last executing test programs: 22m46.594871628s ago: executing program 2 (id=783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000003000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000300)={0x9, 0x1, {0x1, 0x1, 0x0, 0x3, 0x40}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r6, 0x0, 0x0, 0x0, 0x80000, 0x2}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001400)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80, 0x0}}], 0x1, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000e27a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000001500000018010000756c207b1af8ff00000000bfa100000000000007010000f8ffe4ffb7020000080000000703b8000100000085000000060000009500"/136], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x14000, 0x0) syz_clone(0x10004400, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='scalable\x00', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timerfd_create(0x9, 0x1800) 22m41.62275349s ago: executing program 2 (id=793): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendto$inet(r1, 0x0, 0x43, 0x200007fd, &(0x7f0000000040)={0x2, 0x4c23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB]}, 0x78) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1ff}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x3}, @ldst={0x1, 0x3, 0x0, 0x4, 0x4, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x14, '\x00', r2, 0x17, r0, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1dd3d, r0, 0x4, &(0x7f0000000480)=[r0, r0, r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f00000004c0)=[{0x2, 0x4, 0x8, 0xa}, {0x5, 0x4, 0xc, 0xa}, {0x2, 0x5, 0x8, 0xb}, {0x1, 0x1, 0x12, 0x9}], 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r3, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair(0x2a, 0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000002240)) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='nilfs2\x00', 0x0, 0x0) 22m39.226068499s ago: executing program 2 (id=800): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0x2010, r1, 0x127d0000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0) close(r2) r3 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r3, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x50, 0x2, 0x0, 0x4}, {0x6, 0xff}]}) write$ppp(r0, &(0x7f0000000280)="0148", 0x2) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000103afffe800000000000000000000000000000ff0200000000000000000000000000018600907800"/70], 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 22m36.823512127s ago: executing program 2 (id=804): r0 = syz_io_uring_setup(0x1748, &(0x7f0000000080)={0x0, 0x0, 0x3e00}, &(0x7f0000000100), &(0x7f0000001000)) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_off}]}) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xcb0a) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r4, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000856000/0x3000)=nil, 0x3000}, 0x1000000}) chdir(&(0x7f0000000140)='./bus\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x7fffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x54) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 22m35.134149358s ago: executing program 2 (id=810): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x4f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f00000002c0)=0x3f00) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 22m34.354895472s ago: executing program 2 (id=814): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r3, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 22m33.597662966s ago: executing program 32 (id=814): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r3, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18m46.962663925s ago: executing program 3 (id=993): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x4600c}, 0x400c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000005500000008000300", @ANYRES32=r5], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x208, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x55}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}}, 0x24040804) ioprio_set$pid(0x3, 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40100) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) splice(r6, 0x0, r8, 0x0, 0x1000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x66) rmdir(&(0x7f0000000040)='./file0\x00') r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x111143, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)=0x3) 18m45.368096914s ago: executing program 3 (id=1000): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) close(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000100)=0xffffffffffffff94) getresgid(&(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) fchown(0xffffffffffffffff, r3, r5) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) sched_setaffinity(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(0xffffffffffffffff, &(0x7f00000003c0)=""/182, 0xb6) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES64=r4], 0x38}}, 0x810) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) r9 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x358, 0x7fffffffefff) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 18m41.670416186s ago: executing program 3 (id=1007): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x54, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1080}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf519}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8461}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x80000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x44856}, 0x4015) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 18m39.71615531s ago: executing program 3 (id=1009): syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @rr={0x7, 0x1f, 0x2c, [@multicast2, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @empty, @broadcast, @local, @loopback]}]}}}}}}}, 0x0) 18m36.594339456s ago: executing program 3 (id=1014): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0x2010, r1, 0x127d0000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0) close(r2) r3 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r3, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x50, 0x2, 0x0, 0x4}, {0x6, 0xff}]}) write$ppp(r0, &(0x7f0000000280)="0148", 0x2) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000103afffe800000000000000000000000000000ff0200000000000000000000000000018600907800"/70], 0x0) r8 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 18m32.798156769s ago: executing program 3 (id=1021): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r0, @ANYBLOB="0198000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="95"], 0x48}}, 0x4000080) 18m23.048772066s ago: executing program 4 (id=1034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) r4 = io_uring_setup(0x4687, &(0x7f0000000000)={0x0, 0x6c6, 0x8000, 0x1, 0x245}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c481, 0x0) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000300)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x8}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000240)={0xdc, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/200, 0xc8}], &(0x7f0000000200)=[0x1, 0x9], 0x1}, 0x20) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 18m21.991489654s ago: executing program 4 (id=1039): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x54, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1080}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf519}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8461}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x80000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x44856}, 0x4015) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 18m17.584197306s ago: executing program 33 (id=1021): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r0, @ANYBLOB="0198000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="95"], 0x48}}, 0x4000080) 18m17.458056213s ago: executing program 4 (id=1044): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x58, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1080}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf519}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8461}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x80000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x44856}, 0x4015) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 18m15.01403208s ago: executing program 4 (id=1047): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1300800010f15500"/20, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES64=r3, @ANYRES32, @ANYRESHEX=r3], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000fdffffff18000000", @ANYRES32, @ANYBLOB="00000000000000002f090ffdef9866bd3438cff16549990000000010000018540000ffffffff00000000000000009500000c000000009500007000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="e16e9a36e13bb25b0e94040961c745d63d33cfa01c4614b4b097705cc10aafe59ff581a53b2a6c93b31ec0f50d791f69ba72744f863b4637263347619565ff090b4b8aaac2cad893d5435fca1cabf3881ddff6a88f7c477277671c57e4dd84"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)='\n', 0x1}], 0x1, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x2200000, &(0x7f0000000680)={[{@subsystem='cpuacct'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}%/-@+\x8a-::}\\\a@]\\*!}@:'}}, {@euid_lt}, {@uid_gt}, {@flag='nomand'}, {@appraise}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@audit}, {@subj_type={'subj_type', 0x3d, '/proc/sys/fs/binfmt_misc/register\x00'}}, {@subj_role={'subj_role', 0x3d, ')'}}]}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(0x0, 0x101, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x330b) syz_open_dev$MSR(0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000030000000000000300060000000e0002000000e0000009000000000000000002000100000004d60000000200000000030005000000000002000000e0000001000000e600000000"], 0x50}}, 0x0) 18m9.111686888s ago: executing program 4 (id=1050): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f000087b000/0x2000)=nil, 0x2000, 0xb, 0x50, r1, 0x186ee000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0) close(r2) r3 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r3, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{0x50, 0x5, 0x0, 0x4}, {0x6, 0xff}]}) write$ppp(r0, &(0x7f0000000280)="0148", 0x2) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000103afffe800000000000000000000000000000ff0200000000000000000000000000018600907800"/70], 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 18m6.97231298s ago: executing program 4 (id=1053): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x6, 0xd4, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x0, 0x80, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x5, "e4e7a32cc8062a52e5"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xff, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x1, 0x6, "", "bc22"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x3, 0xa, 0x5, "7b16"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfa, 0x0, 0xb, {0x7, 0x25, 0x1, 0x0, 0xd, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x64, 0x2, 0x5, 0x80, "434bdf", "fb46"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x800, 0x4b, "c227253117"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0xee, "dbe1"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x10, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x1, 0x85, "", "7bf4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x80, 0x5, {0x7, 0x25, 0x1, 0x80, 0x2, 0x1ae7}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x5, 0x3, 0x40, 0x1}, 0x41, &(0x7f0000000440)={0x5, 0xf, 0x41, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "5d2d377c6dd0a5105cec5bf9821909b1"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "5e027037e96b08db966e68757c968ded"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x61, 0xa, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xf, 0x2, 0x1}, @ptm_cap={0x3}]}, 0x3, [{0x91, &(0x7f0000000540)=@string={0x91, 0x3, "828c1c81469dae806afd7c8bcd3594f0ee9c6a96af6fcc6efd4e06572a973751aa57f1268f0a5fc9c179e1484d358bd842f69f02b9b74669bb54c0e482fb9ee1332e398a3f88e4805de0ecf2068f519b11fc193917ea02bade4afc7eb0083ce440f3d815209e1aff80529ef096fa910412111c6dc53d0c9cb46cbb9b10f47f42197d811db93761a4004bf62016317c"}}, {0x4b, &(0x7f0000000600)=@string={0x4b, 0x3, "f202a795d612e5b0e4518c43dac8c260f6d73d9bddb2062f4915beb2754ecd4563d33510879c486e409556e48d3f348514545d85e24de724e778ff8e0522335fc0930fc13cf6993957"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0xc7d, 0x103000) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x2, 0x5, 0x40]}, &(0x7f0000000280)=0x44) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x70, 0x1, 0x6, {0x6, 0x6bc7d30ce3e74456, "67b00fed"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x2000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @remote, 0x4000}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x98}}}, 0x108) 17m51.814421954s ago: executing program 34 (id=1053): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x6, 0xd4, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x0, 0x80, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x5, "e4e7a32cc8062a52e5"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xff, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x1, 0x6, "", "bc22"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x3, 0xa, 0x5, "7b16"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfa, 0x0, 0xb, {0x7, 0x25, 0x1, 0x0, 0xd, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x64, 0x2, 0x5, 0x80, "434bdf", "fb46"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x800, 0x4b, "c227253117"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0xee, "dbe1"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x10, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x1, 0x85, "", "7bf4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x80, 0x5, {0x7, 0x25, 0x1, 0x80, 0x2, 0x1ae7}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x8, 0x5, 0x3, 0x40, 0x1}, 0x41, &(0x7f0000000440)={0x5, 0xf, 0x41, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "5d2d377c6dd0a5105cec5bf9821909b1"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "5e027037e96b08db966e68757c968ded"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x61, 0xa, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xf, 0x2, 0x1}, @ptm_cap={0x3}]}, 0x3, [{0x91, &(0x7f0000000540)=@string={0x91, 0x3, "828c1c81469dae806afd7c8bcd3594f0ee9c6a96af6fcc6efd4e06572a973751aa57f1268f0a5fc9c179e1484d358bd842f69f02b9b74669bb54c0e482fb9ee1332e398a3f88e4805de0ecf2068f519b11fc193917ea02bade4afc7eb0083ce440f3d815209e1aff80529ef096fa910412111c6dc53d0c9cb46cbb9b10f47f42197d811db93761a4004bf62016317c"}}, {0x4b, &(0x7f0000000600)=@string={0x4b, 0x3, "f202a795d612e5b0e4518c43dac8c260f6d73d9bddb2062f4915beb2754ecd4563d33510879c486e409556e48d3f348514545d85e24de724e778ff8e0522335fc0930fc13cf6993957"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0xc7d, 0x103000) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x2, 0x5, 0x40]}, &(0x7f0000000280)=0x44) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x70, 0x1, 0x6, {0x6, 0x6bc7d30ce3e74456, "67b00fed"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x2000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @remote, 0x4000}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x98}}}, 0x108) 6m9.187683598s ago: executing program 5 (id=2605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000009511000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82", 0x13, 0x0, 0x0, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRES64=r0], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0xfffffffe, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 6m7.77375633s ago: executing program 5 (id=2610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000009511000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82", 0x13, 0x0, 0x0, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000000017f8c98"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRES64=r0], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0xfffffffe, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 6m5.410618207s ago: executing program 5 (id=2615): r0 = socket$xdp(0x2c, 0x3, 0x0) setresuid(0x0, 0xee01, 0xee00) (async) setfsuid(0xee00) setresuid(0xffffffffffffffff, 0xee01, 0xee00) (async, rerun: 64) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) (async) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r4, 0x0, r3, &(0x7f00000000c0)=0x8800000, 0x3df1, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 6m4.035567494s ago: executing program 5 (id=2618): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f00000000c0)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0xb1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0/file0\x00', 0x0, 