last executing test programs: 4m15.699139993s ago: executing program 4 (id=435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1d6, 0x68e03) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4, 0x64167553}}, './file0\x00'}) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "0200", "ec094ea7c59700000000070000000000000000000000000000006b00", "cf00", "fffffffffffffffd"}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00'}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000001480)="acca", 0x2}], 0x1) 4m15.561981467s ago: executing program 4 (id=438): r0 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000}, 0x48080) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000dc0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 4m12.339262042s ago: executing program 4 (id=445): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 7) 4m11.843060041s ago: executing program 4 (id=449): syz_emit_ethernet(0xffffffffffffff65, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0a03"], 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x800000, 0x0, 0x100c139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xf9, 0x2, 0xfffffffe, 0x1, 0x9, 0x6, 0x100, 0xffffffff, 0xffff, 0x3, 0x40000003, 0x88, 0x6, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 4m11.810609837s ago: executing program 4 (id=451): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001380)=[{{&(0x7f0000000140), 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/34, 0x22}], 0x3, &(0x7f0000000380)=""/4096, 0x1000}, 0x4}], 0x1, 0x100, &(0x7f00000013c0)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200000) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x80000001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="07000000010001", 0x7) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0xfffffffffffffffd) 4m10.93979506s ago: executing program 4 (id=454): syz_open_dev$usbfs(&(0x7f0000000000), 0x12cb, 0x8000) r0 = syz_io_uring_setup(0x3bf2, &(0x7f00000000c0)={0x0, 0xf907, 0xd3c9c1b97b2fff64, 0x1, 0x306}, &(0x7f0000000040), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee5, 0x800, 0xffffffff, 0x3aa, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x4100, 0x2, 0x0, 0x300) 3m55.897688096s ago: executing program 32 (id=454): syz_open_dev$usbfs(&(0x7f0000000000), 0x12cb, 0x8000) r0 = syz_io_uring_setup(0x3bf2, &(0x7f00000000c0)={0x0, 0xf907, 0xd3c9c1b97b2fff64, 0x1, 0x306}, &(0x7f0000000040), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee5, 0x800, 0xffffffff, 0x3aa, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x4100, 0x2, 0x0, 0x300) 3m41.057756782s ago: executing program 2 (id=539): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000100)={0xfe95, 0x5, 0x0, 0x0, 0x3, 0xb49, 0x2, 0x13b8, 0x2, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}}) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) 3m39.990914207s ago: executing program 2 (id=546): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = fanotify_init(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x455, 0x8000003, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@wrmsr={0x65, 0x20, {0x4b564d01, 0x401bf7}}], 0x20}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000500)=[@wrmsr={0x65, 0x20, {0x4b564d01, 0x9}}], 0x20}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m39.670660889s ago: executing program 2 (id=548): syz_open_dev$video4linux(&(0x7f00000000c0), 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000005c0)='rxrpc_call\x00', r1, 0x0, 0x3fc}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0xf) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r6, &(0x7f0000000140)={0x22, 0x91, 0x3, 0x6, 0x81}, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) ioctl$KVM_CAP_HYPERV_SEND_IPI(r7, 0x4068aea3, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48090}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 3m38.295145102s ago: executing program 2 (id=551): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) fanotify_init(0x200, 0x0) (async) syz_clone3(&(0x7f0000000100)={0x23800080, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r1 = syz_open_procfs(0x0, 0x0) (async) r2 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) (async) read$FUSE(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000200)=""/98) (async) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e24, 0x4, @remote, 0x7}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3m37.315771427s ago: executing program 2 (id=554): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002dc0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e00)={0x78, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004500001c000000000001900800ffffffff1200907800000000000000"], 0x0) syz_usb_connect(0x0, 0xb2, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002a012d308d8130200d360010203010902a00001390800000904a10400faee43050b2406000034619da63c5a05240004000d240f014000000001010000421524120600a317a88b045e4f01a607c0ffcb7e392a06241a0100010524150200282413569493905f8c06671fb62f569ad7069d61a9f9503ba092e8367365d1a28c20eff573e5a43108241c010090fbff07240a81992e0000339f630524000f000d240f0103000000040006000f"], &(0x7f00000003c0)={0x0, 0x0, 0x1d, 0x0}) getresuid(0x0, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x20000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x13) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000088520300440012800b0001e6687036746e6c00003400028014000300fc0000000000000000000000000000000800010065ba9956bb2757d2823da6b451acb16d8ddf766aa92b40f45342f3c17e6e6483fdcf46e23d97eb826eb8d12c184fbcf85bf25d30df555c88bdff0b86fa8e7efaec4ed4853c673c2ed67c96cdf70c3022495495e7428e98531c7832395e41e583cff95ad661199a5fdf0fb13e810a3868fbf8fbdd031c68055ae5", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000bb"], 0x64}}, 0x4000080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @private=0xa010101}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x8001}, 0x8) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x40000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) statx(0xffffffffffffffff, 0x0, 0x2000, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 3m33.239320261s ago: executing program 2 (id=569): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600, 0x600}, 0x21) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/238, 0xee}], 0x1, 0xffff0002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x1a0941, 0x190) fcntl$setlease(r8, 0x400, 0x1) r9 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r9, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(r13, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r13, &(0x7f0000000200)=ANY=[], 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 3m18.243609734s ago: executing program 33 (id=569): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600, 0x600}, 0x21) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/238, 0xee}], 0x1, 0xffff0002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x1a0941, 0x190) fcntl$setlease(r8, 0x400, 0x1) r9 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r9, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(r13, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r13, &(0x7f0000000200)=ANY=[], 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 9.307853522s ago: executing program 1 (id=1293): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) 7.711812869s ago: executing program 1 (id=1296): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffc]}, 0x8, 0x800) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000070000008000000000000000", @ANYRES32=0x1, @ANYBLOB="005af238000000000000ff84755b7f00002c0eee40d65d10931cf3378f3f5563550a8c82ec86bb6967269e909d89b237c01adb37583649493bbafa13781729ef7a67de9dc6c549f83dee1593d33b659a5a657397526a4ea9fc81bb32baa64e28fa50482e6838a07094", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @hci={0x1f, 0x1, 0x1}, @nfc={0x27, r5, 0x1, 0x6}, @xdp={0x2c, 0xc, r8, 0x16}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)='macvlan0\x00', 0x5, 0x2, 0xd6}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x2, &(0x7f0000000140)) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r13 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r14 = open(&(0x7f0000000200)='./file0\x00', 0x145542, 0x0) ftruncate(r14, 0x2007ffd) sendfile(r12, r13, 0x0, 0x1000a3) syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x40, 0x1, 0x4000032f, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r16 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r16}, &(0x7f0000bbdffc)) 6.551715932s ago: executing program 3 (id=1300): bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xfff7ffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0xffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80202, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000280)='./file0/file1\x00', 0x400100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xffff, @loopback, 0x1}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) times(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x14000003}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x84, 0x7, 0x7fbf, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xffffffffffffffff, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x4, 0x0, 0x9b5, 0x0, 0x9, 0x9, 0x2, 0x0, 0x80000003, 0x86, 0x3, 0x0, 0xb9e4, 0x0, 0x100000000000000, 0x2, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x3, 0x61, 0x9, 0x6, 0x8, 0xfffffffffffffffe, 0x0, 0x1, 0x10, 0x3, 0xfffffffffffffff8, 0x7668c404, 0x0, 0x3ff, 0xc000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xffffeffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffff, 0xfffffffffffffff8, 0x5, 0xf3, 0x0, 0x10001, 0xebc, 0x0, 0x4000000000000, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x100010000000, 0x7fffffff, 0x6, 0x0, 0x1, 0x800000000007, 0xfffffffffffffffe, 0x4, 0x5, 0x4, 0xfffffffffffffffd, 0x1, 0x100000000, 0xf32, 0x9, 0x2001, 0x0, 0x3, 0x0, 0xa562, 0x0, 0x80000005, 0xffffffffffffffff, 0x0, 0x80000000005, 0x8, 0x1, 0xfffffffffffffffd, 0x200000000002, 0xfffffffffffffffe, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x101, 0x0, 0x7, 0x4, 0x1555, 0x40, 0x0, 0x1, 0x0, 0xf65, 0x5]}) symlink(&(0x7f0000000000)='.\x00', 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0/file1\x00') syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 6.47944685s ago: executing program 1 (id=1302): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x60) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500223803001400128009000100626f6e640000000004000280040001"], 0x40}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) 5.737193585s ago: executing program 1 (id=1303): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x14000, 0x0, 0x101, 0x0, 0x6, "88bffaef59518d2dc9412a8b88ffd451056723", 0x3, 0x4}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x4) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0x1, 0x200, 0x8, 0x2c, 0x80000005, 0x1}) 5.51886453s ago: executing program 3 (id=1305): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000026008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @remote}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x0, 0x3, 0xffffc8b4, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x66, 0x0, 0xff, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, {[@noop, @ssrr={0x89, 0x7, 0xd, [@loopback]}, @rr={0x7, 0x1b, 0x1d, [@rand_addr=0x64010100, @multicast2, @remote, @multicast1, @remote, @remote]}, @cipso={0x86, 0xe, 0x2, [{0x1, 0x8, "003fa9613ea7"}]}, @lsrr={0x83, 0x1b, 0x21, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @private=0xa010102, @local, @remote]}, @generic={0x88, 0x10, "1aa170e71eb6fd99499fd69c58a5"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xe4, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000600)={0xfffffffffffffedd, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x2, 0x0) 5.304131455s ago: executing program 1 (id=1307): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgid(0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_open_dev$loop(&(0x7f0000000040), 0x800, 0x6000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) keyctl$search(0xa, r0, &(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, r0) 4.590911255s ago: executing program 0 (id=1309): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6", 0x1}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xab}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="f6545097a63ebe15d5737ab18a96e1610c0e5ff3e2fa407deb36687fb2602605e834abaf439404961546ece396cd6a0f9c7b71ce566bd45e9da08989200a2f0abcbd5008f368565da7775d22c301128e94c536f8662eb4945d87595449ff995b777b3ddc888cee5e6605174fb237a4c88d335db0c1f5bd61f15432d379738371abd5f2f8debfe56c38590b2c9b51ceaab05b3910df0c546980044e17fcc89820142611a169dae227326b36e82f26a2d4eef23c37504b5310762e1174f3fc7281ed5ae9d83f630634bc00d434bb5ae958d77b94f3a2ca14aa54244479d04efa61071cb24ca08888acfdb15516fec5a0a9fcd208b6c7683a8a8f72fa9aee442f46bc4dff0c84a39b34d58230ee86c369997e3b6339faff3c8bcb2c803dffc19414db25c677139126fb38ddcab85e07518c032ca549ef67685687db08f09e1694c08789c85992f7953125ef8a940201ae314edd5b6016e91730586f021a9ecf74d2cfe184bf7444d368bed8bcfd8bab42362d926bb6b47cf20e5746a4c97ab73198461f4fa48375a146784795914b96e7c3b8c33f335a51b5affe5a90cd2f365b13f5373645f1c3aedc043e9bfa00718f7cc6585b7a5dcd347f1a68", 0x1ba}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) 3.904507656s ago: executing program 6 (id=1311): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x13) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd9}, 0x20044050) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=@ipv4_delrule={0x48, 0x21, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0xc4, 0x10, 0x8, 0x4, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e21}}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010100}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x24040081) 3.793823689s ago: executing program 6 (id=1313): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c4}, 0x4084) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22503, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4005800}, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xfb, 0x1, '\x00', 0xfffffffffffffff9}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x2, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0xc, [{0xa, 0x2, 0xffff17ae}]}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @datasec={0x7, 0x3, 0x0, 0xf, 0x1, [{0x4, 0xa}, {0x2, 0x9}, {0x3, 0x44, 0x6}], '3'}]}}, &(0x7f0000000280)=""/91, 0x72, 0x5b, 0x1, 0x1}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 3.715019323s ago: executing program 3 (id=1314): getrlimit(0x1d, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000300)={@empty}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005a80)={'wlan0\x00'}) syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x24040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f00002bf000/0x4000)=nil, 0x4000, 0x2, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xfa11, 0xfdffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, 0x0, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.710516964s ago: executing program 1 (id=1315): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000480)=0x7fffffff, 0x4) socket$netlink(0x10, 0x3, 