/0x80 [ 321.227641][ C1] ? folios_put_refs+0x50a/0xa90 [ 321.232591][ C1] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 321.238410][ C1] folios_put_refs+0x571/0xa90 [ 321.243193][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 321.248501][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 321.254846][ C1] shmem_undo_range+0x5e5/0x1570 [ 321.259807][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 321.265219][ C1] ? find_held_lock+0x2b/0x80 [ 321.269906][ C1] ? rcu_read_unlock+0x17/0x60 [ 321.274675][ C1] ? rcu_read_unlock+0x17/0x60 [ 321.279472][ C1] ? find_held_lock+0x2b/0x80 [ 321.284151][ C1] ? folio_batch_move_lru+0x32b/0x7d0 [ 321.289537][ C1] ? percpu_counter_add_batch+0xb9/0x230 [ 321.295192][ C1] shmem_evict_inode+0x3f3/0xc40 [ 321.300154][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 321.305887][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 321.311367][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 321.317443][ C1] ? find_held_lock+0x2b/0x80 [ 321.322118][ C1] ? evict+0x37e/0xad0 [ 321.326202][ C1] ? evict+0x37e/0xad0 [ 321.330292][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 321.335767][ C1] evict+0x3c2/0xad0 [ 321.339680][ C1] ? find_held_lock+0x2b/0x80 [ 321.344357][ C1] ? __pfx_evict+0x10/0x10 [ 321.348788][ C1] ? iput.part.0+0x5fd/0xf50 [ 321.353398][ C1] iput.part.0+0x605/0xf50 [ 321.357838][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 321.363128][ C1] iput+0x35/0x40 [ 321.366777][ C1] dentry_unlink_inode+0x2a1/0x490 [ 321.371902][ C1] __dentry_kill+0x1d0/0x600 [ 321.376511][ C1] finish_dput+0x76/0x480 [ 321.380874][ C1] dput.part.0+0x456/0x570 [ 321.385305][ C1] dput+0x1f/0x30 [ 321.388941][ C1] __fput+0x519/0xb50 [ 321.392935][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.398147][ C1] task_work_run+0x150/0x240 [ 321.402749][ C1] ? __pfx_task_work_run+0x10/0x10 [ 321.407866][ C1] ? rcu_is_watching+0x12/0xc0 [ 321.412645][ C1] exit_to_user_mode_loop+0x100/0x4a0 [ 321.418022][ C1] ? do_syscall_64+0x52d/0xf80 [ 321.422799][ C1] do_syscall_64+0x706/0xf80 [ 321.427391][ C1] ? clear_bhb_loop+0x40/0x90 [ 321.432079][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.437975][ C1] RIP: 0033:0x7ff86f79c819 [ 321.442408][ C1] RSP: 002b:00007ff8706d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 321.450829][ C1] RAX: 0000200000000000 RBX: 00007ff86fa16090 RCX: 00007ff86f79c819 [ 321.458793][ C1] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 321.466764][ C1] RBP: 00007ff86f832c91 R08: 0000000000000005 R09: 0000000000000000 [ 321.474732][ C1] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 321.482703][ C1] R13: 00007ff86fa16128 R14: 00007ff86fa16090 R15: 00007ffc41bc1928 [ 321.490781][ C1] [ 321.493815][ C1] rcu: rcu_preempt kthread starved for 10347 jiffies! g27825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 321.505014][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 321.514983][ C1] rcu: RCU grace-period kthread stack dump: [ 321.520860][ C1] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 321.534373][ C1] Call Trace: [ 321.537648][ C1] [ 321.540589][ C1] __schedule+0x10e9/0x6820 [ 321.545129][ C1] ? __pfx___schedule+0x10/0x10 [ 321.549987][ C1] ? find_held_lock+0x2b/0x80 [ 321.554666][ C1] ? schedule+0x2bf/0x390 [ 321.559012][ C1] schedule+0xdd/0x390 [ 321.563085][ C1] schedule_timeout+0x127/0x280 [ 321.567937][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 321.573315][ C1] ? __pfx_process_timeout+0x10/0x10 [ 321.578604][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 321.584415][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 321.589891][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 321.594668][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 321.599965][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 321.605439][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 321.610378][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 321.615583][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.621395][ C1] rcu_gp_kthread+0x179/0x230 [ 321.626086][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 321.631289][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.637107][ C1] ? __kthread_parkme+0x18c/0x230 [ 321.642134][ C1] ? kthread+0x13a/0x450 [ 321.646386][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 321.651591][ C1] kthread+0x370/0x450 [ 321.655667][ C1] ? __pfx_kthread+0x10/0x10 [ 321.660267][ C1] ret_from_fork+0x72b/0xd50 [ 321.664873][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 321.669997][ C1] ? __switch_to+0x800/0x1100 [ 321.674686][ C1] ? __pfx_kthread+0x10/0x10 [ 321.679290][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.684092][ C1] [ 321.687108][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 321.693429][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 321.702372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.712425][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 321.718074][ C1] Code: e6 86 02 e9 83 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 60 11 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 321.737688][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 321.743761][ C1] RAX: 0000000000b483f9 RBX: ffff88801e2d2500 RCX: ffffffff8b9a3045 [ 321.751741][ C1] RDX: 0000000000000000 RSI: ffffffff8df59515 RDI: ffffffff8c1c1f00 [ 321.759713][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 321.767681][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 321.775740][ C1] R13: ffffed1003c5a4a0 R14: 0000000000000001 R15: ffffffff90dc0e50 [ 321.783719][ C1] FS: 0000000000000000(0000) GS:ffff8881243e1000(0000) knlGS:0000000000000000 [ 321.792644][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.799228][ C1] CR2: 00007f69e6a8932f CR3: 000000002a3be000 CR4: 00000000003526f0 [ 321.807203][ C1] Call Trace: [ 321.810476][ C1] [ 321.813405][ C1] default_idle+0x9/0x10 [ 321.817664][ C1] default_idle_call+0x6c/0xb0 [ 321.822434][ C1] do_idle+0x464/0x590 [ 321.826510][ C1] ? __pfx_do_idle+0x10/0x10 [ 321.831108][ C1] cpu_startup_entry+0x4f/0x60 [ 321.835871][ C1] start_secondary+0x21d/0x2d0 [ 321.840642][ C1] ? __pfx_start_secondary+0x10/0x10 [ 321.845941][ C1] common_startup_64+0x13e/0x148 [ 321.850907][ C1]