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf250100000014000180080003000300000008000400", @ANYRES32, @ANYBLOB="04000300ac00028054000180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034000180080001000500000008000100050000000800010006000000080001000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000380)='./file0/file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) 6m2.414528955s ago: executing program 5 (id=2623): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) getpid() read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) socket$unix(0x1, 0x1, 0x0) fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) socket(0x8000000010, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 5m58.38760295s ago: executing program 5 (id=2629): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x20000000, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = dup(r3) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000740)=""/208) open$dir(&(0x7f0000000000)='./file1\x00', 0x5c1, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000900, 0xee01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x10, 0x0, 0x0, 0x0, 0x3, 0x10007}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="974a3c31a8d7183da6bedf71cfa4e7a9"], 0x0) 5m55.651971197s ago: executing program 35 (id=2629): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x20000000, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = dup(r3) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000740)=""/208) open$dir(&(0x7f0000000000)='./file1\x00', 0x5c1, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000900, 0xee01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x10, 0x0, 0x0, 0x0, 0x3, 0x10007}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="974a3c31a8d7183da6bedf71cfa4e7a9"], 0x0) 1m16.343551073s ago: executing program 0 (id=3255): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x2020) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xc}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x4401c800) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0x24047b00, 0x0, 0x0) setregid(r2, r2) stat(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000240)={{0x1, 0x0, r2, r4, r5, 0x2, 0x800}, 0x0, 0x0, 0x3, 0x3, 0x4000, 0x6, 0xd3e8, 0xb, 0x1000, 0x9, 0x0, r6}) r7 = getegid() socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x80, 0x4) close(r9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setresgid(r5, r7, r11) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setregid(r12, r2) keyctl$session_to_parent(0x12) 1m14.732823957s ago: executing program 0 (id=3258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x8c8, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.619387277s ago: executing program 0 (id=3264): mount(0x0, 0x0, 0x0, 0x811800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x35c9, &(0x7f0000000380)={0x0, 0x1ffffc, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) listen(r5, 0x8) socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000400)=[{&(0x7f0000002700)}, {&(0x7f0000000500)="22e05b9b8030d8c17baab0899ab20e48fe51f7bda9acc625f7a96880666d8cdd062da5208bc53df0137c606f7e841fbe65a5a49c3d277d7e059eab22b222e02e649a6a84d7cd530239440a5326084fd90cd8fa57eae20e8394415f12d7c9404d233e9418c6e3b5ace135a9f5705b4355b469bd024d00bd3765e400ab7abee7e0d903e0f542ed8d4737578c5c4ff03dc15351b1a72f3f6412b0e3bc0248225dacd731c366316a2810c19595c2012ae40299b42aa53c086b3b8c5307b21920f424a1e9421641a84a2f346c372ba755a7879519b8e99a297dbf8815a7817b4bdbcc0d86c1dd0ad9ee44c513f0d35e96c00a00931d25e541", 0xf6}, {&(0x7f0000000100)="e87ac13f7210a13cd9ec00c38ca3d2f495036c672b91995ff989e4d9865915acd37bd0aebc7b62a273056d54463250b50713a5865449fe9bf072d8e3d4f742dd0254f3415673a1549386680d9e89a9a32a0a5c872eaefb1f4bbd2ee5de0c010cbee487c19e61faab64544baced897482c76e2faf7af51121", 0x78}, {&(0x7f00000001c0)="9242cd4418b63cea", 0x8}, {&(0x7f0000000240)="17ea12868442c755ebe5107466be52", 0xf}, {&(0x7f0000000300)="c1d588b857767a31bfc400cd076219f7387d0fecb112b3769737deec012039d8ae1ca0695439b606a9a74d84f3e10faeccf62c904306e9a580105c9fd921804d78491cfde8037742c2b7b6e84d097936e1bfd49de848e4fed6", 0x59}, {&(0x7f0000000600)="7b7334ed2b3bf61a5a46d1be9a64f8125a419d524d4cfbc342c5a41057ea8140a53c2a8af2638d09cec54e8a115c5217d5d2dff8c8887bfc33fc1b3923e6512a8db0b2643a0808f3e8209566ca04c678cf48fe7314fd6796a5a331b2c535daa14cd59b04502e467547713165ca6879598124d1dc7ae63e5ebe9f87acbd477e39cfe6604ba322fef77213801eea47d59d3c58fb3fc76423cecf33e0c17826bb6e968275bc8faec3abbf455a8a913226899e806d60c445ad560c5aafbe3c12eb081de16ef1f19067f2fb35a6f4d5", 0xcd}, {&(0x7f0000000280)}], 0x8) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000009) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800004000"/24], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0xc0505350, &(0x7f0000000480)={{}, {}, 0x4, 0x5}) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 1m10.831155092s ago: executing program 0 (id=3268): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket(0xa, 0x6, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000d00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "d15cdc", 0x4c, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x5}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3}, 0x1, {0x100005}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x5, 0x2, 0x0, 0x3, 0x7, 0x6}, 0x2, {0x7, 0x3, 0x2, 0x2, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0xe8, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'vlan1\x00', 'nr0\x00', {0xff}, {0xff}, 0x6, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xc}}, @common=@icmp={{0x28}, {0xe, "e20c", 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'ip6_vti0\x00', 'dvmrp0\x00', {}, {0xff}, 0x88, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xc, {0x8}}}}, {{@ip={@loopback, @local, 0xff000000, 0xffffff00, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x33, 0x3, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf, 0xe, [0x36, 0x2, 0x2a, 0x1b, 0x11, 0x9, 0x40, 0x9, 0x1e, 0x32, 0x25, 0xe, 0x8, 0x13, 0x29, 0x3c], 0x3, 0x36, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000010340)='io_uring_create\x00', r10}, 0x18) (async) io_uring_setup(0x2c4d, &(0x7f0000000380)) 1m9.995529068s ago: executing program 0 (id=3274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x11, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x11}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x800000, 0x40}}, {{@in6=@remote, 0x4d4, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r6}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffdb5, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1m8.887691631s ago: executing program 0 (id=3277): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000980)={0x23, 0x1, 0x13, 0x1, 0x0, 0x0, 0x0}) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1800000000000000000000010000000000f2ffffffffffffff000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x180}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x22, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x7}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4804) getrlimit(0xf, &(0x7f0000000080)) clock_nanosleep(0xa, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x5, 0x1, 0x8}}}}, 0xd) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 52.434965729s ago: executing program 36 (id=3277): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000980)={0x23, 0x1, 0x13, 0x1, 0x0, 0x0, 0x0}) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1800000000000000000000010000000000f2ffffffffffffff000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x180}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x22, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x7}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4804) getrlimit(0xf, &(0x7f0000000080)) clock_nanosleep(0xa, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x5, 0x1, 0x8}}}}, 0xd) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 5.583173141s ago: executing program 6 (id=3438): creat(&(0x7f0000000000)='./bus\x00', 0x0) lsm_set_self_attr(0x69, 0x0, 0x82, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101090, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 4.783853339s ago: executing program 9 (id=3444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x488, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x403, 0xffffff81, 0x10, 0xc, 0x8002, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x5, 0xaa21, 0x8, 0xa, 0x6, 0x200, 0x1, 0x4, 0xcc37, 0x5, 0xb5, 0x649f, 0x10001, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0x28d, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x880, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0xa, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020001, 0x2, 0x3, 0xffff, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7329, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d3, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xe, 0x206, 0x7ed8, 0x3, 0xffff, 0x0, 0x5, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7f, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x2, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x10000008, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0xc, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x7f, 0x0, 0x1, 0x5, 0xd, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x3, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x6, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x2, 0x1, 0x77, 0x9, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0x7fffffc0, 0x200, 0x8, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0xa, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x6, 0x0, 0x7, 0x9, 0x7fff, 0xed, 0x5fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0xff, 0x9, 0x0, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xef4, 0x5]}], [@TCA_POLICE_TBF={0x30, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x6, 0x4, 0xffffffff}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 4.783672366s ago: executing program 6 (id=3445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r2 = io_uring_setup(0x6f94, &(0x7f0000001240)={0x0, 0xfffffffd, 0x0, 0x2}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.385723141s ago: executing program 9 (id=3448): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=""/131, 0x83}}, {{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x0, 0x0) 4.0609983s ago: executing program 6 (id=3451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) syz_io_uring_setup(0x26c0, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xd7e5}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.123000358s ago: executing program 9 (id=3457): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x416f, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r0, 0x567, 0x60, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_open_dev$sg(0x0, 0xffc, 0x20000) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 3.058391848s ago: executing program 7 (id=3458): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x41, 0x8) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='security.selinux\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x461c, 0x204, 0x0, 0x400, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x1}, 0x0}) 3.056517919s ago: executing program 1 (id=3468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.739932013s ago: executing program 6 (id=3459): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc0000484) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1) 2.726348553s ago: executing program 1 (id=3460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 2.567877745s ago: executing program 9 (id=3462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5a, 0x8c, 0xf1, 0x10, 0xeb1, 0x7007, 0x202, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1c, 0x45}}]}}]}}, 0x0) 2.340026688s ago: executing program 1 (id=3463): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000844) 2.26864494s ago: executing program 8 (id=3464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.935848261s ago: executing program 7 (id=3465): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000a14000/0x4000)=nil, 0x1000) 1.914278243s ago: executing program 8 (id=3466): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="140100002b000100000000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.867885843s ago: executing program 1 (id=3467): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mlockall(0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) r1 = io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x80000000, 0x0, 0xfffdffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xffffffff, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 1.744857117s ago: executing program 6 (id=3469): r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x2) 1.556017324s ago: executing program 7 (id=3470): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @dev}, 0x14) 1.495908051s ago: executing program 8 (id=3471): setitimer(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = getpid() setreuid(0xee00, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x10860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.209801269s ago: executing program 1 (id=3472): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.124452399s ago: executing program 8 (id=3473): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x20, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 1.03195732s ago: executing program 7 (id=3474): chroot(&(0x7f0000000300)='.\x00') 914.848132ms ago: executing program 6 (id=3475): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x31, 0x0, 0x2386, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) 797.709932ms ago: executing program 8 (id=3476): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x70, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x35}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1080}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf519}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8461}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x80000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x44856}, 0x4015) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000001f0070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 735.814578ms ago: executing program 7 (id=3477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000100)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 465.035049ms ago: executing program 9 (id=3478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x6e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rseq_update\x00', r0, 0x0, 0x8}, 0x18) 437.57434ms ago: executing program 8 (id=3479): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) sched_getaffinity(0x0, 0x8, &(0x7f0000000280)) socket$unix(0x1, 0x1, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) 364.220161ms ago: executing program 1 (id=3480): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[]) 199.831021ms ago: executing program 7 (id=3481): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) close_range(r1, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) 0s ago: executing program 9 (id=3482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) kernel console output (not intermixed with test programs): mber=3 [ 1487.974982][T17148] usb 9-1: Product: syz [ 1488.009598][T17148] usb 9-1: Manufacturer: syz [ 1488.014226][T17148] usb 9-1: SerialNumber: syz [ 1488.098546][T17148] usb 9-1: config 0 descriptor?? [ 1488.160294][T17148] usb 9-1: no audio or video endpoints found [ 1488.245192][ T5863] usb 7-1: USB disconnect, device number 90 [ 1489.406075][T18556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3095'. [ 1489.653723][ T5897] usb 9-1: USB disconnect, device number 10 [ 1490.597374][T18382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1490.645155][T18577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=18577 comm=syz.6.3100 [ 1490.701785][T18578] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3100'. [ 1491.051677][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 1491.051692][ T29] audit: type=1400 audit(1737243683.338:56149): avc: denied { read write } for pid=16005 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1491.112054][T18382] veth0_vlan: entered promiscuous mode [ 1491.173533][ T29] audit: type=1400 audit(1737243683.347:56150): avc: denied { prog_load } for pid=18583 comm="syz.6.