0xf) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000300)={0x8, r5}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000380)=@arm64) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) 3.620936606s ago: executing program 0 (id=1316): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b"], 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)={0x20, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$packet(0x11, 0x3, 0x300) unshare(0x8000000) (async) r4 = semget$private(0x0, 0x3, 0x588) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0x43, 0x1000}], 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x20100, 0x800, 0x5, 0x2, 0x4]}, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)) (async) unshare(0x8000000) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000004080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6700000100143afffe880000000000000000000000000201ff02000000000000000000000000000187009078200100"/74], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.467476979s ago: executing program 34 (id=1315): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000480)=0x7fffffff, 0x4) socket$netlink(0x10, 0x3, 0xf) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000300)={0x8, r5}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000380)=@arm64) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) 3.422855797s ago: executing program 5 (id=1318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) 3.415601138s ago: executing program 6 (id=1319): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000094}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x6e1356c08ebeae86) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x0, 0x5}, &(0x7f0000000200)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0xf) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.38571452s ago: executing program 0 (id=1320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0xffffffffffffffba) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000380)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x82d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$mice(0xffffffffffffff9c, 0x0, 0x101080) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.516533264s ago: executing program 5 (id=1321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x60, 0xc}}}}]}, 0x48}}, 0x4000010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000400000000000000", @ANYRESDEC=r0, @ANYBLOB="00000000000100f1607e53f61f186e0008000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000c882ab66d5f3ca3c7c3e99de7e9e080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r6 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffb, 0x2340) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r6, 0xc01064c4, &(0x7f0000000280)={0x0}) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x8002756, &(0x7f0000000300)={0x0, 0xffffffff, 0x8, 0x2, 0x37f, 0x0, r7}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000006c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x20, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) syz_emit_ethernet(0x4a, &(0x7f0000004080)=ANY=[@ANYBLOB="ffffaaaaaa86dd6700000100143afffe880000000000000000000000000201ff02000000000000000000000000000187009078200100"/74], 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r11, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="e6b675fbab3eda53fc9364fb628fbc314665bf5351f1582dcb37a66be23b00658cf1b9750d1994c0fc2d2d3b2116f3e6494d0735bdfce3066280457f1590151592", @ANYRES64=0x0], 0x10) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000680)=""/9, 0x9}, {&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000000780)=""/68, 0x44}, {&(0x7f0000000940)=""/155, 0x9b}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/7, 0x7}], 0x7, &(0x7f0000000240)=""/9, 0x9}, 0x100) fsmount(0xffffffffffffffff, 0x1, 0x174) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000021000030400000000fcdbdf25e1ff7300", @ANYRES32=0x0, @ANYBLOB="1018000007500500140012800b000100627269646765000004003f80"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4800) syz_open_dev$vim2m(&(0x7f0000000040), 0x8000, 0x2) r13 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ftruncate(r13, 0x2007fff) write(r10, &(0x7f0000000800)="03f17ed297e1478e8e3f81af337bb8b786bd19835a6356224fec1886de51a0174f841ce5408756f00a3b7604a715d1590bd8535549467c1b30a09a320cac59fd8392c560d766095996917eed5a21c72ffdf41516610000000000000000", 0x91) openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x18281, 0x0) 2.415463452s ago: executing program 0 (id=1322): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010101, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x24000058) 2.316588787s ago: executing program 6 (id=1323): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) (async) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000600)) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async, rerun: 32) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) (async, rerun: 32) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async, rerun: 32) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000180)={0x110001, 0x0, {[0x7fffffff, 0x5, 0x8, 0x7, 0x6, 0x4, 0x431, 0x8]}}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x7101}) (async) write$cgroup_devices(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd568020031b87b548cb74136f366da0abe01880b"], 0xffdd) 2.096208273s ago: executing program 0 (id=1324): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x7, 0x1, 0x7, 0x2, 0x73, 0x10000000003, 0x4}, &(0x7f0000000100)={0x1b, 0x3, 0x6, 0x0, 0x7, 0x400000, 0x0, 0x5}, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r3, @ANYBLOB="000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffe5b703000008000000b7040000020000008500000082000000b7080000000000007baaf8ff00040000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000f033131182a95a7a48eed95cfbc86120fc0f87b26eeaef48004612a6755b8857fcaf5d1ae3b0936a1b097d4c45bfc00d9d745ae494a7bed777ca1d54156c636a000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 1.494796341s ago: executing program 5 (id=1325): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgid(0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_open_dev$loop(&(0x7f0000000040), 0x800, 0x6000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) keyctl$search(0xa, r0, &(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, r0) 1.485542447s ago: executing program 6 (id=1326): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) read$ptp(r6, &(0x7f0000000500)=""/65, 0x41) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000002c0)={'veth0_vlan\x00', @random='D\x00\x00\x00(E'}) 568.87147ms ago: executing program 5 (id=1327): mkdir(&(0x7f0000000040)='./file1\x00', 0x9a) llistxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)=""/143, 0x8f) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) timer_create(0x0, 0x0, 0x0) timer_getoverrun(0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffd) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000006e104300000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x598, &(0x7f00000000c0)={0x0, 0x2000b728, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x7, 0x0, 0xdd5, 0x88d7, 0x8f, 0x2, 0x8012, 0x1006, 0xffffffff, 0x203, 0x7, 0x10000009, 0x3, 0x5, 0xfffffffd, 0x8, 0x6, 0x9, 0x8e, 0x3, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0xc, 0x4, 0x400002, 0x22]}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x4031, 0xffffffffffffffff, 0xffffe000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10040) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f00000003c0)={0x1000, 0x80000000, 0x1, 'queue1\x00', 0x6}) 426.777543ms ago: executing program 6 (id=1328): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069000c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x42, r2}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb2687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c1181351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cda42488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xfffffffffffffffe, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x80000, 0x114) ioctl$sock_TIOCOUTQ(r5, 0x545c, 0x0) 363.443853ms ago: executing program 3 (id=1329): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="010100000000000000000000040000001811000023c99ee38d9d7bb9dfcbf7e070cbe0c06191b8d6388b2260b53263a94d7096b47067c2486dd4f02b4bf19df916fb0bd2d865943ab566773f4919570a740be4d105ec83e612", @ANYRES32, @ANYBLOB="0000f00000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_off}]}) 363.080353ms ago: executing program 0 (id=1330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) 317.640795ms ago: executing program 5 (id=1331): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001280)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) write$sndseq(r2, &(0x7f00000006c0)=[{0xe, 0x81, 0x0, 0xfd, @tick=0x5, {}, {0xe}, @connect={{0x81, 0x2}, {0x9, 0x10}}}], 0x1c) (async) r3 = fanotify_init(0x8, 0x80000) socket$alg(0x26, 0x5, 0x0) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r7, 0x8800000) (async) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x41) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r9, 0xd5) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(r8) (async) accept(r9, 0x0, 0x0) sendfile(r8, r7, 0x0, 0x578410ed) (async) shutdown(r10, 0x0) (async) r11 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r11}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={'nhpoly1305-sse2\x00'}}) 141.570694ms ago: executing program 3 (id=1332): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1a0, 0x2f8, 0xffffffff, 0x1a0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x84}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @private=0xa010101, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa1) 11.071023ms ago: executing program 5 (id=1333): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000c40)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000340)="00d408e82931e56763dc06000000", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f0000000800)=@nl, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000c40)=""/130, 0x82}, {&(0x7f0000000880)=""/11, 0xb}, {&(0x7f0000001280)=""/266, 0x10a}, {&(0x7f0000000e00)=""/72, 0x48}], 0x5, &(0x7f0000000d00)=""/226, 0xe2}, 0x1}, {{&(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001080)=""/125, 0x7d}, {&(0x7f0000000f00)=""/132, 0x84}], 0x2, &(0x7f00000011c0)=""/45, 0x2d}, 0xb4}], 0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000001180)={0x14, &(0x7f0000000fc0)={0x40, 0x10, 0x39, {0x39, 0x21, "2274bf374efb13757067b48400469c8236cc7d0534cf807bd652933ea5e3099b280656c7d774043c365c5d2e263da7e7632c69d715d05e"}}, &(0x7f0000001100)={0x0, 0x3, 0x71, @string={0x71, 0x3, "c1c051643646c0f5ec0c1afee57503324bfff217e80678f3f55df7d859518edae4059f378fa12c43a19362afcfe631c16a95bd9ace2fcd76a8485ee842d87923dd6156b4ab3c7df2c0175cef1781603fef03cc80631171b994a3f312565689f9911a38939f418f14c39f06c4239ed1"}}}, &(0x7f0000001540)={0x2c, &(0x7f00000013c0)={0x20, 0xc, 0x6d, "8bd011b974f1402860d0d7584d571ec29ac57179cc70296f2cfd930937c23e5be87c9f1f85023707118ddba1d595f958081017cfc8af50b85a21c6682fe6197c848f2760bc051653c1f3f831fa99f7f4744f575f031c3c1b6b9088dd46b963cab92f9338383095a125a3c837ea"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000014c0)={0xc0, 0x5, 0x3, "1ae312"}, &(0x7f0000001500)={0x40, 0x5, 0x4, "c80a5ba3"}}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_usb_control_io(r1, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0xfffffffffffffff8, 0xa0ce, 0xc}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f0000000600)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x210, 0x10, 0x1, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x1, 0x7, 0xfffc, 0x0, 0xa, 0x0, 0xc2ca4bd923256b4d, 0x3c}, {@in=@loopback, 0x0, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x18e, 0x9ba3, 0xffff, 0x251c, 0x3, 0x6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {0xffffffff, 0x1}, 0x80, 0x34ff, 0xa, 0x1, 0x3}, [@replay_esn_val={0x3c, 0x17, {0x8, 0x70bd2a, 0x70bd25, 0x70bd29, 0x70bd2c, 0x6, [0x3, 0x0, 0xa3, 0x0, 0x5ba, 0x7, 0x895, 0x1]}}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0xcf, 0x4e20, 0xffff, 0x2, 0xa0, 0x20, 0x2c, 0x0, r7}, {@in=@local, 0x4d2, 0x6c}, @in=@multicast1, {0xc0e, 0x5, 0x5, 0x1000100000, 0x5, 0x100000000, 0xf3a5, 0xad}, {0x7, 0x7f7, 0xe3, 0x1000}, {0x2, 0x200, 0x3}, 0x70bd2b, 0x3501, 0x2, 0x2, 0x8, 0x40}}]}, 0x210}, 0x1, 0x0, 0x0, 0x2400c0a2}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x20, 0xd}, &(0x7f0000000180)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12015002000000000000006040000102030109022d00010174800209040003020301030609020000e50122680a090581030800039401090502030004070a95"], &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0xe, 0x8, 0x7, 0x40, 0x9}, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="050f0f00010a10030205000801ff7f3b79246cf20d5f5b12d80e04061ca94a1e78292e2727bf665c509effac3a72d4d821df14804661d111f8c1fd4077afe852365001a9ab4768590ef3ab602092481e3b59bc082f2537216c5673eae90f72cf6050e452532f703cd42bf2a4205fa1cfa9b6bdfb554dfbc83aad56b4290334b709cb4e9e62bcce34185b6b393b6e1b3f9ab6fdcd2eeeebc148c599a6889a3f0c05fa5179567d90d9fcfed6e53228e3b2e8b022636378f372039124f6c4eb35b4151b6721dc416b8892cbe0d2ee0aec3dbcf5f88dffeabc0476bf49976fa33e"], 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81a}}, {0xe2, &(0x7f0000000400)=@string={0xe2, 0x3, "817d3260e79aad8bc437e7bbaa733874c1e7a4065643a55d5e1ce8ef9bab1f77041d34f4e48841984d9fa0ce5010f83355dec252abf8fb01800b2d8ac5ec4b8b2f74937544b99a86b09fb47d467506acf476607c19498b5fbf72d8a9099774c0c853b00ac089e47bd67b236424e87d54f387009c1c8ce7ea87a78c616b9d981fe96f75524f778eef25403cd7d98a9ed6b8472cdd652d19baa50d8e37ab0ae23ed51826eac503429924cc3aa3c5bf3bd4ffa6ff1d385c4ef2198a05cf63a4676b44cfc003a788266ce04c49b5e86d180878ba2e89c9a51e52a860e9c966568028"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44e}}, {0xc6, &(0x7f0000000680)=@string={0xc6, 0x3, "2c6dc861da4fb69b32f027a5de0a95d5d3501ab96ba041118528cce9da892cd225105cb49af248ecd00715fa7574c43f7f5a45ece30c1ad6e25083a403e11c39158c8d61807e86d399f6d0698c5b4e1273772c6bad3a1262cdf0e03aea766d494a28fd98a9f6fcde83a071028f6d57f3a79579902154fcff5f309e8f5ee8abbf9db1d1c0b34b35826538801334407382052135a0df6117838d898e0983aee84a6350c8711f0c713cbfd95719ad685d637ca8904a115f81824132f5b557f7d66dd16c7e62"}}]}) 0s ago: executing program 3 (id=1334): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000180)={0x9f69, 0x9, 0x7fffffff, 0x3, 0x8, 0x9}) kernel console output (not intermixed with test programs): [ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.470207][ T5828] usb 2-1: Product: syz [ 245.479372][ T5828] usb 2-1: Manufacturer: syz [ 245.484667][ T5828] usb 2-1: SerialNumber: syz [ 245.491062][ T5828] usb 2-1: config 0 descriptor?? [ 245.719927][ T6134] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 245.873015][ T6134] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 245.901742][ T6134] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 245.902381][ T5819] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.913535][ T6134] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 245.933027][ T5828] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 245.942581][ T5819] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.945199][ T6134] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 