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1491.203939][T18382] veth1_vlan: entered promiscuous mode [ 1491.225354][ T29] audit: type=1400 audit(1737243683.347:56151): avc: denied { bpf } for pid=18583 comm="syz.6.3103" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1491.281096][ T29] audit: type=1400 audit(1737243683.347:56152): avc: denied { perfmon } for pid=18583 comm="syz.6.3103" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1491.360118][ T29] audit: type=1400 audit(1737243683.347:56153): avc: denied { perfmon } for pid=18583 comm="syz.6.3103" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1491.431277][ T29] audit: type=1400 audit(1737243683.347:56154): avc: denied { perfmon } for pid=18583 comm="syz.6.3103" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1491.880186][ T29] audit: type=1400 audit(1737243683.347:56155): avc: denied { perfmon } for pid=18583 comm="syz.6.3103" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1491.965740][ T29] audit: type=1400 audit(1737243683.347:56156): avc: denied { perfmon } for pid=18583 comm="syz.6.3103" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1492.007090][ T29] audit: type=1400 audit(1737243683.347:56157): avc: denied { bpf } for pid=18583 comm="syz.6.3103" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1492.285097][ T29] audit: type=1400 audit(1737243683.385:56158): avc: denied { read write open } for pid=16005 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1492.378141][T18382] veth0_macvtap: entered promiscuous mode [ 1492.468505][T18382] veth1_macvtap: entered promiscuous mode [ 1492.725828][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.807100][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.832821][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.843411][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.880964][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.891615][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.381289][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1493.391928][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.440396][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1493.459520][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.484473][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1493.515476][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.557060][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1493.588518][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.613317][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1493.647763][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.676922][T18382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.740136][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.768413][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.802960][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.832525][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.853731][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.857336][T17148] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1493.876363][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.905878][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.935285][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.968152][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.992274][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.003894][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1494.014418][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.026894][T18382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1494.037703][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.052524][T18382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.080596][T17148] usb 2-1: Using ep0 maxpacket: 16 [ 1494.114841][T18382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.135207][T18382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.147329][T18382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.155811][T17148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.166410][T18382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.187885][T17148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.207346][T17148] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1494.238232][T17148] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1494.263576][T17148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.281908][T17148] usb 2-1: config 0 descriptor?? [ 1494.652932][T18382] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1494.718165][T18382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.757830][T18611] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1494.824741][T18611] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1494.864119][T17148] microsoft 0003:045E:07DA.002A: report is too long [ 1494.888751][T11296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.897114][T17148] microsoft 0003:045E:07DA.002A: item 0 4 0 8 parsing failed [ 1494.910288][T11296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.925180][T17148] microsoft 0003:045E:07DA.002A: parse failed [ 1494.965805][T17148] microsoft 0003:045E:07DA.002A: probe with driver microsoft failed with error -22 [ 1495.104097][T16503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.132881][T16503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.404195][T18625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18625 comm=syz.1.3108 [ 1495.552218][T12890] usb 2-1: USB disconnect, device number 44 [ 1496.524932][T18637] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1496.837893][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 1496.837930][ T29] audit: type=1400 audit(1737243688.277:56403): avc: denied { prog_load } for pid=18629 comm="syz.8.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1497.068495][ T29] audit: type=1400 audit(1737243688.286:56404): avc: denied { bpf } for pid=18629 comm="syz.8.3115" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1497.106099][ T29] audit: type=1400 audit(1737243688.286:56405): avc: denied { perfmon } for pid=18629 comm="syz.8.3115" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1497.133536][ T29] audit: type=1400 audit(1737243688.295:56406): avc: denied { perfmon } for pid=18629 comm="syz.8.3115" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1497.196744][ T29] audit: type=1400 audit(1737243688.305:56407): avc: denied { perfmon } for pid=18629 comm="syz.8.3115" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1497.266663][ T29] audit: type=1400 audit(1737243688.305:56408): avc: denied { perfmon } for pid=18629 comm="syz.8.3115" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1497.320391][ T29] audit: type=1400 audit(1737243688.314:56409): avc: denied { bpf } for pid=18629 comm="syz.8.3115" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1497.369489][ T29] audit: type=1400 audit(1737243688.473:56410): avc: denied { create } for pid=18631 comm="syz.7.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1497.398430][ T29] audit: type=1400 audit(1737243688.473:56411): avc: denied { write } for pid=18631 comm="syz.7.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1497.422922][ T29] audit: type=1400 audit(1737243688.473:56412): avc: denied { read } for pid=18631 comm="syz.7.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1497.636803][T18647] tty tty37: ldisc open failed (-12), clearing slot 36 [ 1498.961816][T18664] team0: Port device team_slave_1 removed [ 1498.991008][ T5897] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1499.158456][T18672] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1499.200677][T18672] CIFS mount error: No usable UNC path provided in device string! [ 1499.200677][T18672] [ 1499.213908][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 1499.220142][T18672] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1499.255228][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.276573][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.286625][ T5897] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1499.296369][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.417653][ T5897] usb 1-1: config 0 descriptor?? [ 1500.110583][ T5897] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.002B/input/input63 [ 1500.266347][ T5897] appleir 0003:05AC:8241.002B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 1501.030177][ T5867] usb 1-1: USB disconnect, device number 11 [ 1501.294178][T18706] net_ratelimit: 10 callbacks suppressed [ 1501.294197][T18706] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1501.318730][T12890] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1501.919864][T12182] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1501.931189][T12182] Bluetooth: hci0: Injecting HCI hardware error event [ 1501.942932][T16008] Bluetooth: hci0: hardware error 0x00 [ 1502.178891][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1502.200303][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 1502.200319][ T29] audit: type=1400 audit(1737243693.767:56737): avc: denied { map_create } for pid=18710 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1502.280678][ T29] audit: type=1400 audit(1737243693.824:56738): avc: denied { execmem } for pid=18710 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1502.847697][ T29] audit: type=1400 audit(1737243694.123:56739): avc: denied { create } for pid=18710 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1503.082635][ T29] audit: type=1400 audit(1737243694.132:56740): avc: denied { create } for pid=18710 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1503.196383][ T29] audit: type=1400 audit(1737243694.142:56741): avc: denied { setopt } for pid=18710 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1503.286828][ T29] audit: type=1400 audit(1737243694.160:56742): avc: denied { write } for pid=18710 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1503.364108][ T29] audit: type=1400 audit(1737243694.170:56743): avc: denied { setopt } for pid=18710 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1503.457051][ T29] audit: type=1400 audit(1737243694.179:56744): avc: denied { create } for pid=18710 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1503.533573][ T29] audit: type=1400 audit(1737243694.188:56745): avc: denied { create } for pid=18710 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1503.608358][T18716] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1503.794420][ T5867] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1504.026610][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.078354][ T5867] usb 9-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1504.108712][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.126086][ T5867] usb 9-1: config 0 descriptor?? [ 1504.141642][T16008] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1504.185516][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 1504.691826][ T5867] logitech 0003:046D:C50C.002C: unbalanced delimiter at end of report description [ 1504.701797][ T5867] logitech 0003:046D:C50C.002C: parse failed [ 1504.708885][ T5867] logitech 0003:046D:C50C.002C: probe with driver logitech failed with error -22 [ 1504.833760][T18740] 9pnet_fd: Insufficient options for proto=fd [ 1504.951295][T18740] 9pnet_fd: Insufficient options for proto=fd [ 1506.260295][T18755] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3143'. [ 1506.546422][ T5897] usb 9-1: USB disconnect, device number 12 [ 1506.620970][T17148] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1506.803239][T17148] usb 2-1: Using ep0 maxpacket: 16 [ 1506.864220][T17148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.905420][T17148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.944128][T17148] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1506.998669][T17148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.093390][T17148] usb 2-1: config 0 descriptor?? [ 1507.444362][ T5897] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1507.641013][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 1507.641031][ T29] audit: type=1400 audit(1737243698.856:57046): avc: denied { prog_load } for pid=18750 comm="syz.1.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1507.716303][ T5897] usb 9-1: config 0 has an invalid interface number: 156 but max is 0 [ 1507.725831][T17148] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.002D/input/input64 [ 1507.732238][ T5897] usb 9-1: config 0 has no interface number 0 [ 1507.771163][ T29] audit: type=1400 audit(1737243698.856:57047): avc: denied { bpf } for pid=18750 comm="syz.1.3144" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1507.775517][ T5897] usb 9-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1507.874185][ T29] audit: type=1400 audit(1737243698.875:57048): avc: denied { ioctl } for pid=18760 comm="syz.8.3147" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1507.893106][ T5897] usb 9-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1507.947042][T17148] appleir 0003:05AC:8241.002D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 1507.959077][ T5897] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1508.003889][ T29] audit: type=1400 audit(1737243698.884:57049): avc: denied { ioctl } for pid=18760 comm="syz.8.3147" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1508.004821][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.096481][ T29] audit: type=1400 audit(1737243698.884:57050): avc: denied { ioctl } for pid=18750 comm="syz.1.3144" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1508.165370][ T5897] usb 9-1: config 0 descriptor?? [ 1508.198383][ T29] audit: type=1400 audit(1737243698.903:57051): avc: denied { ioctl } for pid=18750 comm="syz.1.3144" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1508.209403][ T5897] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1508.609537][ T29] audit: type=1400 audit(1737243698.903:57052): avc: denied { ioctl } for pid=18760 comm="syz.8.3147" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1508.758917][ T29] audit: type=1400 audit(1737243698.922:57053): avc: denied { ioctl } for pid=18760 comm="syz.8.3147" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1508.828101][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 1508.837143][T18768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3149'. [ 1508.861577][T18779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1508.888822][T18779] audit: audit_lost=1030 audit_rate_limit=0 audit_backlog_limit=64 [ 1508.974782][ T8] usb 2-1: USB disconnect, device number 45 [ 1509.156111][ T5897] spca561 9-1:0.156: probe with driver spca561 failed with error -22 [ 1509.201833][ T5897] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1509.242976][ T5897] usb 9-1: MIDIStreaming interface descriptor not found [ 1509.477633][ T5897] snd-usb-audio 9-1:0.156: probe with driver snd-usb-audio failed with error -12 [ 1510.151303][ T5866] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1510.310492][ T8] usb 9-1: USB disconnect, device number 13 [ 1510.341594][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 1510.503545][ T5866] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1510.549339][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.618938][ T5866] usb 2-1: config 0 descriptor?? [ 1510.686175][ T5866] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1511.472682][T18806] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1511.733796][ T5866] gspca_sq930x: reg_r 001f failed -110 [ 1511.739340][ T5866] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 1512.225115][T18814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3159'. [ 1512.818142][T18817] SELinux: failed to load policy [ 1513.166152][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 1513.166168][ T29] audit: type=1400 audit(1737243704.029:57436): avc: denied { create } for pid=18825 comm="syz.0.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1513.265281][ T29] audit: type=1400 audit(1737243704.076:57437): avc: denied { create } for pid=18825 comm="syz.0.3162" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1513.388167][ T29] audit: type=1400 audit(1737243704.076:57438): avc: denied { map } for pid=18825 comm="syz.0.3162" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1513.484356][ T29] audit: type=1400 audit(1737243704.094:57439): avc: denied { read write } for pid=18825 comm="syz.0.3162" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1513.622002][ T29] audit: type=1400 audit(1737243704.122:57440): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1513.722454][ T29] audit: type=1400 audit(1737243704.122:57441): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1513.847848][ T29] audit: type=1400 audit(1737243704.122:57442): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1513.944260][ T29] audit: type=1400 audit(1737243704.122:57443): avc: denied { append open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1514.040312][ T29] audit: type=1400 audit(1737243704.122:57444): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1514.127055][ T29] audit: type=1400 audit(1737243704.497:57445): avc: denied { prog_load } for pid=18827 comm="syz.6.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1514.246296][T18832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18832 comm=syz.7.3165 [ 1514.310474][T18832] netlink: 'syz.7.3165': attribute type 1 has an invalid length. [ 1514.350122][T18832] bond2: entered promiscuous mode [ 1514.355220][T18832] bond2: entered allmulticast mode [ 1514.369594][T18832] batadv2: entered promiscuous mode [ 1514.376085][T18832] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1514.384460][T18832] bond2: (slave batadv2): making interface the new active one [ 1514.392403][T18832] batadv2: entered allmulticast mode [ 1514.398826][T18832] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 1514.414130][T18832] syz_tun: entered allmulticast mode [ 1514.426772][T18832] dvmrp8: entered allmulticast mode [ 1514.435634][T18831] syz_tun: left allmulticast mode [ 1514.440816][T18831] dvmrp8: left allmulticast mode [ 1516.415751][T18855] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1517.224162][T18860] xt_limit: Overflow, try lower: 262144/524288 [ 1517.636893][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1518.257166][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 1518.583420][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 1518.583440][ T29] audit: type=1400 audit(1737243708.884:57620): avc: denied { prog_load } for pid=18863 comm="syz.6.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1519.009955][ T29] audit: type=1400 audit(1737243708.893:57621): avc: denied { bpf } for pid=18863 comm="syz.6.3175" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1519.046782][ T5866] usb 1-1: config 0 has an invalid interface number: 14 but max is 0 [ 1519.096925][ T5866] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 1519.129307][ T5866] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1519.129824][ T29] audit: type=1400 audit(1737243709.435:57622): avc: denied { ioctl } for pid=18859 comm="syz.0.3172" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1519.181760][ T5866] usb 1-1: config 0 has no interface number 0 [ 1519.198555][ T5866] usb 1-1: config 0 has no interface number 1 [ 1519.226002][ T5866] usb 1-1: config 0 interface 14 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1519.244572][ T29] audit: type=1400 audit(1737243709.445:57623): avc: denied { read write } for pid=10519 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1519.275810][ T5866] usb 1-1: config 0 interface 14 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1519.325541][ T29] audit: type=1400 audit(1737243709.445:57624): avc: denied { read write open } for pid=10519 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1519.332116][ T5866] usb 1-1: too many endpoints for config 0 interface 160 altsetting 184: 165, using maximum allowed: 30 [ 1519.423786][ T5866] usb 1-1: config 0 interface 160 altsetting 184 bulk endpoint 0x6 has invalid maxpacket 16 [ 1519.449833][ T29] audit: type=1400 audit(1737243709.445:57625): avc: denied { ioctl } for pid=10519 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1519.455907][ T5866] usb 1-1: config 0 interface 160 altsetting 184 has 1 endpoint descriptor, different from the interface descriptor's value: 165 [ 1519.552239][ T29] audit: type=1400 audit(1737243709.454:57626): avc: denied { ioctl } for pid=18859 comm="syz.0.3172" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1519.564900][ T5866] usb 1-1: config 0 interface 14 has no altsetting 0 [ 1519.621022][ T5866] usb 1-1: config 0 interface 160 has no altsetting 0 [ 1519.624401][ T29] audit: type=1400 audit(1737243709.464:57627): avc: denied { ioctl } for pid=18859 comm="syz.0.3172" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1519.670908][ T29] audit: type=1400 audit(1737243709.464:57628): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1519.673443][ T5866] usb 1-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=c1.41 [ 1519.763102][ T29] audit: type=1400 audit(1737243709.464:57629): avc: denied { ioctl } for pid=18859 comm="syz.0.3172" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1519.781068][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.843610][ T5866] usb 1-1: Product: syz [ 1519.848870][ T5866] usb 1-1: Manufacturer: syz [ 1519.854380][ T5866] usb 1-1: SerialNumber: syz [ 1519.887716][ T5866] usb 1-1: config 0 descriptor?? [ 1519.964383][T16505] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1520.459011][T18860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.524420][T18860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.606308][T18882] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3176'. [ 1520.636637][ T5866] hub 1-1:0.160: bad descriptor, ignoring hub [ 1520.653786][ T5866] hub 1-1:0.160: probe with driver hub failed with error -5 [ 1520.818416][ T5866] usb 1-1: USB disconnect, device number 12 [ 1521.672995][T12890] usb 2-1: USB disconnect, device number 46 [ 1522.796605][T18906] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3181'. [ 1523.243532][T18911] Process accounting resumed [ 1523.602958][T18912] can0: slcan on ttyS3. [ 1523.985757][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 1523.985774][ T29] audit: type=1400 audit(1737243714.150:57856): avc: denied { perfmon } for pid=18915 comm="syz.6.3185" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1524.951798][ T29] audit: type=1400 audit(1737243714.178:57857): avc: denied { map_create } for pid=18920 comm="syz.0.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1525.105199][ T29] audit: type=1400 audit(1737243714.178:57858): avc: denied { execmem } for pid=18920 comm="syz.0.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1525.319208][ T29] audit: type=1400 audit(1737243714.337:57859): avc: denied { create } for pid=18916 comm="syz.8.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1525.433909][ T29] audit: type=1400 audit(1737243714.346:57860): avc: denied { create } for pid=18916 comm="syz.8.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1525.479190][ T29] audit: type=1400 audit(1737243714.346:57861): avc: denied { bind } for pid=18916 comm="syz.8.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1525.502015][T18908] can0 (unregistered): slcan off ttyS3. [ 1525.532809][ T29] audit: type=1400 audit(1737243714.346:57862): avc: denied { create } for pid=18916 comm="syz.8.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1525.654467][ T29] audit: type=1400 audit(1737243714.346:57863): avc: denied { setopt } for pid=18916 comm="syz.8.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1525.728464][ T29] audit: type=1400 audit(1737243714.356:57864): avc: denied { write } for pid=18916 comm="syz.8.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1525.842734][ T29] audit: type=1400 audit(1737243714.496:57865): avc: denied { setopt } for pid=18916 comm="syz.8.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1526.111562][T18944] block device autoloading is deprecated and will be removed. [ 1526.270596][ T5897] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1526.396870][T18949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1526.441391][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 1526.499057][ T5897] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1526.530326][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.583916][ T5897] usb 7-1: config 0 descriptor?? [ 1526.794272][ T5897] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1527.442925][ T5897] gspca_sq930x: reg_r 001f failed -110 [ 1527.449920][ T5897] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 1527.756448][T18940] SELinux: failed to load policy [ 1527.821894][ T5907] usb 7-1: USB disconnect, device number 91 [ 1529.371241][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 1529.371257][ T29] audit: type=1400 audit(1737243718.256:58065): avc: denied { execmem } for pid=18971 comm="syz.8.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1530.025577][ T29] audit: type=1400 audit(1737243718.425:58066): avc: denied { create } for pid=18967 comm="syz.7.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1530.204433][ T29] audit: type=1400 audit(1737243718.434:58067): avc: denied { create } for pid=18967 comm="syz.7.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1530.322024][ T29] audit: type=1400 audit(1737243718.443:58068): avc: denied { bind } for pid=18967 comm="syz.7.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1530.442927][ T29] audit: type=1400 audit(1737243718.443:58069): avc: denied { create } for pid=18967 comm="syz.7.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1530.535925][ T29] audit: type=1400 audit(1737243718.443:58070): avc: denied { setopt } for pid=18967 comm="syz.7.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1530.647590][ T29] audit: type=1400 audit(1737243718.453:58071): avc: denied { write } for pid=18967 comm="syz.7.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1530.781400][ T29] audit: type=1400 audit(1737243718.462:58072): avc: denied { write } for pid=18967 comm="syz.7.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1530.912564][ T29] audit: type=1400 audit(1737243718.471:58073): avc: denied { write } for pid=18967 comm="syz.7.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1530.952376][T18987] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1531.149566][T18987] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3200'. [ 1531.968789][ T5897] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1532.289492][ T5897] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1532.331851][ T5897] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1532.341922][ T5897] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1532.396210][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.835180][T18991] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1532.895430][ T5897] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1533.120689][T18998] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3203'. [ 1534.182456][ T5867] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1535.197156][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 1535.197175][ T29] audit: type=1400 audit(1737243723.878:58272): avc: denied { execmem } for pid=19005 comm="syz.1.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1535.622413][T19007] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1536.415717][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 1536.601251][ T29] audit: type=1400 audit(1737243724.318:58273): avc: denied { execmem } for pid=19005 comm="syz.1.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1536.684632][ T5897] usb 7-1: USB disconnect, device number 92 [ 1536.796378][ T29] audit: type=1400 audit(1737243724.654:58274): avc: denied { execmem } for pid=19005 comm="syz.1.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1536.883470][ T5867] usb 1-1: device descriptor read/all, error -71 [ 1536.890962][ T29] audit: type=1400 audit(1737243724.682:58275): avc: denied { ioctl } for pid=19004 comm="syz.0.3206" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1536.939544][ T29] audit: type=1400 audit(1737243725.010:58276): avc: denied { create } for pid=18999 comm="syz.7.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1537.008856][ T29] audit: type=1400 audit(1737243725.019:58277): avc: denied { write } for pid=18999 comm="syz.7.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1537.093695][T19013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1537.100127][ T29] audit: type=1400 audit(1737243725.019:58278): avc: denied { nlmsg_write } for pid=18999 comm="syz.7.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1537.103913][T19013] audit: audit_lost=1032 audit_rate_limit=0 audit_backlog_limit=64 [ 1537.134466][T19013] audit: backlog limit exceeded [ 1537.507830][ T5907] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1537.773016][ T5907] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1537.795771][ T5867] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1537.805578][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.831734][ T5907] usb 2-1: Product: syz [ 1537.835917][ T5907] usb 2-1: Manufacturer: syz [ 1537.856183][ T5907] usb 2-1: SerialNumber: syz [ 1538.100260][ T5867] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1538.116541][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.157718][ T5867] usb 1-1: Product: syz [ 1538.179277][ T5867] usb 1-1: Manufacturer: syz [ 1538.200824][ T5867] usb 1-1: SerialNumber: syz [ 1538.280480][ T5867] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1538.414868][ T969] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1538.600347][ T969] usb 9-1: Using ep0 maxpacket: 32 [ 1538.615299][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1538.652987][ T969] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1538.671500][ T969] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.724699][ T969] usb 9-1: config 0 descriptor?? [ 1538.763166][ T969] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1539.271014][ T5867] usb 1-1: USB disconnect, device number 14 [ 1539.338689][ T969] gspca_sq930x: reg_r 001f failed -110 [ 1539.372725][ T969] sq930x 9-1:0.0: probe with driver sq930x failed with error -110 [ 1539.443817][T19045] SELinux: failed to load policy [ 1539.611684][ T5907] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1539.631366][ T5907] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 1539.720634][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1539.736673][ T8] ath9k_htc: Failed to initialize the device [ 1540.745133][ T5907] cdc_ncm 2-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1540.758322][ T5867] usb 1-1: ath9k_htc: USB layer deinitialized [ 1540.768342][ T5907] usb 2-1: USB disconnect, device number 47 [ 1540.775392][ T5907] cdc_ncm 2-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1540.913124][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 1540.913141][ T29] audit: type=1400 audit(1737243729.977:58668): avc: denied { map_create } for pid=19051 comm="syz.7.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1541.013894][ T29] audit: type=1400 audit(1737243730.005:58669): avc: denied { map_read map_write } for pid=19051 comm="syz.7.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1541.038603][ T29] audit: type=1400 audit(1737243730.024:58670): avc: denied { map_create } for pid=19051 comm="syz.7.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1541.060050][ T29] audit: type=1400 audit(1737243730.042:58671): avc: denied { bpf } for pid=19051 comm="syz.7.3216" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1541.083798][ T29] audit: type=1400 audit(1737243730.042:58672): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1541.113508][ T29] audit: type=1400 audit(1737243730.052:58674): avc: denied { map_read map_write } for pid=19051 comm="syz.7.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1541.138010][ T29] audit: type=1400 audit(1737243730.052:58675): avc: denied { prog_load } for pid=19051 comm="syz.7.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1541.161405][ T29] audit: type=1400 audit(1737243730.052:58673): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.213233][T19052] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3216'. [ 1541.248634][ T29] audit: type=1400 audit(1737243730.070:58676): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1541.320631][ T29] audit: type=1400 audit(1737243730.080:58677): avc: denied { bpf } for pid=19051 comm="syz.7.3216" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1541.965210][ T5897] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1542.203551][ T5866] usb 9-1: USB disconnect, device number 14 [ 1542.210017][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 1542.240152][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.253748][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.264371][ T5897] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1542.276002][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.323121][ T5897] usb 2-1: config 0 descriptor?? [ 1542.814484][ T5897] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.002E/input/input65 [ 1542.862334][ T5866] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1542.910321][ T5897] appleir 0003:05AC:8241.002E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 1543.089539][ T5866] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1543.109677][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.120060][ T5866] usb 1-1: Product: syz [ 1543.124292][ T5866] usb 1-1: Manufacturer: syz [ 1543.128937][ T5866] usb 1-1: SerialNumber: syz [ 1543.142206][ T5866] usb 1-1: config 0 descriptor?? [ 1543.186868][T19083] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1543.261282][T19083] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 1543.649111][ T5907] usb 2-1: USB disconnect, device number 48 [ 1543.789390][ T5867] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1544.026273][ T5867] usb 9-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 1544.047975][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.078216][ T5867] usb 9-1: Product: syz [ 1544.095633][ T5867] usb 9-1: Manufacturer: syz [ 1544.112076][ T5867] usb 9-1: SerialNumber: syz [ 1544.138351][ T5867] usb 9-1: config 0 descriptor?? [ 1544.190233][ T5867] gspca_main: kinect-2.14.0 probing 045e:02bf [ 1544.521143][ T8] usb 9-1: USB disconnect, device number 15 [ 1544.987612][T19079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.019179][T19079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.315463][ T5866] usb 1-1: f81604_read: reg: 200e failed: -EPROTO [ 1545.359633][ T5866] usb 1-1: USB disconnect, device number 15 [ 1545.442489][ T5866] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1545.570248][T19102] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3229'. [ 1545.592912][ T5866] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1546.452456][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 1546.452490][ T29] audit: type=1400 audit(1737243734.897:59048): avc: denied { write } for pid=19110 comm="syz.8.3231" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1546.534867][T19117] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3231'. [ 1546.642233][ T29] audit: type=1400 audit(1737243734.906:59049): avc: denied { write open } for pid=19110 comm="syz.8.3231" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1546.685596][ T29] audit: type=1400 audit(1737243734.916:59050): avc: denied { ioctl } for pid=19110 comm="syz.8.3231" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1546.825512][ T29] audit: type=1400 audit(1737243735.028:59051): avc: denied { read } for pid=19110 comm="syz.8.3231" dev="nsfs" ino=4026534103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1546.935996][ T29] audit: type=1400 audit(1737243735.037:59052): avc: denied { read open } for pid=19110 comm="syz.8.3231" path="net:[4026534103]" dev="nsfs" ino=4026534103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1546.978110][ T5907] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1547.042220][ T29] audit: type=1400 audit(1737243735.047:59053): avc: denied { create } for pid=19110 comm="syz.8.