245.953432][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.959935][ T6134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.968091][ T5819] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.976661][ T6134] usb 6-1: Product: syz [ 245.984654][ T5828] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 245.988115][ T6134] usb 6-1: Manufacturer: syz [ 245.995360][ T5828] usb 2-1: media controller created [ 246.000451][ T6134] usb 6-1: SerialNumber: syz [ 246.010010][ T5819] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.017866][ T5819] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.030983][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.044918][ T6134] usb 6-1: config 0 descriptor?? [ 246.050609][ T8452] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 246.057976][ T8452] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 246.080803][ T6134] usb 6-1: ucan: probing device on interface #0 [ 246.097866][ T8462] lo speed is unknown, defaulting to 1000 [ 246.136575][ T5828] zl10353_read_register: readreg error (reg=127, ret==0) [ 246.144981][ T5828] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 246.153473][ T5828] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 246.166263][ T5828] usb 2-1: USB disconnect, device number 16 [ 246.208233][ T5828] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 246.325239][ T8462] chnl_net:caif_netlink_parms(): no params data found [ 246.400346][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.407654][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.415544][ T8462] bridge_slave_0: entered allmulticast mode [ 246.423511][ T8462] bridge_slave_0: entered promiscuous mode [ 246.431840][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.439017][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.446414][ T8462] bridge_slave_1: entered allmulticast mode [ 246.454200][ T8462] bridge_slave_1: entered promiscuous mode [ 246.486113][ T8462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.498315][ T8462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.531966][ T8462] team0: Port device team_slave_0 added [ 246.540140][ T8462] team0: Port device team_slave_1 added [ 246.568654][ T8462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.575666][ T8462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.602741][ T8462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.614798][ T8462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.622359][ T8462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.648455][ T8462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.739278][ T8462] hsr_slave_0: entered promiscuous mode [ 246.759348][ T8462] hsr_slave_1: entered promiscuous mode [ 246.771662][ T8462] debugfs: 'hsr0' already exists in 'hsr' [ 246.780961][ T8462] Cannot create hsr debugfs directory [ 247.543080][ T6134] ucan 6-1:0.0: probe with driver ucan failed with error -110 [ 248.122095][ T5833] Bluetooth: hci6: command tx timeout [ 248.336321][ T8462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.353610][ T8462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 248.376465][ T8462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 248.392805][ T8462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 248.506838][ T8462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.528339][ T8462] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.648327][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.655493][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.672154][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.679320][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.716562][ T8462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.989410][ T8462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.085836][ T5990] usb 6-1: USB disconnect, device number 3 [ 249.941408][ T8514] 9p: Bad value for 'rfdno' [ 250.019071][ T8514] macvlan3: entered promiscuous mode [ 250.024716][ T8514] bridge0: entered promiscuous mode [ 250.476846][ T5933] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 250.492916][ T5819] Bluetooth: hci6: command tx timeout [ 250.557230][ T5933] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 250.608974][ T8517] fuse: Unknown parameter '‘0vMð!‘{Ö'~¯f×Bk"¬àü­—¨pÜüx¢ò+4ØÕ]íC.ÜFWáZ‚lxëòzéæÖ.Ü ­×–×L­ög¶%õزþ`43' [ 250.668265][ T5933] usb 1-1: USB disconnect, device number 17 [ 251.624949][ T8462] veth0_vlan: entered promiscuous mode [ 251.699579][ T8462] veth1_vlan: entered promiscuous mode [ 251.728959][ T8520] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 251.976084][ T8462] veth0_macvtap: entered promiscuous mode [ 252.019453][ T8462] veth1_macvtap: entered promiscuous mode [ 252.505648][ T5833] Bluetooth: hci6: command tx timeout [ 252.619159][ T8462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.711148][ T30] audit: type=1326 audit(1765803695.545:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.0.631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55f8b8f749 code=0x0 [ 252.722032][ T8462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.260946][ T6841] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.281857][ T6841] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.304566][ T6841] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.317735][ T30] audit: type=1400 audit(1765803696.185:756): avc: denied { lock } for pid=8526 comm="syz.0.631" path="socket:[20518]" dev="sockfs" ino=20518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 253.363829][ T6841] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.221294][ T5933] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 254.448271][ T3833] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.490928][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 254.497578][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.526636][ T3833] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.542677][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.562666][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.575874][ T5933] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 254.586009][ T5833] Bluetooth: hci6: command tx timeout [ 254.592164][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.602800][ T5933] usb 6-1: config 0 descriptor?? [ 254.760024][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.771307][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.810327][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.820614][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.855443][ T3833] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.872450][ T3833] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.333273][ T5933] input: HID 0955:7214 Haptics as /devices/virtual/input/input17 [ 255.425024][ T30] audit: type=1400 audit(1765803698.295:757): avc: denied { write } for pid=8537 comm="syz.5.633" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 255.445144][ T8538] random: crng reseeded on system resumption [ 255.468370][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.475140][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.491788][ T3833] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.496840][ T5933] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 255.548418][ T3833] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.551755][ T30] audit: type=1400 audit(1765803698.315:758): avc: denied { ioctl } for pid=8537 comm="syz.5.633" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 255.582730][ T5933] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 255.593937][ T8558] netlink: 56 bytes leftover after parsing attributes in process `syz.5.633'. [ 255.650293][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.665960][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.831693][ T3833] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.869557][ T3833] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.934289][ T5990] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 255.951518][ T5933] usb 6-1: USB disconnect, device number 4 [ 255.966032][ T30] audit: type=1400 audit(1765803698.835:759): avc: denied { map } for pid=8567 comm="syz.3.641" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.993461][ T8571] 9p: Bad value for 'wfdno' [ 255.998316][ T5990] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 256.032744][ T5990] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 256.056197][ T5990] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 257.503491][ T3833] bridge_slave_1: left allmulticast mode [ 257.609426][ T3833] bridge_slave_1: left promiscuous mode [ 257.616913][ T3833] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.851370][ T5891] IPVS: starting estimator thread 0... [ 257.869556][ T3833] bridge_slave_0: left allmulticast mode [ 257.882684][ T3833] bridge_slave_0: left promiscuous mode [ 257.888440][ T3833] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.970936][ T8595] IPVS: using max 37 ests per chain, 88800 per kthread [ 259.256669][ T8613] Cannot find add_set index 0 as target [ 259.446514][ T8610] netlink: 56 bytes leftover after parsing attributes in process `syz.1.650'. [ 259.509676][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.6.651'. [ 260.501063][ T980] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 260.670981][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 260.682959][ T980] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 260.826879][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.862230][ T980] usb 4-1: config 0 descriptor?? [ 260.877610][ T980] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 260.883836][ T5934] IPVS: starting estimator thread 0... [ 261.466384][ T8638] IPVS: using max 64 ests per chain, 153600 per kthread [ 262.104638][ T980] gspca_vc032x: reg_r err -110 [ 262.123369][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.151182][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.170937][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.176272][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.242237][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.247553][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.880970][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.072502][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.078169][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.090972][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.096301][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.112946][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.118242][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.144367][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.157152][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.166707][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.191069][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.196407][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.203888][ T980] gspca_vc032x: Unknown sensor... [ 263.209000][ T980] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 263.375535][ T5905] usb 4-1: USB disconnect, device number 19 [ 263.785345][ T3833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.798904][ T3833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.818191][ T3833] bond0 (unregistering): Released all slaves [ 264.139605][ T8658] tun0: tun_chr_ioctl cmd 1074025675 [ 264.162526][ T8653] netlink: 192 bytes leftover after parsing attributes in process `syz.3.659'. [ 264.211817][ T8658] tun0: persist enabled [ 264.365366][ T30] audit: type=1400 audit(1765803707.235:760): avc: denied { create } for pid=8651 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 264.391161][ T8653] input: syz0 as /devices/virtual/input/input18 [ 265.144414][ T30] audit: type=1400 audit(1765803707.235:761): avc: denied { getopt } for pid=8651 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.173976][ T8659] tun0: tun_chr_ioctl cmd 1074025675 [ 265.188478][ T8659] tun0: persist disabled [ 265.681816][ T30] audit: type=1400 audit(1765803708.555:762): avc: denied { write } for pid=8676 comm="syz.6.663" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.530795][ T3833] hsr_slave_0: left promiscuous mode [ 266.544890][ T3833] hsr_slave_1: left promiscuous mode [ 266.556066][ T3833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.576525][ T3833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.613182][ T3833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.728414][ T3833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.754757][ T8701] netlink: 'syz.0.666': attribute type 4 has an invalid length. [ 266.813806][ T8704] netlink: 'syz.0.666': attribute type 4 has an invalid length. [ 266.829087][ T3833] veth1_macvtap: left promiscuous mode [ 266.837724][ T3833] veth0_macvtap: left promiscuous mode [ 266.843552][ T3833] veth1_vlan: left promiscuous mode [ 266.860945][ T3833] veth0_vlan: left promiscuous mode [ 268.747199][ T30] audit: type=1400 audit(1765803711.605:763): avc: denied { setattr } for pid=8716 comm="syz.1.669" name="" dev="pipefs" ino=21578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 269.836985][ T8728] xt_TCPMSS: Only works on TCP SYN packets [ 270.590096][ T8733] Illegal XDP return value 1499482496 on prog (id 152) dev N/A, expect packet loss! [ 270.828007][ T8750] kernel profiling enabled (shift: 63) [ 270.843605][ T8750] profiling shift: 63 too large [ 270.871030][ T5905] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 270.974708][ T3833] team0 (unregistering): Port device team_slave_1 removed [ 271.023799][ T3833] team0 (unregistering): Port device team_slave_0 removed [ 271.052430][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.063499][ T5905] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 271.074898][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.093046][ T5905] usb 6-1: config 0 descriptor?? [ 271.308051][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.324259][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.567752][ T8747] team0: No ports can be present during mode change [ 271.576306][ T8748] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 272.759205][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 273.051009][ T5985] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 273.060361][ T8781] fuse: Unknown parameter '‘0vMð!‘{Ö'~¯f×Bk"¬àü­—¨pÜüx¢ò+4ØÕ]íC.ÜFWáZ‚lxëòzéæÖ.