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1547.130886][ T29] audit: type=1400 audit(1737243735.075:59054): avc: denied { write } for pid=19110 comm="syz.8.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1547.170656][ T5907] usb 7-1: Using ep0 maxpacket: 32 [ 1547.200575][T19115] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1547.209638][T19129] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1547.214225][ T29] audit: type=1400 audit(1737243735.084:59055): avc: denied { read } for pid=19110 comm="syz.8.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1547.301884][ T5907] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1547.353997][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.446804][ T5907] usb 7-1: config 0 descriptor?? [ 1548.155947][ T5907] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1548.674251][T19141] SELinux: failed to load policy [ 1549.455571][ T5907] gspca_sq930x: reg_r 001f failed -110 [ 1549.496103][ T5907] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 1550.269686][ T5907] usb 7-1: USB disconnect, device number 93 [ 1551.172653][T19142] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3239'. [ 1551.307799][T19154] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3240'. [ 1551.845083][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 1551.845100][ T29] audit: type=1326 audit(1737243740.163:59509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b4eb7cce7 code=0x7ffc0000 [ 1552.003840][ T29] audit: type=1326 audit(1737243740.163:59510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b4eb21f29 code=0x7ffc0000 [ 1552.078037][ T29] audit: type=1326 audit(1737243740.163:59511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b4eb85d29 code=0x7ffc0000 [ 1552.169629][ T29] audit: type=1326 audit(1737243740.163:59512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b4eb7cce7 code=0x7ffc0000 [ 1552.266518][ T29] audit: type=1326 audit(1737243740.163:59513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b4eb21f29 code=0x7ffc0000 [ 1552.355051][ T29] audit: type=1326 audit(1737243740.173:59514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b4eb85d29 code=0x7ffc0000 [ 1552.464096][ T29] audit: type=1400 audit(1737243740.173:59515): avc: denied { map_create } for pid=19164 comm="syz.7.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1552.515799][ T29] audit: type=1326 audit(1737243740.182:59516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b4eb7cce7 code=0x7ffc0000 [ 1552.644353][ T29] audit: type=1326 audit(1737243740.182:59517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b4eb21f29 code=0x7ffc0000 [ 1552.703350][ T29] audit: type=1326 audit(1737243740.182:59518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.8.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b4eb85d29 code=0x7ffc0000 [ 1553.287394][T19184] Invalid ELF header magic: != ELF [ 1553.298296][ T5866] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1553.584485][ T5866] usb 1-1: config 0 has an invalid interface number: 116 but max is 1 [ 1553.612965][ T5866] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 1553.661177][ T5866] usb 1-1: config 0 has no interface number 0 [ 1553.678971][ T5866] usb 1-1: config 0 has no interface number 1 [ 1553.697434][ T5866] usb 1-1: config 0 interface 116 altsetting 5 endpoint 0xA has an invalid bInterval 22, changing to 8 [ 1553.723392][ T5866] usb 1-1: config 0 interface 116 has no altsetting 0 [ 1553.735090][ T5866] usb 1-1: New USB device found, idVendor=0710, idProduct=0001, bcdDevice=52.84 [ 1553.749939][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.789863][ T5866] usb 1-1: config 0 descriptor?? [ 1554.096131][ T5866] usb 1-1: string descriptor 0 read error: -71 [ 1554.150347][ T5866] usb 1-1: Direct firmware load for whiteheat_loader.fw failed with error -2 [ 1554.188337][T16503] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1554.223384][ T5866] usb 1-1: Falling back to sysfs fallback for: whiteheat_loader.fw [ 1555.108097][T19201] overlayfs: workdir and upperdir must be separate subtrees [ 1555.188639][ T5867] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1555.542950][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 1555.575885][ T5867] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1555.589213][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.606944][ T5867] usb 7-1: config 0 descriptor?? [ 1555.641440][T12890] libceph: connect (1)[c::]:6789 error -101 [ 1555.669284][T12890] libceph: mon0 (1)[c::]:6789 connect error [ 1555.672523][ T5867] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1555.844872][T19211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1556.045286][T12890] libceph: connect (1)[c::]:6789 error -101 [ 1556.053284][T12890] libceph: mon0 (1)[c::]:6789 connect error [ 1556.227481][ T5867] gspca_sq930x: reg_r 001f failed -110 [ 1556.259431][ T5867] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 1556.405531][T19221] SELinux: failed to load policy [ 1556.465439][T19206] ceph: No mds server is up or the cluster is laggy [ 1557.512437][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 1557.512454][ T29] audit: type=1400 audit(1737243745.504:59781): avc: denied { create } for pid=19224 comm="syz.1.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1557.560992][ T29] audit: type=1400 audit(1737243745.533:59782): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1557.604531][ T29] audit: type=1400 audit(1737243745.533:59783): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1557.672209][ T29] audit: type=1400 audit(1737243745.542:59784): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1558.126901][ T29] audit: type=1400 audit(1737243745.542:59785): avc: denied { create } for pid=19224 comm="syz.1.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1558.229044][ T29] audit: type=1400 audit(1737243745.542:59786): avc: denied { append open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1558.414938][ T29] audit: type=1400 audit(1737243745.542:59787): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1558.604304][ T29] audit: type=1400 audit(1737243745.542:59788): avc: denied { write } for pid=19224 comm="syz.1.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1558.633505][ T29] audit: type=1400 audit(1737243745.579:59789): avc: denied { read } for pid=19224 comm="syz.1.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1558.690852][ T29] audit: type=1400 audit(1737243745.598:59790): avc: denied { read } for pid=19224 comm="syz.1.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1558.755340][ T5863] usb 7-1: USB disconnect, device number 94 [ 1559.893918][T19246] netlink: 'syz.8.3265': attribute type 7 has an invalid length. [ 1560.074263][ T5867] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1560.288163][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 1560.355015][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.386368][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.427013][ T5867] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1560.436829][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.505063][ T5867] usb 2-1: config 0 descriptor?? [ 1560.791693][T19255] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3266'. [ 1561.059889][ T5867] usbhid 2-1:0.0: can't add hid device: -71 [ 1561.065842][ T5867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1561.124103][ T5867] usb 2-1: USB disconnect, device number 49 [ 1561.515340][T19269] block nbd0: shutting down sockets [ 1562.280951][T19281] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 1562.312023][T19281] team0: Port device netdevsim0 added [ 1562.319230][ T5863] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1562.515779][ T5863] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1562.538060][ T5863] usb 2-1: can't read configurations, error -61 [ 1562.740663][ T5863] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1562.965484][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 1562.965549][ T29] audit: type=1400 audit(1737243750.602:60163): avc: denied { ioctl } for pid=19279 comm="syz.1.3275" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1563.197392][ T5863] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1563.207320][ T29] audit: type=1400 audit(1737243750.612:60164): avc: denied { bpf } for pid=19284 comm="syz.6.3273" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1563.207499][ T5863] usb 2-1: can't read configurations, error -61 [ 1563.238798][ T5863] usb usb2-port1: attempt power cycle [ 1563.311030][ T29] audit: type=1400 audit(1737243750.612:60165): avc: denied { create } for pid=19284 comm="syz.6.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1563.376110][ T29] audit: type=1400 audit(1737243750.612:60166): avc: denied { bind } for pid=19284 comm="syz.6.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1563.441606][ T29] audit: type=1400 audit(1737243750.659:60167): avc: denied { ioctl } for pid=19279 comm="syz.1.3275" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1563.537678][ T29] audit: type=1400 audit(1737243750.696:60168): avc: denied { ioctl } for pid=19279 comm="syz.1.3275" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1563.641766][ T29] audit: type=1400 audit(1737243750.705:60169): avc: denied { listen } for pid=19284 comm="syz.6.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1563.670964][ T5863] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1563.680366][ T29] audit: type=1400 audit(1737243750.733:60170): avc: denied { ioctl } for pid=19279 comm="syz.1.3275" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1563.725911][ T29] audit: type=1400 audit(1737243750.752:60171): avc: denied { create } for pid=19284 comm="syz.6.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1563.769936][ T29] audit: type=1400 audit(1737243750.808:60172): avc: denied { ioctl } for pid=19279 comm="syz.1.3275" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1563.874712][ T5863] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1563.890710][T19299] netlink: 'syz.0.3277': attribute type 13 has an invalid length. [ 1563.905807][ T5863] usb 2-1: can't read configurations, error -61 [ 1563.969616][T19299] gretap0: refused to change device tx_queue_len [ 1563.976521][T19299] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1564.067921][ T5863] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1564.165322][ T5863] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1564.187979][ T5863] usb 2-1: can't read configurations, error -61 [ 1564.219020][ T5863] usb usb2-port1: unable to enumerate USB device [ 1564.367398][T19306] sctp: [Deprecated]: syz.8.3281 (pid 19306) Use of int in max_burst socket option deprecated. [ 1564.367398][T19306] Use struct sctp_assoc_value instead [ 1564.412565][T19306] netlink: 'syz.8.3281': attribute type 10 has an invalid length. [ 1564.431546][T19306] batman_adv: batadv0: Adding interface: team0 [ 1564.437806][T19306] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1564.463009][T19306] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1564.502250][T19306] netlink: 'syz.8.3281': attribute type 10 has an invalid length. [ 1564.510098][T19306] netlink: 2 bytes leftover after parsing attributes in process `syz.8.3281'. [ 1564.520311][T19306] team0: entered promiscuous mode [ 1564.525542][T19306] team_slave_0: entered promiscuous mode [ 1564.531681][T19306] team_slave_1: entered promiscuous mode [ 1564.538808][T19306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.545787][T19306] batman_adv: batadv0: Interface activated: team0 [ 1564.552299][T19306] batman_adv: batadv0: Interface deactivated: team0 [ 1564.558978][T19306] batman_adv: batadv0: Removing interface: team0 [ 1564.571651][T19306] bridge0: port 3(team0) entered blocking state [ 1564.578024][T19306] bridge0: port 3(team0) entered disabled state [ 1564.584417][T19306] team0: entered allmulticast mode [ 1564.589895][T19306] team_slave_0: entered allmulticast mode [ 1564.595637][T19306] team_slave_1: entered allmulticast mode [ 1564.604220][T19306] bridge0: port 3(team0) entered blocking state [ 1564.610580][T19306] bridge0: port 3(team0) entered forwarding state [ 1564.697915][T19307] overlay: ./file0 is not a directory [ 1565.087975][T12890] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1565.259674][T12890] usb 7-1: Using ep0 maxpacket: 32 [ 1565.349217][T12890] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1565.387352][T12890] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1565.395984][T12890] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1565.435553][T12890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1565.480450][T12890] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1565.523936][T12890] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1565.643917][T12890] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1565.652984][T12890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.671201][T12890] usb 7-1: config 0 descriptor?? [ 1566.152723][T19335] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3288'. [ 1566.682915][T12890] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1566.798499][ T5907] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1566.980344][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 1567.029361][ T5863] usb 7-1: USB disconnect, device number 95 [ 1567.036168][ T5907] usb 2-1: config 0 has an invalid descriptor of length 6, skipping remainder of the config [ 1567.041103][ T5863] usblp0: removed [ 1567.077312][ T5907] usb 2-1: config 0 has no interfaces? [ 1567.117709][ T5907] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1567.133831][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.152082][ T5907] usb 2-1: Product: syz [ 1567.156682][ T5907] usb 2-1: Manufacturer: syz [ 1567.161289][ T5907] usb 2-1: SerialNumber: syz [ 1567.230562][ T5907] usb 2-1: config 0 descriptor?? [ 1567.496185][ T5907] usb 2-1: USB disconnect, device number 54 [ 1567.802903][T19332] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3287'. [ 1567.858858][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1568.334306][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 1568.334322][ T29] audit: type=1400 audit(1737243755.626:60465): avc: denied { ioctl } for pid=10519 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1568.475618][ T29] audit: type=1400 audit(1737243755.756:60466): avc: denied { create } for pid=19351 comm="syz.7.3292" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1568.581422][ T29] audit: type=1400 audit(1737243755.859:60467): avc: denied { create } for pid=19351 comm="syz.7.3292" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1568.698626][ T29] audit: type=1400 audit(1737243755.859:60468): avc: denied { map } for pid=19351 comm="syz.7.3292" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1568.820675][ T29] audit: type=1400 audit(1737243755.859:60469): avc: denied { read write } for pid=19351 comm="syz.7.3292" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1568.920926][ T29] audit: type=1400 audit(1737243755.859:60470): avc: denied { map } for pid=19351 comm="syz.7.3292" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1568.945297][ C0] vkms_vblank_simulate: vblank timer overrun [ 1569.054173][ T29] audit: type=1400 audit(1737243755.859:60471): avc: denied { read write } for pid=19351 comm="syz.7.3292" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1569.172693][ T29] audit: type=1400 audit(1737243755.887:60472): avc: denied { create } for pid=19351 comm="syz.7.