Ü ­×–×L­ög¶%õزþ`43' [ 273.367943][ T8771] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 273.698500][ T8771] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 273.848022][ T3833] IPVS: stop unused estimator thread 0... [ 273.871553][ T8771] usb 7-1: config 0 interface 0 has no altsetting 0 [ 273.969660][ T8771] usb 7-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 274.081292][ T8771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.343702][ T8771] usb 7-1: config 0 descriptor?? [ 274.357526][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 274.369851][ T8780] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 274.387655][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 274.448959][ T5905] usb 6-1: USB disconnect, device number 5 [ 274.889299][ T8771] cypress 0003:04B4:07B1.0008: hidraw0: USB HID v0.44 Device [HID 04b4:07b1] on usb-dummy_hcd.6-1/input0 [ 275.373528][ T3833] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.394153][ T3833] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.654841][ T8771] usb 7-1: USB disconnect, device number 2 [ 275.855998][ T8827] netlink: 'syz.0.692': attribute type 4 has an invalid length. [ 275.907286][ T3833] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.913088][ T8830] netlink: 'syz.0.692': attribute type 4 has an invalid length. [ 275.920443][ T3833] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.821085][ T5906] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 276.983400][ T5906] usb 6-1: unable to get BOS descriptor or descriptor too short [ 277.041194][ T5906] usb 6-1: not running at top speed; connect to a high speed hub [ 277.070033][ T5906] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 277.100582][ T3833] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.173964][ T3833] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.368126][ T8838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.458557][ T5906] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 277.510582][ T6134] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 277.528085][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.564514][ T5906] usb 6-1: Product: syz [ 277.578150][ T5906] usb 6-1: Manufacturer: syz [ 277.585135][ T3833] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.599844][ T5906] usb 6-1: SerialNumber: syz [ 277.613094][ T3833] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.677218][ T6134] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.705304][ T6134] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 277.740955][ T6134] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.766711][ T6134] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 277.797586][ T6134] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 277.832332][ T6134] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.888300][ T6134] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.917391][ T5906] usbsevseg 6-1:129.0: USB 7 Segment device now attached [ 277.937375][ T6134] usb 7-1: Product: syz [ 277.974987][ T6134] usb 7-1: Manufacturer: syz [ 277.981640][ T5906] usb 6-1: USB disconnect, device number 6 [ 278.003162][ T6134] cdc_wdm 7-1:1.0: skipping garbage [ 278.012469][ T5906] usbsevseg 6-1:129.0: USB 7 Segment now disconnected [ 278.016111][ T6134] cdc_wdm 7-1:1.0: skipping garbage [ 278.390282][ T6134] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 278.397298][ T6134] cdc_wdm 7-1:1.0: Unknown control protocol [ 278.453917][ T6134] usb 7-1: USB disconnect, device number 3 [ 278.563675][ T30] audit: type=1400 audit(1765803721.435:764): avc: denied { getopt } for pid=8864 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 278.685514][ T8865] overlay: Unknown parameter 'measure' [ 278.701825][ T30] audit: type=1400 audit(1765803721.555:765): avc: denied { mount } for pid=8840 comm="syz.6.696" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 279.803356][ T1004] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 280.241190][ T3833] bond0 (unregistering): Released all slaves [ 280.702216][ T8902] fuse: Unknown parameter '‘0vMð!‘{Ö'~¯f×Bk"¬àü­—¨pÜüx¢ò+4ØÕ]íC.ÜFWáZ‚lxëòzéæÖ.Ü ­×–×L­ög¶%õزþ`43' [ 280.713195][ T6134] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 281.801081][ T980] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 281.841951][ T6134] usb 2-1: Using ep0 maxpacket: 32 [ 281.899372][ T6134] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 281.991948][ T6134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.999964][ T6134] usb 2-1: Product: syz [ 282.004302][ T980] usb 7-1: Using ep0 maxpacket: 32 [ 282.151074][ T5985] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 282.158548][ T6134] usb 2-1: Manufacturer: syz [ 282.172264][ T6134] usb 2-1: SerialNumber: syz [ 282.186149][ T3833] hsr_slave_0: left promiscuous mode [ 282.249420][ T3833] hsr_slave_1: left promiscuous mode [ 282.268929][ T3833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.285756][ T6134] usb 2-1: config 0 descriptor?? [ 282.286638][ T3833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.307376][ T3833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.314632][ T6134] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 282.319358][ T3833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.330667][ T5985] usb 4-1: Using ep0 maxpacket: 16 [ 282.338379][ T5985] usb 4-1: config 8 has an invalid interface number: 57 but max is 0 [ 282.365207][ T5985] usb 4-1: config 8 has no interface number 0 [ 282.384396][ T5985] usb 4-1: config 8 interface 57 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 282.396968][ T3833] veth1_macvtap: left promiscuous mode [ 282.407251][ T5985] usb 4-1: config 8 interface 57 altsetting 5 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 282.418227][ T5985] usb 4-1: config 8 interface 57 has no altsetting 0 [ 282.422133][ T3833] veth0_macvtap: left promiscuous mode [ 282.434498][ T5985] usb 4-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44 [ 282.444029][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.452266][ T5985] usb 4-1: Product: syz [ 282.466492][ T5985] usb 4-1: Manufacturer: syz [ 282.466572][ T3833] veth1_vlan: left promiscuous mode [ 282.485111][ T5985] usb 4-1: SerialNumber: syz [ 282.491445][ T3833] veth0_vlan: left promiscuous mode [ 282.786757][ T8917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.803738][ T8917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.928519][ T5985] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.935767][ T5985] usb 4-1: MIDIStreaming interface descriptor not found [ 283.009832][ T5985] usb 4-1: USB disconnect, device number 21 [ 283.068084][ T8772] udevd[8772]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.57/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.482160][ T3833] team0 (unregistering): Port device team_slave_1 removed [ 283.750945][ T6134] gspca_topro: Sensor soi763a [ 283.914712][ T3833] team0 (unregistering): Port device team_slave_0 removed [ 283.982966][ T6134] usb 2-1: USB disconnect, device number 17 [ 285.380368][ T980] usb 7-1: unable to get BOS descriptor or descriptor too short [ 285.463391][ T980] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 285.514075][ T980] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 285.622626][ T980] usb 7-1: can't read configurations, error -71 [ 285.880922][ T30] audit: type=1326 audit(1765803728.655:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5285b8f749 code=0x7ffc0000 [ 285.951933][ T30] audit: type=1326 audit(1765803728.655:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5285b8f749 code=0x7ffc0000 [ 285.976443][ T30] audit: type=1326 audit(1765803728.665:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5285b8f749 code=0x7ffc0000 [ 286.109137][ T30] audit: type=1326 audit(1765803728.665:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5285b8f749 code=0x7ffc0000 [ 286.146587][ T30] audit: type=1326 audit(1765803728.665:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5285b8f749 code=0x7ffc0000 [ 286.181058][ T30] audit: type=1326 audit(1765803728.665:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5285b8f749 code=0x7ffc0000 [ 286.327732][ T3833] IPVS: stop unused estimator thread 0... [ 286.353745][ T30] audit: type=1326 audit(1765803728.665:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5285b8f749 code=0x7ffc0000 [ 286.530906][ T30] audit: type=1326 audit(1765803728.665:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.6.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5285b8f749 code=0x7ffc0000 [ 286.642793][ T8979] netlink: 'syz.0.721': attribute type 6 has an invalid length. [ 286.655454][ T8979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.756626][ T1004] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 287.011002][ T980] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 287.033133][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 287.046095][ T8999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8999 comm=syz.3.725 [ 287.065016][ T5833] Bluetooth: hci0: unexpected event for opcode 0x200d [ 287.073249][ T30] audit: type=1400 audit(1765803729.945:774): avc: denied { append } for pid=8998 comm="syz.3.725" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.254300][ T5906] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 287.297608][ T980] usb 6-1: device descriptor read/64, error -71 [ 287.650095][ T5906] usb 7-1: device descriptor read/64, error -71 [ 287.861184][ T980] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 287.896770][ T5906] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 287.928032][ T9028] netlink: 80 bytes leftover after parsing attributes in process `syz.1.729'. [ 288.040951][ T5906] usb 7-1: device descriptor read/64, error -71 [ 288.059188][ T980] usb 6-1: device descriptor read/64, error -71 [ 288.161257][ T5906] usb usb7-port1: attempt power cycle [ 288.191782][ T980] usb usb6-port1: attempt power cycle [ 288.224059][ T30] audit: type=1400 audit(1765803731.095:775): avc: denied { write } for pid=9036 comm="syz.3.730" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 288.334493][ T48] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 288.492691][ T48] usb 2-1: config 149 has an invalid descriptor of length 0, skipping remainder of the config [ 288.509188][ T48] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=5a.c6 [ 288.530914][ T980] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 288.531025][ T5906] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 288.562507][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.570569][ T48] usb 2-1: Product: syz [ 288.592319][ T48] usb 2-1: Manufacturer: syz [ 288.636333][ T5906] usb 7-1: device descriptor read/8, error -71 [ 288.655234][ T48] usb 2-1: SerialNumber: syz [ 288.908841][ T48] gspca_main: spca501-2.14.0 probing 0000:0000 [ 288.915625][ T5906] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 288.941511][ T980] usb 6-1: device descriptor read/8, error -71 [ 288.951544][ T5906] usb 7-1: device descriptor read/8, error -71 [ 289.061203][ T5906] usb usb7-port1: unable to enumerate USB device [ 289.235604][ T980] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 289.292272][ T980] usb 6-1: device descriptor read/8, error -71 [ 289.411249][ T980] usb usb6-port1: unable to enumerate USB device [ 289.541137][ T48] gspca_spca501: reg write: error -110 [ 289.560918][ T48] spca501 2-1:149.0: Reg write failed for 0x02,0xa048,0x00 [ 289.568869][ T48] spca501 2-1:149.0: probe with driver spca501 failed with error -22 [ 290.288571][ T5905] usb 2-1: USB disconnect, device number 18 [ 290.917317][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 291.582945][ T10] usb 6-1: device descriptor read/64, error -71 [ 291.741818][ T5905] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 292.068441][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 292.276720][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 292.430271][ T5905] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 292.438744][ T5905] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 292.447604][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 292.456755][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.467213][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 292.477021][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 292.488294][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 292.498616][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.520559][ T5905] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 292.530144][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.555051][ T5905] usb 2-1: config 0 descriptor?? [ 292.570921][ T10] usb 6-1: device descriptor read/64, error -71 [ 292.647367][ T9110] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 292.764400][ T10] usb usb6-port1: attempt power cycle [ 292.863386][ T30] audit: type=1400 audit(1765803735.725:776): avc: denied { create } for pid=9144 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 292.892461][ T9110] tmpfs: Bad value for 'mpol' [ 292.963804][ T5905] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 293.017471][ T5905] usb 2-1: USB disconnect, device number 19 [ 293.092188][ T5905] usblp0: removed [ 293.377385][ T9155] lo speed is unknown, defaulting to 1000 [ 293.430141][ T9153] lo speed is unknown, defaulting to 1000 [ 293.496818][ T30] audit: type=1400 audit(1765803736.355:777): avc: denied { getopt } for pid=9144 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.930472][ T30] audit: type=1400 audit(1765803736.785:778): avc: denied { setopt } for pid=9150 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.371639][ T9163] loop7: detected capacity change from 0 to 16384 [ 294.410435][ T9168] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 294.570939][ T9163] loop7: detected capacity change from 16384 to 0 [ 294.604028][ C0] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 294.680948][ T5905] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 294.925378][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 295.003828][ T5905] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.045730][ T5905] usb 4-1: config 2 has an invalid interface number: 218 but max is 0 [ 295.069276][ T3029] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 295.098593][ T5905] usb 4-1: config 2 has no interface number 0 [ 295.124606][ T5905] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=18.d6 [ 295.242708][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.250708][ T5905] usb 4-1: Product: ãºá›¿ë†¡Ú‹å¬Œî¬æ¶—쿾￟ì¡ì›¥ç´»î±ªí‹–紑胊핽煕腬쮣ᆜì£è£¾ç…“贸馎å£á¨ä©²ë¬ìª±à´€ë™ãµ†ì²€è®¬åˆ ã«€æ—엕ᵂ飢뼬癆ä¸ïœ˜ç±†ä­„⸱붵ä‘다îŽï´î–­Õ¼ê å®¦è¬¸è˜¯ä¬¶ä„£çœ¶ë·¿í•€ä¶©ä½ [ 295.791001][ T5905] usb 4-1: Manufacturer: Ц [ 295.798731][ T5905] usb 4-1: SerialNumber: 혘귾æŸî¯¦ï·¡áˆœë¤ì£†ä”•è®½â“›é±±ï¾£ä“žä ½ï’­ë…²Ï둆乞逧Ⲅ䉴è¶ëª¢â¤• [ 295.819748][ T5905] r8152-cfgselector 4-1: Unknown version 0x0000 [ 296.052228][ T5905] r8152-cfgselector 4-1: USB disconnect, device number 22 [ 296.084976][ T9196] netlink: 72 bytes leftover after parsing attributes in process `syz.0.759'. [ 296.913177][ T30] audit: type=1326 audit(1765803739.785:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9214 comm="syz.0.762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55f8b8f749 code=0x0 [ 296.993564][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.764'. [ 297.014450][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.764'. [ 297.069294][ T9224] netlink: 'syz.6.764': attribute type 14 has an invalid length. [ 297.102277][ T9224] netlink: 'syz.6.764': attribute type 13 has an invalid length. [ 297.215674][ T9220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.251991][ T9220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.529611][ T9235] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 297.550978][ T5905] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 297.596351][ T9220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.652840][ T9220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.679725][ T9237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.687250][ T9237] IPv6: NLM_F_CREATE should be set when creating new route [ 297.694497][ T9237] IPv6: NLM_F_CREATE should be set when creating new route [ 297.731099][ T9237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.825055][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 297.829420][ T9220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.835237][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 297.869130][ T9220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.893224][ T5905] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 297.913803][ T5905] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 297.925484][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.948124][ T5905] usb 6-1: Product: syz [ 297.963853][ T9243] fuse: Unknown parameter '‘0vMð!