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1569.268968][ T29] audit: type=1400 audit(1737243755.897:60473): avc: denied { connect } for pid=19351 comm="syz.7.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1569.353463][ T29] audit: type=1400 audit(1737243755.897:60474): avc: denied { name_connect } for pid=19351 comm="syz.7.3292" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1569.375699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.023956][T19361] sctp: [Deprecated]: syz.1.3294 (pid 19361) Use of int in max_burst socket option deprecated. [ 1570.023956][T19361] Use struct sctp_assoc_value instead [ 1570.081874][T19361] netlink: 'syz.1.3294': attribute type 10 has an invalid length. [ 1570.134896][T19361] batman_adv: batadv0: Adding interface: team0 [ 1570.141103][T19361] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.167450][T19361] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1570.209939][T19361] netlink: 'syz.1.3294': attribute type 10 has an invalid length. [ 1570.218021][T19361] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3294'. [ 1570.228377][T19361] team0: entered promiscuous mode [ 1570.234477][T19361] team_slave_0: entered promiscuous mode [ 1570.241376][T19361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.248206][T19361] batman_adv: batadv0: Interface activated: team0 [ 1570.254864][T19361] batman_adv: batadv0: Interface deactivated: team0 [ 1570.261491][T19361] batman_adv: batadv0: Removing interface: team0 [ 1570.290909][T19361] bridge0: port 3(team0) entered blocking state [ 1570.298420][T19361] bridge0: port 3(team0) entered disabled state [ 1570.304962][T19361] team0: entered allmulticast mode [ 1570.310095][T19361] team_slave_0: entered allmulticast mode [ 1570.317646][T19361] bridge0: port 3(team0) entered blocking state [ 1570.323979][T19361] bridge0: port 3(team0) entered forwarding state [ 1570.737762][T19368] syz.8.3295[19368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1570.738635][T19368] syz.8.3295[19368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1570.809999][T19368] syz.8.3295[19368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.754840][T19391] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3300'. [ 1573.771215][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 1573.771230][ T29] audit: type=1400 audit(1737243760.714:60716): avc: denied { ioctl } for pid=19395 comm="syz.8.3302" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1573.890553][ T29] audit: type=1400 audit(1737243760.789:60717): avc: denied { ioctl } for pid=19395 comm="syz.8.3302" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1573.917486][ T969] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1574.011859][ T29] audit: type=1400 audit(1737243760.892:60718): avc: denied { ioctl } for pid=19395 comm="syz.8.3302" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1574.111704][ T29] audit: type=1400 audit(1737243760.892:60719): avc: denied { read write } for pid=16005 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1574.138096][ T969] usb 9-1: Using ep0 maxpacket: 32 [ 1574.174973][ T969] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.250210][ T29] audit: type=1400 audit(1737243760.892:60720): avc: denied { read write open } for pid=16005 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1574.292630][ T969] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1574.312515][ T969] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.344818][ T969] usb 9-1: Product: syz [ 1574.355585][ T969] usb 9-1: Manufacturer: syz [ 1574.385304][ T29] audit: type=1400 audit(1737243760.911:60721): avc: denied { ioctl } for pid=19395 comm="syz.8.3302" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1574.415963][ T969] usb 9-1: SerialNumber: syz [ 1574.505522][ T969] usb 9-1: config 0 descriptor?? [ 1574.514662][ T969] usb 9-1: bad CDC descriptors [ 1574.552018][ T969] usb 9-1: unsupported MDLM descriptors [ 1574.624253][ T29] audit: type=1400 audit(1737243760.911:60722): avc: denied { ioctl } for pid=19395 comm="syz.8.3302" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1574.791892][T19407] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1574.813652][T19398] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1574.827310][T19404] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1574.957323][T19406] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3305'. [ 1575.202723][T12890] usb 9-1: USB disconnect, device number 16 [ 1576.045295][T19424] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1577.214920][T19434] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3312'. [ 1577.357984][T19432] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3312'. [ 1578.208039][T19443] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3313'. [ 1579.219764][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 1579.219781][ T29] audit: type=1400 audit(1737243765.803:60942): avc: denied { execmem } for pid=19448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1579.357158][ T29] audit: type=1400 audit(1737243765.934:60943): avc: denied { read write } for pid=19449 comm="syz.1.3315" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1579.430904][ T29] audit: type=1400 audit(1737243765.962:60944): avc: denied { read write open } for pid=19449 comm="syz.1.3315" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1579.509618][ T29] audit: type=1400 audit(1737243765.962:60945): avc: denied { ioctl } for pid=19449 comm="syz.1.3315" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1579.547318][ T29] audit: type=1400 audit(1737243765.962:60946): avc: denied { ioctl } for pid=19449 comm="syz.1.3315" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1579.602590][ T29] audit: type=1400 audit(1737243765.990:60947): avc: denied { ioctl } for pid=19449 comm="syz.1.3315" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1579.637853][ T969] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1579.733816][ T29] audit: type=1400 audit(1737243765.990:60948): avc: denied { ioctl } for pid=19449 comm="syz.1.3315" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1579.916839][ T969] usb 2-1: Using ep0 maxpacket: 16 [ 1579.952352][T12182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1579.954958][ T29] audit: type=1400 audit(1737243766.008:60949): avc: denied { execmem } for pid=19450 comm="syz.8.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1579.965494][T12182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1579.990096][T12182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1579.998067][T12182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1580.006894][T12182] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1580.016005][T12182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1580.053186][ T29] audit: type=1400 audit(1737243766.046:60950): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1580.094879][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.109769][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.121960][ T969] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1580.135223][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.157648][ T29] audit: type=1400 audit(1737243766.046:60951): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1580.183725][ T969] usb 2-1: config 0 descriptor?? [ 1580.804255][ T969] usbhid 2-1:0.0: can't add hid device: -71 [ 1580.810265][ T969] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1580.829034][ T969] usb 2-1: USB disconnect, device number 55 [ 1581.171036][T19470] netlink: 6 bytes leftover after parsing attributes in process `syz.7.3321'. [ 1582.184242][T19456] chnl_net:caif_netlink_parms(): no params data found [ 1582.227432][T12182] Bluetooth: hci5: command tx timeout [ 1583.037565][ T5863] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1583.153765][T19456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.185832][T19456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.215519][T19456] bridge_slave_0: entered allmulticast mode [ 1583.234903][T19456] bridge_slave_0: entered promiscuous mode [ 1583.282001][T19456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.348696][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 1583.354081][T19456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.390876][T19456] bridge_slave_1: entered allmulticast mode [ 1583.418684][T19456] bridge_slave_1: entered promiscuous mode [ 1583.431996][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3328'. [ 1583.441116][T19497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3328'. [ 1584.165950][ T5863] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1584.180400][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.210560][ T5863] usb 7-1: config 0 descriptor?? [ 1584.322076][ T5863] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1584.366637][T19456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.439964][T19456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.449255][T12182] Bluetooth: hci5: command tx timeout [ 1584.631835][T19456] team0: Port device team_slave_0 added [ 1584.640809][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 1584.640825][ T29] audit: type=1400 audit(1737243770.873:61216): avc: denied { execmem } for pid=19484 comm="syz.6.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1584.689254][T19456] team0: Port device team_slave_1 added [ 1584.795789][ T29] audit: type=1400 audit(1737243771.022:61217): avc: denied { execmem } for pid=19503 comm="syz.8.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1584.870588][ T29] audit: type=1400 audit(1737243771.097:61218): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1584.893013][ T5863] gspca_sq930x: reg_r 001f failed -110 [ 1584.895045][T19456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.898674][ T5863] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 1584.934698][T19456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.961327][ T29] audit: type=1400 audit(1737243771.097:61219): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1584.961366][ T29] audit: type=1400 audit(1737243771.106:61220): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1584.961400][ T29] audit: type=1400 audit(1737243771.106:61221): avc: denied { append open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1584.961444][ T29] audit: type=1400 audit(1737243771.106:61222): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1584.961479][ T29] audit: type=1400 audit(1737243771.134:61223): avc: denied { map_create } for pid=19484 comm="syz.6.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1584.961517][ T29] audit: type=1400 audit(1737243771.144:61224): avc: denied { prog_load } for pid=19484 comm="syz.6.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1584.961549][ T29] audit: type=1400 audit(1737243771.144:61225): avc: denied { bpf } for pid=19484 comm="syz.6.3323" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1585.130641][T19506] SELinux: failed to load policy [ 1585.148969][T19456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1585.203778][T19456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1585.221249][T19456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.287446][T19456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.591316][T19456] hsr_slave_0: entered promiscuous mode [ 1585.650774][T19456] hsr_slave_1: entered promiscuous mode [ 1585.728616][T19456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1585.800112][T19456] Cannot create hsr debugfs directory [ 1586.334943][ T5863] usb 7-1: USB disconnect, device number 96 [ 1586.640374][T19456] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1586.683638][T12182] Bluetooth: hci5: command tx timeout [ 1586.708502][T19456] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1586.734553][T19456] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1586.797855][T19456] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1587.543574][T19456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.684617][T19456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.835894][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.842982][T16477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.050402][T16487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.057502][T16487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.387069][T16501] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1589.024054][T12182] Bluetooth: hci5: command tx timeout [ 1590.031925][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 1590.031942][ T29] audit: type=1400 audit(1737243775.924:61472): avc: denied { ioctl } for pid=19553 comm="syz.8.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1590.151222][ T29] audit: type=1400 audit(1737243775.952:61473): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1590.179476][ T5897] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1590.235306][ T29] audit: type=1400 audit(1737243775.970:61474): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1590.317855][ T29] audit: type=1400 audit(1737243775.970:61475): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1590.379287][ T5897] usb 9-1: Using ep0 maxpacket: 32 [ 1590.385526][ T29] audit: type=1400 audit(1737243775.970:61476): avc: denied { append open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1590.454932][ T5897] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1590.510214][ T29] audit: type=1400 audit(1737243775.989:61477): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1590.525840][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.616748][ T29] audit: type=1400 audit(1737243775.999:61478): avc: denied { ioctl } for pid=19553 comm="syz.8.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1590.639158][ T5897] usb 9-1: config 0 descriptor?? [ 1590.696109][ T5897] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1590.777517][ T29] audit: type=1400 audit(1737243776.008:61479): avc: denied { execmem } for pid=19560 comm="syz.7.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1590.948578][ T29] audit: type=1400 audit(1737243776.073:61480): avc: denied { ioctl } for pid=19553 comm="syz.8.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1591.123654][ T29] audit: type=1400 audit(1737243776.073:61481): avc: denied { ioctl } for pid=19553 comm="syz.8.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1591.252607][ T5897] gspca_sq930x: reg_r 001f failed -110 [ 1591.314780][ T5897] sq930x 9-1:0.0: probe with driver sq930x failed with error -110 [ 1591.326123][T19567] SELinux: failed to load policy [ 1593.123492][T12890] usb 9-1: USB disconnect, device number 17 [ 1594.250756][T19585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1594.443733][T19585] loop4: detected capacity change from 0 to 7 [ 1594.525604][T19585] Dev loop4: unable to read RDB block 7 [ 1594.531977][T19585] loop4: unable to read partition table [ 1594.538338][T19585] loop4: partition table beyond EOD, truncated [ 1594.545460][T19585] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1595.152211][T19456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.467220][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 1595.467237][ T29] audit: type=1400 audit(1737243781.010:61689): avc: denied { create } for pid=19592 comm="syz.8.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1595.821271][ T29] audit: type=1400 audit(1737243781.066:61690): avc: denied { write } for pid=19592 comm="syz.8.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1596.009124][T19596] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3351'. [ 1596.048102][ T29] audit: type=1400 audit(1737243781.075:61691): avc: denied { execmem } for pid=19590 comm="syz.6.3349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1596.170350][ T29] audit: type=1400 audit(1737243781.216:61693): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1596.257800][ T29] audit: type=1400 audit(1737243781.216:61692): avc: denied { read } for pid=19592 comm="syz.8.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1596.367453][ T29] audit: type=1400 audit(1737243781.290:61694): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1596.487962][ T29] audit: type=1400 audit(1737243781.309:61695): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1596.601552][ T29] audit: type=1400 audit(1737243781.309:61696): avc: denied { append open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1596.723316][ T29] audit: type=1400 audit(1737243781.309:61697): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1596.829044][ T29] audit: type=1400 audit(1737243781.337:61698): avc: denied { bpf } for pid=19592 comm="syz.8.3351" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1597.451770][T16008] Bluetooth: hci2: command 0x0406 tx timeout [ 1597.886826][ T5897] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1598.067488][ T5897] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11 [ 1598.092375][ T5897] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1598.102688][ T5897] usb 9-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1598.110999][ T5897] usb 9-1: Manufacturer: syz [ 1598.115749][ T5897] usb 9-1: SerialNumber: syz [ 1599.002054][ T5897] usbhid 9-1:36.0: couldn't find an input interrupt endpoint [ 1599.021226][ T5897] usb 9-1: USB disconnect, device number 18 [ 1599.229983][T19629] netlink: 'syz.6.3357': attribute type 10 has an invalid length. [ 1599.565662][ T5897] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1599.747909][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 1599.770784][ T5897] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1599.809707][ T5897] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 1599.830094][ T5897] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1599.853802][ T5897] usb 7-1: config 0 has no interface number 0 [ 1599.859907][ T5897] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1599.894955][ T5897] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1599.942145][ T5897] usb 7-1: config 0 interface 255 has no altsetting 0 [ 1599.964402][ T5897] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1599.992782][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.026497][ T5897] usb 7-1: Product: syz [ 1600.030697][ T5897] usb 7-1: Manufacturer: syz [ 1600.035307][ T5897] usb 7-1: SerialNumber: syz [ 1600.083666][ T5897] usb 7-1: config 0 descriptor?? [ 1600.913162][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 1600.913180][ T29] audit: type=1400 audit(1737243786.098:61956): avc: denied { create } for pid=19638 comm="syz.8.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1600.979717][T19639] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3359'. [ 1601.008953][ T29] audit: type=1400 audit(1737243786.145:61957): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1601.134632][ T29] audit: type=1400 audit(1737243786.145:61958): avc: denied { create } for pid=19638 comm="syz.8.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1601.257590][ T29] audit: type=1400 audit(1737243786.155:61959): avc: denied { write } for pid=19638 comm="syz.8.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1601.329372][ T29] audit: type=1400 audit(1737243786.164:61960): avc: denied { write } for pid=19638 comm="syz.8.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1601.428741][ T29] audit: type=1400 audit(1737243786.183:61961): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1601.508654][ T29] audit: type=1400 audit(1737243786.183:61962): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1601.756890][ T29] audit: type=1400 audit(1737243786.183:61963): avc: denied { append open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1601.864844][ T29] audit: type=1400 audit(1737243786.183:61964): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1601.899266][ T29] audit: type=1400 audit(1737243786.482:61965): avc: denied { read write } for pid=16546 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1602.579318][T19661] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3363'. [ 1602.852985][ T5897] usb 7-1: USB disconnect, device number 97 [ 1602.883800][T19660] could not open pipe file descriptor [ 1603.863780][ T5897] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1604.348889][ T5897] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1604.379639][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.447649][ T5897] usb 2-1: config 0 descriptor?? [ 1604.830730][ T5897] kaweth 2-1:0.0: Firmware present in device. [ 1604.868154][ T5897] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 1604.930860][ T5897] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 1604.963788][ T5897] usb 2-1: USB disconnect, device number 56 [ 1605.006735][ T5863] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1605.222463][ T5863] usb 9-1: Using ep0 maxpacket: 8 [ 1605.387077][ T5863] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1605.394852][ T5863] usb 9-1: can't read configurations, error -61 [ 1605.710725][ T5863] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1606.097287][T12890] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1606.129287][ T5863] usb 9-1: Using ep0 maxpacket: 8 [ 1606.145977][ T5863] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1606.168884][ T5863] usb 9-1: can't read configurations, error -61 [ 1606.189565][ T5863] usb usb9-port1: attempt power cycle [ 1606.268697][T12890] usb 2-1: device descriptor read/64, error -71 [ 1606.270701][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 1606.270715][ T29] audit: type=1400 audit(1737243791.112:62249): avc: denied { ioctl } for pid=19687 comm="syz.6.3371" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.379123][ T29] audit: type=1400 audit(1737243791.131:62250): avc: denied { ioctl } for pid=19682 comm="syz.8.3370" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.471277][ T29] audit: type=1400 audit(1737243791.131:62251): avc: denied { ioctl } for pid=19682 comm="syz.8.3370" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.536195][ T29] audit: type=1400 audit(1737243791.159:62252): avc: denied { ioctl } for pid=19687 comm="syz.6.3371" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.578466][T12890] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1606.586127][T16118] usb 7-1: new low-speed USB device number 98 using dummy_hcd [ 1606.593695][ T5863] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1606.663978][ T29] audit: type=1400 audit(1737243791.159:62253): avc: denied { ioctl } for pid=19687 comm="syz.6.3371" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.677953][ T5863] usb 9-1: Using ep0 maxpacket: 8 [ 1606.732509][T19456] veth0_vlan: entered promiscuous mode [ 1606.752917][ T5863] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1606.760612][T12890] usb 2-1: device descriptor read/64, error -71 [ 1606.766163][ T29] audit: type=1400 audit(1737243791.159:62254): avc: denied { ioctl } for pid=19687 comm="syz.6.3371" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.785895][ T5863] usb 9-1: can't read configurations, error -61 [ 1606.813557][T16118] usb 7-1: Invalid ep0 maxpacket: 16 [ 1606.858805][ T29] audit: type=1400 audit(1737243791.243:62255): avc: denied { ioctl } for pid=19688 comm="syz.1.3372" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.890272][T12890] usb usb2-port1: attempt power cycle [ 1606.907115][T19456] veth1_vlan: entered promiscuous mode [ 1606.973714][ T29] audit: type=1400 audit(1737243791.243:62256): avc: denied { ioctl } for pid=19688 comm="syz.1.3372" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1607.016487][ T5863] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1607.024313][T16118] usb 7-1: new low-speed USB device number 99 using dummy_hcd [ 1607.064279][ T29] audit: type=1400 audit(1737243791.252:62257): avc: denied { execmem } for pid=19693 comm="syz.7.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1607.075272][ T5863] usb 9-1: Using ep0 maxpacket: 8 [ 1607.106061][ T29] audit: type=1400 audit(1737243791.281:62258): avc: denied { ioctl } for pid=19687 comm="syz.6.3371" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1607.164276][ T5863] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1607.226084][ T5863] usb 9-1: can't read configurations, error -61 [ 1607.241449][ T5863] usb usb9-port1: unable to enumerate USB device [ 1607.251806][T12890] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1607.259645][T16118] usb 7-1: Invalid ep0 maxpacket: 16 [ 1607.275940][T16118] usb usb7-port1: attempt power cycle [ 1607.298499][T12890] usb 2-1: device descriptor read/8, error -71 [ 1607.331520][T19456] veth0_macvtap: entered promiscuous mode [ 1607.363715][T19456] veth1_macvtap: entered promiscuous mode [ 1607.462719][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.473309][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.492771][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.521518][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.554494][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.565076][T12890] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1607.594803][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.614207][T12890] usb 2-1: device descriptor read/8, error -71 [ 1607.644194][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.687158][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.700785][T16118] usb 7-1: new low-speed USB device number 100 using dummy_hcd [ 1607.729909][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.752323][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.766901][T12890] usb usb2-port1: unable to enumerate USB device [ 1607.793614][T16118] usb 7-1: Invalid ep0 maxpacket: 16 [ 1607.810651][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.888186][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.920916][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.947379][T16118] usb 7-1: new low-speed USB device number 101 using dummy_hcd [ 1607.989716][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.029574][T16118] usb 7-1: Invalid ep0 maxpacket: 16 [ 1608.038561][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.056066][T16118] usb usb7-port1: unable to enumerate USB device [ 1608.072616][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.093455][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.135451][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.156012][T19456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1608.221826][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.286895][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.313877][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.464074][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.524338][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.568067][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.609350][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.619797][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.652173][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.673080][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.694943][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.705376][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.748420][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.781627][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.809971][T19456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.835076][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.917189][T19456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.936800][T19702] netlink: 'syz.7.3376': attribute type 10 has an invalid length. [ 1608.999018][T19456] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.017926][T19456] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.038666][T19456] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.058347][T19456] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.488250][T19456] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1609.554090][T19456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.245209][T11296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.253778][T11296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.424784][T11296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.546227][T11296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.626820][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 1611.626835][ T29] audit: type=1400 audit(1737243796.126:62506): avc: denied { read write } for pid=16546 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1611.742080][ T29] audit: type=1400 audit(1737243796.126:62507): avc: denied { read write } for pid=19456 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1611.880751][ T29] audit: type=1400 audit(1737243796.126:62508): avc: denied { read write open } for pid=19456 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1612.026906][ T29] audit: type=1400 audit(1737243796.126:62509): avc: denied { ioctl } for pid=19456 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1612.146536][ T29] audit: type=1400 audit(1737243796.173:62510): avc: denied { read write open } for pid=16546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1612.302266][ T29] audit: type=1400 audit(1737243796.173:62511): avc: denied { ioctl } for pid=16546 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1612.354593][T19737] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1612.361151][T19737] audit: audit_lost=1060 audit_rate_limit=0 audit_backlog_limit=64 [ 1612.370990][T19729] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1612.389684][T19734] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1613.562325][T19737] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1613.574266][T19737] Cannot find del_set index 0 as target [ 1613.922809][ T969] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1614.095023][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 1614.128164][ T969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.148082][ T969] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1614.157187][ T969] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1614.184339][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.225502][ T969] usb 2-1: config 0 descriptor?? [ 1614.277285][T19753] 9pnet_fd: Insufficient options for proto=fd [ 1615.030619][T19764] SELinux: failed to load policy [ 1615.810524][T19762] Cannot find add_set index 0 as target [ 1617.019699][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 1617.019716][ T29] audit: type=1326 audit(1737243801.168:62832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b61b85d29 code=0x7ffc0000 [ 1617.098084][ T29] audit: type=1400 audit(1737243801.196:62833): avc: denied { create } for pid=19770 comm="syz.7.3396" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1617.118111][ T8] usb 2-1: USB disconnect, device number 61 [ 1617.174099][ T29] audit: type=1400 audit(1737243801.196:62834): avc: denied { map } for pid=19770 comm="syz.7.3396" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1617.247654][ T29] audit: type=1400 audit(1737243801.196:62835): avc: denied { read write } for pid=19770 comm="syz.7.3396" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1617.354957][ T29] audit: type=1400 audit(1737243801.196:62836): avc: denied { map } for pid=19770 comm="syz.7.3396" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1617.440934][ T29] audit: type=1400 audit(1737243801.196:62837): avc: denied { read write } for pid=19770 comm="syz.7.3396" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1617.501941][ T29] audit: type=1326 audit(1737243801.205:62838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b61b85d29 code=0x7ffc0000 [ 1617.581667][ T29] audit: type=1400 audit(1737243801.214:62839): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1617.665888][ T29] audit: type=1400 audit(1737243801.233:62840): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1617.709559][T19456] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1618.067373][T19790] siw: device registration error -23 [ 1618.404832][T19793] netlink: 6 bytes leftover after parsing attributes in process `syz.9.3400'. [ 1619.476837][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3408'. [ 1620.333981][T19821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1622.563101][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 1622.563118][ T29] audit: type=1400 audit(1737243806.359:63246): avc: denied { map_create } for pid=19850 comm="syz.7.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1623.171478][T16487] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1623.189391][ T5866] usb 1-1: ezusb_ihex_firmware_download - request "whiteheat_loader.fw" failed [ 1623.206342][ T5866] whiteheat 1-1:0.116: probe with driver whiteheat failed with error -2 [ 1623.280795][ T29] audit: type=1400 audit(1737243806.387:63247): avc: denied { map_read map_write } for pid=19850 comm="syz.7.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1623.317202][ T5866] usb 1-1: Direct firmware load for whiteheat_loader.fw failed with error -2 [ 1623.392433][ T29] audit: type=1400 audit(1737243806.425:63248): avc: denied { prog_load } for pid=19850 comm="syz.7.