‘{Ö'~¯f×Bk"¬àü­—¨pÜüx¢ò+4ØÕ]íC.ÜFWáZ‚lxëòzéæÖ.Ü ­×–×L­ög¶%õزþ`43' [ 298.020294][ T5905] usb 6-1: Manufacturer: syz [ 298.046856][ T5905] usb 6-1: SerialNumber: syz [ 298.368097][ T9237] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 298.745539][ T5905] usb 6-1: Limiting number of CPorts to U8_MAX [ 298.761872][ T30] audit: type=1400 audit(1765803741.615:780): avc: denied { write } for pid=9230 comm="syz.5.766" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 298.847379][ T5905] usb 6-1: Not enough endpoints found in device, aborting! [ 298.877979][ T9220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.952358][ T9220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.021245][ T9253] netlink: 256 bytes leftover after parsing attributes in process `syz.6.768'. [ 299.042273][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'. [ 299.058473][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.768'. [ 299.262638][ T8771] usb 6-1: USB disconnect, device number 14 [ 299.443106][ T6841] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 299.490952][ T6840] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.505777][ T6840] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.593493][ T3833] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.655096][ T3833] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.716597][ T6840] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.765854][ T6840] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.854255][ T6840] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.882062][ T6840] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.092516][ T9276] tipc: Enabling of bearer rejected, failed to enable media [ 301.456699][ T30] audit: type=1400 audit(1765803744.325:781): avc: denied { mount } for pid=9296 comm="syz.0.777" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 301.640951][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 301.719848][ T9306] fuse: Unknown parameter '‘0vMð!‘{Ö'~¯f×Bk"¬àü­—¨pÜüx¢ò+4ØÕ]íC.ÜFWáZ‚lxëòzéæÖ.Ü ­×–×L­ög¶%õزþ`43' [ 301.721105][ T6279] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 302.611607][ T6134] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 302.631173][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 302.640905][ T6279] usb 6-1: device descriptor read/64, error -71 [ 302.648885][ T10] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.722782][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.783727][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 302.808075][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.816810][ T6134] usb 2-1: Using ep0 maxpacket: 16 [ 302.829957][ T6134] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 302.854354][ T6134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.865585][ T10] usb 4-1: config 0 descriptor?? [ 302.890992][ T6279] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 302.900114][ T6134] usb 2-1: Product: syz [ 302.919634][ T6134] usb 2-1: Manufacturer: syz [ 302.939198][ T6134] usb 2-1: SerialNumber: syz [ 302.966911][ T6134] usb 2-1: config 0 descriptor?? [ 302.981458][ T6134] usb-storage 2-1:0.0: USB Mass Storage device detected [ 303.006200][ T6134] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 303.018949][ T6134] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 303.018949][ T6134] Please send a copy of this message to and [ 303.052242][ T6279] usb 6-1: device descriptor read/64, error -71 [ 303.162952][ T6279] usb usb6-port1: attempt power cycle [ 303.295508][ T10] cypress 0003:04B4:DE64.0009: hidraw0: USB HID v4.06 Device [HID 04b4:de64] on usb-dummy_hcd.3-1/input0 [ 303.488565][ T10] usb 4-1: USB disconnect, device number 23 [ 303.530979][ T6279] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 303.555853][ T6279] usb 6-1: device descriptor read/8, error -71 [ 303.667768][ T30] audit: type=1400 audit(1765803746.535:782): avc: denied { setopt } for pid=9332 comm="syz.6.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.821736][ T6279] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 303.851742][ T6279] usb 6-1: device descriptor read/8, error -71 [ 303.961379][ T6279] usb usb6-port1: unable to enumerate USB device [ 305.220994][ T10] usb 2-1: USB disconnect, device number 20 [ 305.245198][ T30] audit: type=1400 audit(1765803748.115:783): avc: denied { read write } for pid=9358 comm="syz.5.785" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 305.360891][ T30] audit: type=1400 audit(1765803748.145:784): avc: denied { open } for pid=9358 comm="syz.5.785" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 305.421021][ T30] audit: type=1400 audit(1765803748.275:785): avc: denied { connect } for pid=9367 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 305.593224][ T6279] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 306.145018][ T6279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.156282][ T6279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.175249][ T6279] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 306.184502][ T10] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 306.199799][ T6279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.231418][ T6279] usb 4-1: config 0 descriptor?? [ 306.363024][ T10] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 306.388105][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.430185][ T10] usb 2-1: config 0 has no interface number 0 [ 306.437204][ T10] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 306.520683][ T10] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 306.602455][ T10] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 306.611832][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.622696][ T10] usb 2-1: Product: syz [ 306.626908][ T10] usb 2-1: Manufacturer: syz [ 306.631625][ T10] usb 2-1: SerialNumber: syz [ 306.689244][ T10] usb 2-1: config 0 descriptor?? [ 306.692281][ T9376] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 306.701070][ T10] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 306.733656][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.743640][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.755449][ T6279] glorious 0003:258A:0036.000A: unknown main item tag 0x1 [ 306.776449][ T6279] glorious 0003:258A:0036.000A: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0 [ 306.788897][ T10] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 306.816461][ T10] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 306.909438][ T10] usb 2-1: USB disconnect, device number 21 [ 306.923098][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 306.946701][ T10] cyberjack 2-1:0.69: device disconnected [ 306.956758][ T5906] usb 4-1: USB disconnect, device number 24 [ 309.384168][ T9402] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 309.426778][ T9402] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 309.480599][ T30] audit: type=1400 audit(1765803752.345:786): avc: denied { firmware_load } for pid=9401 comm="syz.3.797" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 309.480602][ T9402] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 309.797910][ T9410] 9pnet: p9_errstr2errno: server reported unknown error [ 309.839807][ T30] audit: type=1400 audit(1765803752.705:787): avc: denied { connect } for pid=9415 comm="syz.6.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 310.447903][ T30] audit: type=1400 audit(1765803753.315:788): avc: denied { ioctl } for pid=9423 comm="syz.3.803" path="socket:[24132]" dev="sockfs" ino=24132 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 310.500611][ T9433] netlink: 128 bytes leftover after parsing attributes in process `syz.6.804'. [ 311.289917][ T5906] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 311.456802][ T5906] usb 7-1: config 166 has an invalid descriptor of length 139, skipping remainder of the config [ 311.492944][ T5906] usb 7-1: config 166 has 0 interfaces, different from the descriptor's value: 1 [ 311.521145][ T5906] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 311.530207][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.764725][ T30] audit: type=1400 audit(1765803754.625:789): avc: denied { read } for pid=9471 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.844840][ T9469] IPv6: sit1: Disabled Multicast RS [ 311.856886][ T30] audit: type=1400 audit(1765803754.695:790): avc: granted { setsecparam } for pid=9471 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 311.878820][ T30] audit: type=1400 audit(1765803754.705:791): avc: granted { setsecparam } for pid=9471 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 311.981061][ T30] audit: type=1400 audit(1765803754.845:792): avc: denied { write } for pid=9482 comm="syz.3.813" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 312.271114][ T6279] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 312.386377][ T70] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 312.434764][ T6279] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 312.454631][ T6279] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 312.477839][ T6279] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 312.498892][ T6279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 312.523740][ T6279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 312.543550][ T6279] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 312.562989][ T6279] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 312.577431][ T6279] usb 4-1: Product: syz [ 312.588064][ T6279] usb 4-1: Manufacturer: syz [ 312.636294][ T6279] cdc_wdm 4-1:1.0: skipping garbage [ 312.649053][ T6279] cdc_wdm 4-1:1.0: skipping garbage [ 312.671806][ T6279] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 312.685088][ T6279] cdc_wdm 4-1:1.0: Unknown control protocol [ 313.238448][ T30] audit: type=1400 audit(1765803756.105:793): avc: denied { read write } for pid=9484 comm="syz.3.814" name="cdc-wdm0" dev="devtmpfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 313.274607][ T30] audit: type=1400 audit(1765803756.135:794): avc: denied { open } for pid=9484 comm="syz.3.814" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 313.310259][ C1] cdc_wdm 4-1:1.0: unknown notification 178 received: index 56621 len 29591 [ 313.340732][ T30] audit: type=1400 audit(1765803756.205:795): avc: denied { listen } for pid=9517 comm="syz.1.817" lport=52271 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 314.387104][ T5906] usb 7-1: string descriptor 0 read error: -71 [ 314.435705][ T5906] usb 7-1: USB disconnect, device number 10 [ 315.444593][ T9542] lo speed is unknown, defaulting to 1000 [ 315.728804][ T9533] input: syz1 as /devices/virtual/input/input19 [ 315.895197][ T5935] usb 4-1: USB disconnect, device number 25 [ 316.252568][ T9533] netlink: 'syz.5.818': attribute type 1 has an invalid length. [ 316.309298][ T30] audit: type=1326 audit(1765803759.165:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.397750][ T30] audit: type=1326 audit(1765803759.175:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.508482][ T30] audit: type=1326 audit(1765803759.175:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.559949][ T9533] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 316.564287][ T30] audit: type=1326 audit(1765803759.215:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.610731][ T30] audit: type=1326 audit(1765803759.215:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.635625][ T30] audit: type=1326 audit(1765803759.215:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.704735][ T30] audit: type=1326 audit(1765803759.215:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.736500][ T30] audit: type=1326 audit(1765803759.215:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.786473][ T30] audit: type=1326 audit(1765803759.215:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.944655][ T30] audit: type=1326 audit(1765803759.215:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 316.951439][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.983660][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.515315][ T9594] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 318.982119][ T9594] macvtap1: entered allmulticast mode [ 318.987530][ T9594] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 319.125502][ T9594] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 319.141819][ T9594] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 319.275836][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 319.362069][ T9600] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 319.384286][ T9600] macvtap1: entered allmulticast mode [ 319.398561][ T9600] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 319.530172][ T9600] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 319.547269][ T9600] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 320.306613][ T9627] veth0: entered promiscuous mode [ 320.312289][ T9627] veth0: left promiscuous mode [ 320.371552][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 320.520920][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 320.542944][ T10] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 320.579181][ T10] usb 4-1: config 0 has no interface number 0 [ 320.591519][ T10] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.604670][ T10] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 321.039795][ T9617] netlink: 'syz.5.839': attribute type 4 has an invalid length. [ 321.080916][ T10] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 321.109516][ T9617] netlink: 17 bytes leftover after parsing attributes in process `syz.5.839'. [ 321.126940][ T10] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 321.290163][ T10] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.570544][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 321.583275][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.592690][ T9638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.845'. [ 321.605675][ T10] usb 4-1: Product: syz [ 321.609835][ T10] usb 4-1: Manufacturer: syz [ 321.614754][ T9638] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 321.650767][ T10] usb 4-1: SerialNumber: syz [ 321.665484][ T10] usb 4-1: config 0 descriptor?? [ 321.682488][ T9619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.705801][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input20 [ 321.722256][ T9638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.845'. [ 321.755137][ T5174] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 321.848034][ T9641] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 321.854550][ T9641] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 321.875140][ T9641] vhci_hcd vhci_hcd.0: Device attached [ 321.956613][ T9648] dummy0: entered allmulticast mode [ 321.977380][ T9648] dummy0: left allmulticast mode [ 322.120878][ T5985] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 322.302269][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 322.495750][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 322.495764][ T30] audit: type=1400 audit(1765803765.295:823): avc: denied { write } for pid=9654 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 323.061810][ T980] usb 4-1: USB disconnect, device number 26 [ 323.088393][ T9642] vhci_hcd: connection reset by peer [ 323.117015][ T9660] can: request_module (can-proto-0) failed. [ 323.141663][ T1092] vhci_hcd vhci_hcd.5: stop threads [ 323.149668][ T1092] vhci_hcd vhci_hcd.5: release socket [ 323.162816][ T1092] vhci_hcd vhci_hcd.5: disconnect device [ 323.256138][ T9663] openvswitch: netlink: IP tunnel dst address not specified [ 323.297429][ T30] audit: type=1400 audit(1765803766.165:824): avc: denied { setopt } for pid=9662 comm="syz.5.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.891038][ T9680] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 325.091003][ T30] audit: type=1326 audit(1765803767.635:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ded8f749 code=0x7ffc0000 [ 325.185902][ T30] audit: type=1326 audit(1765803767.635:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ded8f749 code=0x7ffc0000 [ 325.500980][ T30] audit: type=1326 audit(1765803767.635:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ded8f749 code=0x7ffc0000 [ 325.526950][ T30] audit: type=1326 audit(1765803767.635:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f94ded8f749 code=0x7ffc0000 [ 326.006455][ T30] audit: type=1326 audit(1765803767.635:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ded8f749 code=0x7ffc0000 [ 326.134979][ T30] audit: type=1326 audit(1765803767.635:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ded8f749 code=0x7ffc0000 [ 326.173767][ T30] audit: type=1326 audit(1765803767.635:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ded8f749 code=0x7ffc0000 [ 326.199992][ T30] audit: type=1326 audit(1765803767.635:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9677 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94ded8f749 code=0x7ffc0000 [ 326.605409][ T9691] delete_channel: no stack [ 326.867742][ T9700] netlink: 60 bytes leftover after parsing attributes in process `syz.1.859'. [ 326.877228][ T9700] unsupported nlmsg_type 40 [ 327.290918][ T5985] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 329.794167][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 329.794182][ T30] audit: type=1400 audit(1765803772.665:1006): avc: denied { watch watch_reads } for pid=9738 comm="syz.6.870" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 330.281838][ T980] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 330.454876][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 330.485591][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 330.513730][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.533720][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 330.577918][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 330.621955][ T980] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 330.671051][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.710031][ T980] usb 7-1: config 0 descriptor?? [ 330.756165][ T9742] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 331.011081][ T980] usb 7-1: USB disconnect, device number 11 [ 331.398498][ T30] audit: type=1400 audit(1765803774.265:1007): avc: denied { map } for pid=9765 comm="syz.3.877" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 331.731610][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.878'. [ 331.757785][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.878'. [ 331.968433][ T30] audit: type=1400 audit(1765803774.835:1008): avc: denied { add_name } for pid=9768 comm="syz.6.878" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 331.969504][ T30] audit: type=1400 audit(1765803774.835:1009): avc: denied { create } for pid=9768 comm="syz.6.878" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 332.087004][ T30] audit: type=1400 audit(1765803774.845:1010): avc: denied { associate } for pid=9768 comm="syz.6.878" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 332.183801][ T30] audit: type=1400 audit(1765803774.865:1011): avc: denied { watch watch_reads } for pid=9768 comm="syz.6.878" path="/proc/158/net/dev_snmp6" dev="proc" ino=4026534294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 332.450963][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 332.566359][ T30] audit: type=1326 audit(1765803775.405:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.5.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x7ffc0000 [ 332.637430][ T30] audit: type=1326 audit(1765803775.405:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.5.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x7ffc0000 [ 332.667056][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 332.823966][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 332.908441][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.909769][ T30] audit: type=1326 audit(1765803775.405:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.5.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa42dd8f749 code=0x7ffc0000 [ 332.940546][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.942237][ T30] audit: type=1326 audit(1765803775.415:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.5.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x7ffc0000 [ 332.974897][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.028941][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.062740][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.081201][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.140623][ T9804] afs: Unknown parameter '' [ 333.322634][ T10] usb 4-1: usb_control_msg returned -32 [ 333.339138][ T10] usbtmc 4-1:16.0: can't read capabilities [ 334.180757][ T9825] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 334.192620][ T5985] usb 4-1: USB disconnect, device number 27 [ 334.341382][ T5819] Bluetooth: hci5: command 0x0406 tx timeout [ 334.442427][ T2994] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 334.532001][ T9837] overlayfs: failed to resolve './file0': -2 [ 335.591649][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 335.591669][ T30] audit: type=1400 audit(1765803778.465:1053): avc: denied { ioctl } for pid=9845 comm="syz.5.898" path="socket:[25791]" dev="sockfs" ino=25791 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.559348][ T30] audit: type=1400 audit(1765803779.425:1054): avc: denied { read } for pid=9865 comm="syz.3.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.633381][ T9870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9870 comm=syz.6.904 [ 336.655076][ T9870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9870 comm=syz.6.904 [ 336.688848][ T5833] Bluetooth: hci6: link tx timeout [ 336.697247][ T5833] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 337.487987][ T6010] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 338.744243][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 338.770861][ T30] audit: type=1400 audit(1765803781.635:1055): avc: denied { create } for pid=9898 comm="syz.3.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.816956][ T30] audit: type=1400 audit(1765803781.685:1056): avc: denied { bind } for pid=9898 comm="syz.3.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.823731][ T9899] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 339.750264][ T9920] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:21 [ 339.816978][ T30] audit: type=1326 audit(1765803782.685:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 339.950294][ T30] audit: type=1326 audit(1765803782.685:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 340.027949][ T30] audit: type=1326 audit(1765803782.685:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 340.089004][ T30] audit: type=1326 audit(1765803782.685:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 340.348412][ T30] audit: type=1326 audit(1765803782.685:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 340.440893][ T5906] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 340.479673][ T30] audit: type=1326 audit(1765803782.685:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x7ffc0000 [ 340.612376][ T5906] usb 4-1: config 8 has an invalid interface number: 203 but max is 2 [ 340.621101][ T5906] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 340.629907][ T5906] usb 4-1: config 8 has an invalid interface number: 98 but max is 2 [ 340.640951][ T5906] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 340.659608][ T5906] usb 4-1: config 8 has 2 interfaces, different from the descriptor's value: 3 [ 340.696654][ T5906] usb 4-1: config 8 has no interface number 0 [ 340.712618][ T5906] usb 4-1: config 8 has no interface number 1 [ 340.720321][ T5906] usb 4-1: config 8 interface 203 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 340.835931][ T5906] usb 4-1: config 8 interface 203 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 340.848398][ T5906] usb 4-1: config 8 interface 203 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 340.871593][ T5906] usb 4-1: config 8 interface 203 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 341.372678][ T5906] usb 4-1: config 8 interface 203 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 341.386627][ T5906] usb 4-1: config 8 interface 98 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 341.407915][ T5906] usb 4-1: config 8 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 341.450956][ T5906] usb 4-1: config 8 interface 203 has no altsetting 0 [ 341.457841][ T5906] usb 4-1: config 8 interface 98 has no altsetting 0 [ 341.516978][ T5906] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=ab.16 [ 341.537325][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.558995][ T5906] usb 4-1: Product: syz [ 341.629355][ T5906] usb 4-1: Manufacturer: syz [ 341.910070][ T5906] usb 4-1: SerialNumber: syz [ 342.121228][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.5.925'. [ 342.482162][ T5906] usb 4-1: selecting invalid altsetting 1 [ 342.488298][ T5906] catc 4-1:8.203: Can't set altsetting 1. [ 342.532535][ T5906] catc 4-1:8.203: probe with driver catc failed with error -5 [ 342.564912][ T5906] usb 4-1: selecting invalid altsetting 1 [ 342.570868][ T5906] catc 4-1:8.98: Can't set altsetting 1. [ 342.576755][ T5906] catc 4-1:8.98: probe with driver catc failed with error -5 [ 342.592831][ T5906] usb 4-1: bad CDC descriptors [ 342.817383][ T5906] usb 4-1: USB disconnect, device number 28 [ 343.784991][ T5819] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 343.840927][ T6279] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 343.983462][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 343.983562][ T30] audit: type=1400 audit(1765803786.855:1085): avc: denied { mounton } for pid=9976 comm="syz.3.935" path="/198/file0" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 343.984918][ T9979] ./file0: Can't open blockdev [ 344.002396][ T6279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 344.015964][ T9977] ./file0: Can't open blockdev [ 344.033152][ T6279] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 344.044774][ T6279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.056723][ T6279] usb 6-1: config 0 descriptor?? [ 344.062647][ T9968] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 345.120760][ T9991] 9pnet_virtio: no channels available for device syz [ 345.508146][ T9997] overlayfs: missing 'lowerdir' [ 346.029977][ T30] audit: type=1326 audit(1765803788.895:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.1.939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc6518f749 code=0x0 [ 346.215140][T10006] netlink: 60 bytes leftover after parsing attributes in process `syz.0.941'. [ 346.684191][ T6279] usbhid 6-1:0.0: can't add hid device: -71 [ 346.736918][ T6279] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 346.781950][ T6279] usb 6-1: USB disconnect, device number 19 [ 348.880136][ T5898] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 350.719356][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 353.433302][T10098] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 353.708581][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 354.880588][T10125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.972'. [ 354.971084][ T6279] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 355.283691][T10119] tipc: Trying to set illegal importance in message [ 355.284336][ T30] audit: type=1400 audit(1765803798.155:1087): avc: denied { setopt } for pid=10113 comm="syz.5.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.320342][T10133] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 355.330563][T10133] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 355.355178][T10133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.441211][ T6279] usb 4-1: Using ep0 maxpacket: 16 [ 355.455597][ T6279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 355.456000][T10133] bond3: (slave veth3): Enslaving as an active interface with a down link [ 355.476408][ T6279] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.487212][ T6279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.497195][ T6279] usb 4-1: Product: syz [ 355.502167][ T6279] usb 4-1: Manufacturer: syz [ 355.506981][ T6279] usb 4-1: SerialNumber: syz [ 355.514225][ T6279] usb 4-1: config 0 descriptor?? [ 355.522675][ T6279] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 355.532019][ T6279] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 355.692141][T10133] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 355.818648][T10133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.977'. [ 355.921513][T10135] bond3: (slave dummy0): making interface the new active one [ 356.049706][T10135] dummy0: entered promiscuous mode [ 356.087300][T10135] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 356.163579][T10133] bond3: (slave dummy0): Releasing active interface [ 356.174156][ T6279] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 356.279043][ C0] hrtimer: interrupt took 36204 ns [ 356.476299][ T30] audit: type=1326 audit(1765803799.345:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55f8b8f749 code=0x0 [ 356.551079][T10152] xt_ipcomp: unknown flags 1D [ 356.972849][ T6279] em28xx 4-1:0.0: board has no eeprom [ 357.630897][ T6279] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 357.905314][ T6279] em28xx 4-1:0.0: dvb set to bulk mode. [ 357.937911][ T5935] em28xx 4-1:0.0: Binding DVB extension [ 357.946901][ T6279] usb 4-1: USB disconnect, device number 30 [ 358.060028][ T6279] em28xx 4-1:0.0: Disconnecting em28xx [ 358.082296][T10166] overlayfs: statfs failed on './file0' [ 358.549503][ T5935] em28xx 4-1:0.0: Registering input extension [ 358.556698][ T6279] em28xx 4-1:0.0: Closing input extension [ 358.598188][ T6279] em28xx 4-1:0.0: Freeing device [ 358.989344][ T6279] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 359.370542][ T6279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 359.386720][ T6279] usb 4-1: New USB device found, idVendor=0eef, idProduct=7224, bcdDevice= 