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1623.469466][ T5866] usb 1-1: Falling back to sysfs fallback for: whiteheat_loader.fw [ 1623.529404][ T5173] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1623.533834][ T29] audit: type=1400 audit(1737243806.443:63249): avc: denied { create } for pid=19848 comm="syz.1.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1623.541420][T19862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1623.570859][T16005] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1623.588840][ T5173] audit: audit_lost=1069 audit_rate_limit=0 audit_backlog_limit=64 [ 1623.596811][ T5173] audit: backlog limit exceeded [ 1623.617345][T16005] audit: audit_lost=1070 audit_rate_limit=0 audit_backlog_limit=64 [ 1623.687901][T19862] xt_l2tp: v2 doesn't support IP mode [ 1624.012501][T19854] syz.8.3420: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1624.079056][T19854] CPU: 0 UID: 0 PID: 19854 Comm: syz.8.3420 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1624.089853][T19854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1624.099918][T19854] Call Trace: [ 1624.103201][T19854] [ 1624.106140][T19854] dump_stack_lvl+0x16c/0x1f0 [ 1624.110835][T19854] warn_alloc+0x24d/0x3a0 [ 1624.115184][T19854] ? __pfx_warn_alloc+0x10/0x10 [ 1624.120064][T19854] ? __get_vm_area_node+0x1b0/0x2f0 [ 1624.125273][T19854] ? __get_vm_area_node+0x1dc/0x2f0 [ 1624.130487][T19854] __vmalloc_node_range_noprof+0x1105/0x1530 [ 1624.136490][T19854] ? packet_set_ring+0xb13/0x18f0 [ 1624.141529][T19854] ? policy_nodemask+0xea/0x4e0 [ 1624.146396][T19854] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1624.152736][T19854] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1624.158731][T19854] ? rcu_is_watching+0x12/0xc0 [ 1624.163505][T19854] ? trace_kmalloc+0x2d/0xd0 [ 1624.168109][T19854] ? __kmalloc_noprof+0x23b/0x510 [ 1624.173166][T19854] ? packet_set_ring+0xb13/0x18f0 [ 1624.178205][T19854] vzalloc_noprof+0x6b/0x90 [ 1624.182717][T19854] ? packet_set_ring+0xb13/0x18f0 [ 1624.187755][T19854] packet_set_ring+0xb13/0x18f0 [ 1624.192630][T19854] packet_setsockopt+0x16b0/0x2360 [ 1624.197761][T19854] ? __pfx_packet_setsockopt+0x10/0x10 [ 1624.203231][T19854] ? __pfx_sock_has_perm+0x10/0x10 [ 1624.208353][T19854] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 1624.214787][T19854] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1624.221560][T19854] ? kmem_cache_free+0x152/0x4c0 [ 1624.226492][T19854] ? lockdep_hardirqs_on+0x7c/0x110 [ 1624.231687][T19854] ? audit_log_end+0x14a/0x2b0 [ 1624.236443][T19854] ? selinux_socket_setsockopt+0x6a/0x80 [ 1624.242064][T19854] ? __pfx_packet_setsockopt+0x10/0x10 [ 1624.247512][T19854] do_sock_setsockopt+0x222/0x480 [ 1624.252528][T19854] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1624.258072][T19854] ? __pfx___seccomp_filter+0x10/0x10 [ 1624.263458][T19854] __sys_setsockopt+0x1a0/0x230 [ 1624.268319][T19854] __x64_sys_setsockopt+0xbd/0x160 [ 1624.273443][T19854] ? syscall_trace_enter+0x8b/0x260 [ 1624.278645][T19854] do_syscall_64+0xcd/0x250 [ 1624.283151][T19854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.289043][T19854] RIP: 0033:0x7f1b4eb85d29 [ 1624.293446][T19854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.313051][T19854] RSP: 002b:00007f1b4f95b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1624.321458][T19854] RAX: ffffffffffffffda RBX: 00007f1b4ed75fa0 RCX: 00007f1b4eb85d29 [ 1624.329436][T19854] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000009 [ 1624.337402][T19854] RBP: 00007f1b4ec01b08 R08: 000000000000001c R09: 0000000000000000 [ 1624.345358][T19854] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1624.353317][T19854] R13: 0000000000000000 R14: 00007f1b4ed75fa0 R15: 00007fff19381198 [ 1624.361287][T19854] [ 1624.442845][T19854] Mem-Info: [ 1624.446395][T19854] active_anon:4985 inactive_anon:1 isolated_anon:0 [ 1624.446395][T19854] active_file:11816 inactive_file:49904 isolated_file:0 [ 1624.446395][T19854] unevictable:768 dirty:333 writeback:0 [ 1624.446395][T19854] slab_reclaimable:12432 slab_unreclaimable:119146 [ 1624.446395][T19854] mapped:37483 shmem:1489 pagetables:741 [ 1624.446395][T19854] sec_pagetables:0 bounce:0 [ 1624.446395][T19854] kernel_misc_reclaimable:0 [ 1624.446395][T19854] free:1271826 free_pcp:348 free_cma:0 [ 1624.641376][T19854] Node 0 active_anon:20032kB inactive_anon:4kB active_file:47224kB inactive_file:199428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149788kB dirty:1328kB writeback:0kB shmem:4420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11784kB pagetables:3100kB sec_pagetables:0kB all_unreclaimable? no [ 1624.730677][T19877] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3427'. [ 1624.753453][T19877] tipc: Invalid UDP bearer configuration [ 1624.753497][T19877] tipc: Enabling of bearer rejected, failed to enable media [ 1624.767362][T19854] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1624.838167][T19854] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1624.944643][T19854] lowmem_reserve[]: 0 2487 2487 0 0 [ 1624.976688][T19854] Node 0 DMA32 free:1169768kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19716kB inactive_anon:4kB active_file:47224kB inactive_file:199336kB unevictable:1536kB writepending:1328kB present:3129332kB managed:2547148kB mlocked:0kB bounce:0kB free_pcp:1684kB local_pcp:368kB free_cma:0kB [ 1625.062074][T19854] lowmem_reserve[]: 0 0 0 0 0 [ 1625.068551][T19854] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1625.136095][T19854] lowmem_reserve[]: 0 0 0 0 0 [ 1625.159511][T19854] Node 1 Normal free:3902856kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:188kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1625.243039][T19854] lowmem_reserve[]: 0 0 0 0 0 [ 1625.260265][T19854] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1625.295181][T19854] Node 0 DMA32: 2*4kB (UE) 901*8kB (ME) 577*16kB (M) 354*32kB (M) 342*64kB (UME) 86*128kB (ME) 48*256kB (UME) 24*512kB (UME) 43*1024kB (UME) 47*2048kB (UME) 229*4096kB (UM) = 1163520kB [ 1625.338348][T19854] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1625.367511][T19854] Node 1 Normal: 224*4kB (UME) 65*8kB (UME) 38*16kB (UME) 191*32kB (UME) 97*64kB (UME) 39*128kB (UME) 18*256kB (UM) 10*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 942*4096kB (UM) = 3902856kB [ 1625.421769][T19854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1625.457376][T19854] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1625.497702][T19854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1625.534334][T19854] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1625.562534][T19854] 64896 total pagecache pages [ 1625.583309][T19854] 1 pages in swap cache [ 1625.610742][T19854] Free swap = 124600kB [ 1625.624629][T19854] Total swap = 124996kB [ 1625.639133][T19854] 2097051 pages RAM [ 1625.653034][T19854] 0 pages HighMem/MovableOnly [ 1625.668338][T19854] 428606 pages reserved [ 1625.686347][T19854] 0 pages cma reserved [ 1626.756351][T19905] veth1_macvtap: left promiscuous mode [ 1627.129019][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3444'. [ 1627.336466][T19919] netem: incorrect gi model size [ 1627.360772][T19919] netem: change failed [ 1627.920046][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 1627.920062][ T29] audit: type=1400 audit(1737243811.364:63749): avc: denied { bpf } for pid=19929 comm="syz.8.3452" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1627.976662][ T29] audit: type=1400 audit(1737243811.392:63750): avc: denied { bpf } for pid=19929 comm="syz.8.3452" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1628.058219][ T29] audit: type=1400 audit(1737243811.410:63751): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1628.123267][ T29] audit: type=1400 audit(1737243811.410:63752): avc: denied { prog_run } for pid=19929 comm="syz.8.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1628.169518][ T29] audit: type=1400 audit(1737243811.420:63753): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1628.220590][ T29] audit: type=1400 audit(1737243811.429:63754): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1628.256094][ T29] audit: type=1400 audit(1737243811.429:63755): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1628.302719][ T29] audit: type=1400 audit(1737243811.438:63756): avc: denied { append open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1628.347012][ T29] audit: type=1400 audit(1737243811.438:63757): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1628.379069][ T29] audit: type=1400 audit(1737243811.448:63758): avc: denied { read write } for pid=16005 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1629.585377][ T8] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1629.777884][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 1629.896632][ T8] usb 10-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 1629.915802][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.923914][ T8] usb 10-1: Product: syz [ 1629.965501][ T8] usb 10-1: Manufacturer: syz [ 1629.980114][ T8] usb 10-1: SerialNumber: syz [ 1630.012804][ T8] usb 10-1: config 0 descriptor?? [ 1630.056919][ T8] go7007 10-1:0.0: probe with driver go7007 failed with error -12 [ 1630.232394][T19970] netlink: 'syz.1.3467': attribute type 4 has an invalid length. [ 1630.268418][T19974] syz.8.3471 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1630.332183][T19973] netlink: 'syz.7.3470': attribute type 7 has an invalid length. [ 1630.375586][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3470'. [ 1630.441088][T16118] usb 10-1: USB disconnect, device number 2 [ 1631.080366][T19987] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3476'. [ 1631.622926][T20004] ------------[ cut here ]------------ [ 1631.629810][T20004] WARNING: CPU: 0 PID: 20004 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xba8/0x1020 [ 1631.639821][T20004] Modules linked in: [ 1631.643723][T20004] CPU: 0 UID: 0 PID: 20004 Comm: syz.8.3479 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1631.654493][T20004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1631.664554][T20004] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 1631.670990][T20004] Code: ff ff 4c 89 e7 e8 08 fe 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 1631.676531][T20007] syz.7.3481[20007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1631.690589][T20004] RSP: 0018:ffffc9000ce27bd8 EFLAGS: 00010087 [ 1631.691159][T20004] RAX: 000000000000009f RBX: ffff888056316b40 RCX: ffffc9000da0d000 [ 1631.691178][T20004] RDX: 0000000000080000 RSI: ffffffff815ed3d7 RDI: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1631.691194][T20004] RBP: ffff888032492440 R08: 0000000000000001 R09: 0000000000000000 [ 1631.691208][T20004] R10: 0000000000000001 R11: 0000000000000003 R12: ffff888056316be4 [ 1631.691220][T20004] R13: 1ffff920019c4f80 R14: ffff888056316c18 R15: ffff888056316c00 [ 1631.691233][T20004] FS: 00007f1b4f93a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1631.691255][T20004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1631.691272][T20004] CR2: 000000110c2e9f24 CR3: 000000007ae68000 CR4: 00000000003526f0 [ 1631.771896][T20004] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1631.779859][T20004] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1631.787817][T20004] Call Trace: [ 1631.791083][T20004] [ 1631.794003][T20004] ? __warn+0xea/0x3c0 [ 1631.798066][T20004] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 1631.803866][T20004] ? report_bug+0x3c0/0x580 [ 1631.808366][T20004] ? handle_bug+0x54/0xa0 [ 1631.812693][T20004] ? exc_invalid_op+0x17/0x50 [ 1631.817368][T20004] ? asm_exc_invalid_op+0x1a/0x20 [ 1631.822406][T20004] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 1631.828203][T20004] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 1631.834000][T20004] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 1631.839797][T20004] ? cpu_clock_sample+0xc9/0x140 [ 1631.844729][T20004] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 1631.850797][T20004] posix_cpu_timer_set+0x9e1/0xd30 [ 1631.855914][T20004] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 1631.861546][T20004] ? __lock_timer+0x1a9/0x4c0 [ 1631.866215][T20004] do_timer_settime+0x26c/0x400 [ 1631.871053][T20004] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 1631.876676][T20004] ? __pfx_get_timespec64+0x10/0x10 [ 1631.881861][T20004] ? __pfx_do_timer_settime+0x10/0x10 [ 1631.887222][T20004] ? __pfx_do_futex+0x10/0x10 [ 1631.891891][T20004] __x64_sys_timer_settime+0x26a/0x2c0 [ 1631.897344][T20004] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 1631.903315][T20004] ? xfd_validate_state+0x5d/0x180 [ 1631.908430][T20004] do_syscall_64+0xcd/0x250 [ 1631.912931][T20004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.918819][T20004] RIP: 0033:0x7f1b4eb85d29 [ 1631.923223][T20004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1631.942824][T20004] RSP: 002b:00007f1b4f93a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 1631.951231][T20004] RAX: ffffffffffffffda RBX: 00007f1b4ed76080 RCX: 00007f1b4eb85d29 [ 1631.959191][T20004] RDX: 0000000020000080 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1631.967149][T20004] RBP: 00007f1b4ec01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1631.975107][T20004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.983065][T20004] R13: 0000000000000000 R14: 00007f1b4ed76080 R15: 00007fff19381198 [ 1631.991037][T20004] [ 1631.994043][T20004] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1632.001303][T20004] CPU: 0 UID: 0 PID: 20004 Comm: syz.8.3479 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 1632.012048][T20004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1632.022087][T20004] Call Trace: [ 1632.025349][T20004] [ 1632.028266][T20004] dump_stack_lvl+0x3d/0x1f0 [ 1632.032854][T20004] panic+0x71d/0x800 [ 1632.036738][T20004] ? __pfx_panic+0x10/0x10 [ 1632.041146][T20004] ? show_trace_log_lvl+0x29d/0x3d0 [ 1632.046340][T20004] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 1632.052137][T20004] check_panic_on_warn+0xab/0xb0 [ 1632.057062][T20004] __warn+0xf6/0x3c0 [ 1632.060942][T20004] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 1632.066736][T20004] report_bug+0x3c0/0x580 [ 1632.071059][T20004] handle_bug+0x54/0xa0 [ 1632.075212][T20004] exc_invalid_op+0x17/0x50 [ 1632.079710][T20004] asm_exc_invalid_op+0x1a/0x20 [ 1632.084553][T20004] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 1632.090957][T20004] Code: ff ff 4c 89 e7 e8 08 fe 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 1632.110547][T20004] RSP: 0018:ffffc9000ce27bd8 EFLAGS: 00010087 [ 1632.116602][T20004] RAX: 000000000000009f RBX: ffff888056316b40 RCX: ffffc9000da0d000 [ 1632.124558][T20004] RDX: 0000000000080000 RSI: ffffffff815ed3d7 RDI: 0000000000000001 [ 1632.132515][T20004] RBP: ffff888032492440 R08: 0000000000000001 R09: 0000000000000000 [ 1632.140472][T20004] R10: 0000000000000001 R11: 0000000000000003 R12: ffff888056316be4 [ 1632.148427][T20004] R13: 1ffff920019c4f80 R14: ffff888056316c18 R15: ffff888056316c00 [ 1632.156395][T20004] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 1632.162210][T20004] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 1632.168004][T20004] ? cpu_clock_sample+0xc9/0x140 [ 1632.172933][T20004] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 1632.178993][T20004] posix_cpu_timer_set+0x9e1/0xd30 [ 1632.184103][T20004] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 1632.189731][T20004] ? __lock_timer+0x1a9/0x4c0 [ 1632.194399][T20004] do_timer_settime+0x26c/0x400 [ 1632.199234][T20004] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 1632.204858][T20004] ? __pfx_get_timespec64+0x10/0x10 [ 1632.210043][T20004] ? __pfx_do_timer_settime+0x10/0x10 [ 1632.215403][T20004] ? __pfx_do_futex+0x10/0x10 [ 1632.220071][T20004] __x64_sys_timer_settime+0x26a/0x2c0 [ 1632.225518][T20004] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 1632.231488][T20004] ? xfd_validate_state+0x5d/0x180 [ 1632.236597][T20004] do_syscall_64+0xcd/0x250 [ 1632.241094][T20004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.246980][T20004] RIP: 0033:0x7f1b4eb85d29 [ 1632.251385][T20004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1632.270978][T20004] RSP: 002b:00007f1b4f93a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 1632.279381][T20004] RAX: ffffffffffffffda RBX: 00007f1b4ed76080 RCX: 00007f1b4eb85d29 [ 1632.287341][T20004] RDX: 0000000020000080 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1632.295302][T20004] RBP: 00007f1b4ec01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1632.303260][T20004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1632.311218][T20004] R13: 0000000000000000 R14: 00007f1b4ed76080 R15: 00007fff19381198 [ 1632.319184][T20004] [ 1632.322410][T20004] Kernel Offset: disabled [ 1632.327453][T20004] Rebooting in 86400 seconds..