0.00 [ 359.398377][ T6279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.410635][ T6279] usb 4-1: config 0 descriptor?? [ 359.421318][T10185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.632745][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.649657][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.872133][ T6279] hid-generic 0003:0EEF:7224.000B: item fetching failed at offset 3/5 [ 359.880693][ T6279] hid-generic 0003:0EEF:7224.000B: probe with driver hid-generic failed with error -22 [ 360.076161][ T6279] usb 4-1: USB disconnect, device number 31 [ 361.165174][T10181] syz_tun: entered allmulticast mode [ 361.171427][T10183] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 361.181054][T10183] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 361.190580][T10183] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 361.209636][T10181] syz_tun: left allmulticast mode [ 361.293323][T10189] pimreg: entered allmulticast mode [ 361.303564][T10189] pimreg: left allmulticast mode [ 361.543990][ T30] audit: type=1400 audit(1765803804.415:1089): avc: denied { read } for pid=10204 comm="syz.3.996" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 361.727386][ T30] audit: type=1400 audit(1765803804.445:1090): avc: denied { open } for pid=10204 comm="syz.3.996" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 361.753209][ T30] audit: type=1400 audit(1765803804.445:1091): avc: denied { map } for pid=10204 comm="syz.3.996" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 361.776942][ T30] audit: type=1400 audit(1765803804.445:1092): avc: denied { ioctl } for pid=10204 comm="syz.3.996" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 361.977600][T10207] netlink: 'syz.1.995': attribute type 4 has an invalid length. [ 362.286074][T10218] trusted_key: syz.3.998 sent an empty control message without MSG_MORE. [ 362.666952][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.999'. [ 364.442291][T10248] netlink: 'syz.0.1007': attribute type 10 has an invalid length. [ 367.594048][T10248] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.602028][T10248] bond0: (slave team0): Enslaving as an active interface with an up link [ 368.186467][T10279] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 368.211522][ T5898] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 368.361024][ T5906] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 368.380927][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 368.395194][ T5898] usb 7-1: config 0 has an invalid interface number: 150 but max is 0 [ 368.403556][ T5898] usb 7-1: config 0 has no interface number 0 [ 368.409825][ T5898] usb 7-1: config 0 interface 150 has no altsetting 0 [ 368.420567][ T5898] usb 7-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 368.431946][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.440017][ T5898] usb 7-1: Product: syz [ 368.449834][ T5898] usb 7-1: Manufacturer: syz [ 368.454690][ T5898] usb 7-1: SerialNumber: syz [ 368.461769][ T5898] usb 7-1: config 0 descriptor?? [ 368.472700][ T5898] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 368.532863][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 368.542974][ T5906] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 368.557509][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 368.567374][ T5906] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 368.580116][ T5906] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 368.590197][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.598734][ T5906] usb 6-1: Product: syz [ 368.603158][ T5906] usb 6-1: Manufacturer: syz [ 368.607783][ T5906] usb 6-1: SerialNumber: syz [ 368.615278][ T5906] usb 6-1: config 0 descriptor?? [ 368.622632][ T5906] kvaser_usb 6-1:0.0: error -EMSGSIZE: Cannot get software info [ 368.630555][ T5906] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 368.774835][ T30] audit: type=1400 audit(1765803811.635:1093): avc: denied { connect } for pid=10267 comm="syz.6.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.211091][ T5934] usb 6-1: USB disconnect, device number 20 [ 369.314589][ T5898] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 369.331009][ T5898] pac7311 7-1:0.150: probe with driver pac7311 failed with error -110 [ 369.403852][ T5898] usb 7-1: USB disconnect, device number 12 [ 370.687222][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 370.715411][T10311] netlink: 'syz.6.1023': attribute type 29 has an invalid length. [ 370.745491][T10311] netlink: 'syz.6.1023': attribute type 29 has an invalid length. [ 370.821387][T10316] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1023'. [ 371.518205][T10323] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 371.525182][T10323] syzkaller1: persist disabled [ 372.594331][ T30] audit: type=1400 audit(1765803815.445:1094): avc: denied { name_bind } for pid=10336 comm="syz.5.1028" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 372.758843][ T30] audit: type=1400 audit(1765803815.625:1095): avc: denied { ioctl } for pid=10330 comm="syz.6.1027" path="socket:[26605]" dev="sockfs" ino=26605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 372.855327][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1027'. [ 372.881695][ T5906] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 372.928001][ T30] audit: type=1400 audit(1765803815.795:1096): avc: denied { map } for pid=10330 comm="syz.6.1027" path="socket:[27451]" dev="sockfs" ino=27451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 372.979716][ T30] audit: type=1400 audit(1765803815.795:1097): avc: denied { read } for pid=10330 comm="syz.6.1027" path="socket:[27451]" dev="sockfs" ino=27451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 372.986014][T10335] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1027'. [ 373.049089][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 373.162144][ T5906] usb 6-1: config 252 interface 0 has no altsetting 0 [ 373.168976][ T5906] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 373.188719][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.549078][ T30] audit: type=1400 audit(1765803816.415:1098): avc: denied { connect } for pid=10345 comm="syz.1.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 373.583824][ T30] audit: type=1400 audit(1765803816.455:1099): avc: denied { bind } for pid=10348 comm="syz.6.1031" lport=36057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.612153][ T30] audit: type=1400 audit(1765803816.455:1100): avc: denied { name_bind } for pid=10348 comm="syz.6.1031" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 373.641964][ T30] audit: type=1400 audit(1765803816.455:1101): avc: denied { node_bind } for pid=10348 comm="syz.6.1031" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 375.115868][ T5906] usb 6-1: string descriptor 0 read error: -71 [ 375.123500][ T5906] pvrusb2: Hardware description: Terratec Grabster AV400 [ 375.130510][ T5906] pvrusb2: ********** [ 375.167171][ T5906] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 375.212273][ T5906] pvrusb2: Important functionality might not be entirely working. [ 375.235462][ T5906] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 375.270826][ T5906] pvrusb2: ********** [ 375.275494][ T5906] usb 6-1: selecting invalid altsetting 0 [ 375.313227][ T2339] pvrusb2: Invalid write control endpoint [ 375.330445][ T5906] usb 6-1: USB disconnect, device number 21 [ 375.393392][ T2339] pvrusb2: Invalid write control endpoint [ 375.411504][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 375.432411][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 375.439968][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 375.480832][ T2339] pvrusb2: Device being rendered inoperable [ 375.494105][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 375.511611][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 375.534792][ T2339] pvrusb2: Attached sub-driver cx25840 [ 375.551216][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 375.571462][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 375.916240][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 375.929545][ T30] audit: type=1400 audit(1765803818.795:1102): avc: denied { read } for pid=10368 comm="syz.6.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 376.211634][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1042'. [ 376.241809][ T5906] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 376.390981][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 376.397577][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.400483][T10391] syzkaller0: entered promiscuous mode [ 376.410933][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.427521][T10391] syzkaller0: entered allmulticast mode [ 376.429573][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 376.434964][T10392] tipc: Started in network mode [ 376.448023][ T5906] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 376.451778][T10392] tipc: Node identity c602c5bef769, cluster identity 4711 [ 376.469751][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.470264][T10392] tipc: Enabled bearer , priority 0 [ 376.485590][ T5906] usb 6-1: config 0 descriptor?? [ 376.494472][T10390] tipc: Resetting bearer [ 376.590910][ T6279] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 376.706609][ T30] audit: type=1400 audit(1765803819.575:1103): avc: denied { listen } for pid=10402 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.745828][ T30] audit: type=1400 audit(1765803819.615:1104): avc: denied { accept } for pid=10402 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.771152][ T6279] usb 7-1: Using ep0 maxpacket: 8 [ 376.788087][ T6279] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.799870][ T6279] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.812962][ T6279] usb 7-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 376.822395][ T6279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.832871][ T6279] usb 7-1: config 0 descriptor?? [ 376.957853][ T30] audit: type=1400 audit(1765803819.825:1105): avc: denied { write } for pid=10407 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 377.013749][ T30] audit: type=1326 audit(1765803819.885:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x7fc00000 [ 377.101806][ T30] audit: type=1326 audit(1765803819.975:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x7fc00000 [ 377.159865][ T30] audit: type=1326 audit(1765803819.995:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x7fc00000 [ 377.168297][ T5906] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 377.213933][ T30] audit: type=1326 audit(1765803820.005:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x7fc00000 [ 377.231402][ T5906] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 377.248988][ T5906] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 377.261603][ T30] audit: type=1326 audit(1765803820.005:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x7fc00000 [ 378.356846][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.363257][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.365619][ T5985] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 378.382555][ T5985] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 378.394008][ T30] audit: type=1326 audit(1765803821.255:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x7fc00000 [ 378.427665][ T5985] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 378.460214][ T5985] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 378.506564][ T8771] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 378.793279][T10390] tipc: Disabling bearer [ 378.802992][ T5990] tipc: Node number set to 829146558 [ 379.391883][ T5898] usb 6-1: USB disconnect, device number 22 [ 379.891699][ T6279] usbhid 7-1:0.0: can't add hid device: -71 [ 379.897758][ T6279] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 379.907244][ T6279] usb 7-1: USB disconnect, device number 13 [ 380.161212][T10452] lo speed is unknown, defaulting to 1000 [ 381.522152][T10482] random: crng reseeded on system resumption [ 382.714606][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 382.714618][ T30] audit: type=1400 audit(1765803825.585:1113): avc: denied { ioctl } for pid=10491 comm="syz.3.1068" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 382.746392][T10492] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 382.863311][T10497] overlayfs: failed to clone lowerpath [ 383.261006][ T5985] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 383.430864][ T5985] usb 4-1: Using ep0 maxpacket: 8 [ 383.438635][ T5985] usb 4-1: config 0 has an invalid interface number: 144 but max is 0 [ 383.447060][ T5985] usb 4-1: config 0 has no interface number 0 [ 383.453360][ T5985] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=ce.e9 [ 383.465356][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.475835][ T5985] usb 4-1: config 0 descriptor?? [ 383.706062][ T30] audit: type=1400 audit(1765803826.575:1114): avc: denied { create } for pid=10491 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 383.747100][ T30] audit: type=1400 audit(1765803826.605:1115): avc: denied { write } for pid=10491 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 385.122402][T10495] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 385.716646][T10495] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 385.812023][T10498] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 385.841162][T10499] bond1: (slave gretap1): making interface the new active one [ 385.854482][T10499] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 385.855998][ T30] audit: type=1400 audit(1765803828.725:1116): avc: denied { setopt } for pid=10530 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 385.928317][ T5985] qmi_wwan 4-1:0.144: probe with driver qmi_wwan failed with error -22 [ 385.942101][ T5985] usb 4-1: USB disconnect, device number 32 [ 386.144145][ T30] audit: type=1400 audit(1765803829.015:1117): avc: denied { lock } for pid=10541 comm="syz.6.1083" path="socket:[27930]" dev="sockfs" ino=27930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 386.967550][T10572] comedi comedi0: comedi_config --init_data is deprecated [ 387.119195][T10574] SET target dimension over the limit! [ 388.438018][T10594] program syz.5.1097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.535089][T10605] binder: BINDER_SET_CONTEXT_MGR already set [ 388.552046][T10605] binder: 10601:10605 ioctl 4018620d 200000000080 returned -16 [ 389.071088][T10627] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1104'. [ 390.204342][ T30] audit: type=1400 audit(1765803832.885:1118): avc: denied { write } for pid=10632 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 391.704325][T10641] futex_wake_op: syz.0.1110 tries to shift op by 32; fix this program [ 392.032366][T10654] overlayfs: failed to clone upperpath [ 394.761033][ T30] audit: type=1400 audit(1765803837.595:1119): avc: denied { accept } for pid=10683 comm="syz.0.1112" path="socket:[28160]" dev="sockfs" ino=28160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 395.010054][T10693] overlayfs: failed to clone upperpath [ 396.560981][ T30] audit: type=1400 audit(1765803838.735:1120): avc: denied { create } for pid=10708 comm="syz.5.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 396.728778][ T30] audit: type=1400 audit(1765803838.745:1121): avc: denied { sys_admin } for pid=10708 comm="syz.5.1126" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 398.827832][T10742] 9p: Bad value for 'wfdno' [ 399.030890][ T5955] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 399.334807][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.358015][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.595742][ T5955] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 399.614197][ T5955] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 399.632661][ T5955] usb 4-1: Manufacturer: syz [ 399.645274][ T5955] usb 4-1: config 0 descriptor?? [ 400.190148][ T30] audit: type=1400 audit(1765803843.055:1122): avc: denied { setattr } for pid=10772 comm="syz.6.1144" name="NETLINK" dev="sockfs" ino=29323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.266735][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.292214][T10773] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1144'. [ 400.311845][ T5955] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 400.409993][ T5955] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 400.490321][ T5955] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 400.554953][ T5955] usb 4-1: USB disconnect, device number 33 [ 400.566840][T10765] dummy0: left promiscuous mode [ 401.384311][T10765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.471059][ T5990] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 401.503678][ T30] audit: type=1400 audit(1765803844.375:1123): avc: denied { getopt } for pid=10781 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 401.537136][T10765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.621745][ T5990] usb 7-1: Using ep0 maxpacket: 32 [ 401.630621][ T5990] usb 7-1: unable to get BOS descriptor or descriptor too short [ 401.642543][ T5990] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 401.657331][ T5990] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 401.666948][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.675663][ T5990] usb 7-1: Product: syz [ 401.680016][ T5990] usb 7-1: Manufacturer: syz [ 401.685946][ T5990] usb 7-1: SerialNumber: syz [ 401.869707][T10765] ip6gre1: left promiscuous mode [ 401.916022][ T5990] usb 7-1: Limiting number of CPorts to U8_MAX [ 401.924064][ T5990] usb 7-1: Not enough endpoints found in device, aborting! [ 402.398898][ T30] audit: type=1400 audit(1765803845.265:1124): avc: denied { write } for pid=10777 comm="syz.6.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 402.419407][ T1004] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.430121][ T8771] usb 7-1: USB disconnect, device number 14 [ 402.438966][ T1004] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.451841][ T1004] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.460526][ T1004] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.470328][ T1004] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.479992][ T1004] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.489490][ T1004] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.588164][ T1004] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.571060][ T5898] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 403.720887][ T5898] usb 7-1: device descriptor read/64, error -71 [ 403.998758][ T5898] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 404.029878][ T6279] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 405.128893][ T5898] usb 7-1: device descriptor read/64, error -71 [ 405.147252][ T6279] usb 4-1: config 6 has no interfaces? [ 405.156253][ T6279] usb 4-1: New USB device found, idVendor=0499, idProduct=5003, bcdDevice=de.d6 [ 405.166733][ T6279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.176507][ T6279] usb 4-1: Product: syz [ 405.183189][ T6279] usb 4-1: Manufacturer: syz [ 405.188714][ T6279] usb 4-1: SerialNumber: syz [ 405.261143][ T5898] usb usb7-port1: attempt power cycle [ 405.483309][ T6279] usb 4-1: USB disconnect, device number 34 [ 405.521723][ T30] audit: type=1400 audit(1765803848.395:1125): avc: denied { listen } for pid=10853 comm="syz.1.1169" lport=33129 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 406.050913][ T5898] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 406.071388][ T5898] usb 7-1: device descriptor read/8, error -71 [ 406.336354][ T5898] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 406.560861][ T5898] usb 7-1: device not accepting address 18, error -71 [ 406.568090][ T5898] usb usb7-port1: unable to enumerate USB device [ 406.731870][ T48] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 406.870859][ T5898] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 407.149703][ T5898] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 407.159506][ T5898] usb 7-1: config 1 has no interface number 0 [ 407.641066][ T5898] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 407.683639][ T5898] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 407.700985][ T5898] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 407.717032][ T5898] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 407.802789][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 409.182719][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.201932][ T48] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 409.226133][ T5898] usb 7-1: Product: syz [ 409.230343][ T5898] usb 7-1: Manufacturer: syz [ 409.235199][ T5898] usb 7-1: SerialNumber: syz [ 409.240906][ T48] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.267837][T10862] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 409.280985][ T48] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 409.293422][ T48] usb 6-1: config 1 interface 1 has no altsetting 0 [ 409.310571][ T48] usb 6-1: string descriptor 0 read error: -22 [ 409.319976][ T48] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.329241][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.339409][T10864] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 409.384801][ T5898] usb 7-1: Error in usbnet_get_endpoints (-71) [ 409.408611][ T5898] usb 7-1: USB disconnect, device number 19 [ 409.515263][ T48] usb 6-1: USB disconnect, device number 23 [ 410.117172][T10895] overlayfs: failed to clone lowerpath [ 410.596617][T10904] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 410.811485][T10907] IPv6: NLM_F_REPLACE set, but no existing node found! [ 410.863776][ T5819] Bluetooth: hci6: unexpected event for opcode 0x0c46 [ 411.630864][ T5898] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 411.660982][ T5990] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 411.776754][T10924] lo speed is unknown, defaulting to 1000 [ 411.810912][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 411.817813][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.828842][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.838634][ T5990] usb 6-1: Using ep0 maxpacket: 8 [ 411.847157][ T5898] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 411.856719][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.869441][ T5990] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 411.881755][ T5898] usb 7-1: config 0 descriptor?? [ 411.886756][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.895215][ T5990] usb 6-1: Product: syz [ 411.905499][ T5990] usb 6-1: Manufacturer: syz [ 411.912395][ T5990] usb 6-1: SerialNumber: syz [ 411.920508][ T5990] usb 6-1: config 0 descriptor?? [ 411.930219][ T5990] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 412.266244][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1192'. [ 412.321603][T10938] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1195'. [ 412.448660][ T5898] ft260 0003:0403:6030.000E: unknown main item tag 0x7 [ 412.657043][ T5898] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 412.857618][ T5898] ft260 0003:0403:6030.000E: uart interface is not supported [ 412.989198][T10946] overlayfs: failed to clone upperpath [ 412.999573][T10946] tipc: Enabling of bearer rejected, failed to enable media [ 413.082550][ T980] usb 6-1: USB disconnect, device number 24 [ 414.139778][T10964] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1201'. [ 414.154014][ T30] audit: type=1400 audit(1765803856.995:1126): avc: denied { lock } for pid=10959 comm="syz.3.1201" path="socket:[29622]" dev="sockfs" ino=29622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 414.591363][T10974] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1202'. [ 414.620142][T10974] syz_tun: entered allmulticast mode [ 414.675779][T10974] dvmrp8: entered allmulticast mode [ 414.721310][ T5990] usb 7-1: USB disconnect, device number 20 [ 414.908511][ T30] audit: type=1400 audit(1765803857.775:1127): avc: denied { connect } for pid=10976 comm="syz.3.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.945540][ T30] audit: type=1400 audit(1765803857.815:1128): avc: denied { map } for pid=10976 comm="syz.3.1204" path="socket:[29650]" dev="sockfs" ino=29650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 414.971331][ T30] audit: type=1400 audit(1765803857.845:1129): avc: denied { accept } for pid=10976 comm="syz.3.1204" path="socket:[29650]" dev="sockfs" ino=29650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 415.011886][ T30] audit: type=1400 audit(1765803857.875:1130): avc: denied { create } for pid=10976 comm="syz.3.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 415.461485][T10965] syz_tun: left allmulticast mode [ 416.162367][ T30] audit: type=1400 audit(1765803859.015:1131): avc: denied { create } for pid=10995 comm="syz.0.1209" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 416.189239][ T30] audit: type=1400 audit(1765803859.015:1132): avc: denied { map } for pid=10995 comm="syz.0.1209" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 416.237281][ T30] audit: type=1400 audit(1765803859.015:1133): avc: denied { read write } for pid=10995 comm="syz.0.1209" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 416.425330][ T30] audit: type=1804 audit(1765803859.255:1134): pid=11000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1210" name="file0" dev="tmpfs" ino=1428 res=1 errno=0 [ 416.448750][ T30] audit: type=1400 audit(1765803859.255:1135): avc: denied { write } for pid=10999 comm="syz.0.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 416.629417][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1205'. [ 416.853714][T11008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1213'. [ 416.877579][T11008] loop2: detected capacity change from 0 to 7 [ 416.892441][T11008] Dev loop2: unable to read RDB block 7 [ 416.907130][T11008] loop2: unable to read partition table [ 416.913224][T11008] loop2: partition table beyond EOD, truncated [ 416.919400][T11008] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.014367][T11019] loop5: detected capacity change from 0 to 7 [ 417.027092][T11019] Dev loop5: unable to read RDB block 7 [ 417.034584][T11019] loop5: unable to read partition table [ 417.042935][T11019] loop5: partition table beyond EOD, truncated [ 417.054888][T11019] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.232254][T11026] netlink: 'syz.5.1217': attribute type 2 has an invalid length. [ 419.058022][T11052] 9p: Bad value for 'rfdno' [ 419.580855][ T5990] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 419.781622][ T5990] usb 6-1: Using ep0 maxpacket: 32 [ 419.788220][ T5990] usb 6-1: config 0 has an invalid interface number: 192 but max is 0 [ 419.800812][ T5990] usb 6-1: config 0 has no interface number 0 [ 419.806906][ T5990] usb 6-1: config 0 interface 192 has no altsetting 0 [ 419.823964][ T5990] usb 6-1: New USB device found, idVendor=045e, idProduct=0467, bcdDevice=f3.f3 [ 419.838332][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.852877][ T5990] usb 6-1: Product: syz [ 419.859544][ T5990] usb 6-1: Manufacturer: syz [ 419.872531][ T5990] usb 6-1: SerialNumber: syz [ 419.880975][ T5898] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 419.890202][ T5990] usb 6-1: config 0 descriptor?? [ 420.050822][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 420.060185][ T5898] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 420.071687][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.091433][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.110314][ T5898] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.122318][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.133509][ T5898] usb 4-1: Product: syz [ 420.139438][ T5898] usb 4-1: Manufacturer: syz [ 420.147407][ T5898] usb 4-1: SerialNumber: syz [ 420.199631][T11092] lo speed is unknown, defaulting to 1000 [ 420.614174][ T5898] usb 4-1: 0:2 : does not exist [ 421.042231][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.080261][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.740074][ T5898] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 421.784438][ T5898] usb 4-1: USB disconnect, device number 35 [ 422.192067][ T5990] usb 6-1: USB disconnect, device number 25 [ 422.633446][T11133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1247'. [ 422.881332][T11144] netlink: 'syz.6.1250': attribute type 10 has an invalid length. [ 422.897074][T11144] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.904634][T11144] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.000815][T11144] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.008054][T11144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.015450][T11144] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.022545][T11144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.060163][T11144] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 423.326317][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 423.326332][ T30] audit: type=1400 audit(1765803866.195:1140): avc: denied { read } for pid=11146 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 426.178130][ T30] audit: type=1400 audit(1765803869.045:1141): avc: denied { mount } for pid=11195 comm="syz.1.1264" name="/" dev="hugetlbfs" ino=31218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 427.034760][ T30] audit: type=1326 audit(1765803869.815:1142): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11204 comm="syz.5.1266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa42dd8f749 code=0x0 [ 428.260867][ T5990] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 428.454739][ T5990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.472806][ T5990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.817520][ T5990] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 428.839177][ T5990] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice=97.a4 [ 428.851443][ T5990] usb 7-1: New USB device strings: Mfr=120, Product=225, SerialNumber=0 [ 428.861961][ T5990] usb 7-1: Product: syz [ 428.868449][ T5990] usb 7-1: Manufacturer: syz [ 428.876695][ T5990] usb 7-1: config 0 descriptor?? [ 430.390934][ T5990] letsketch 0003:6161:4D15.000F: Device info: 㡵 [ 430.590189][ T5990] letsketch 0003:6161:4D15.000F: Device info: ⪪ [ 430.714997][T11240] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 430.730501][T11240] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1275'. [ 430.770347][ T5819] Bluetooth: hci4: Malformed LE Event: 0x1d [ 430.799239][ T5990] letsketch 0003:6161:4D15.000F: Device info: 繋 [ 431.081583][ T5990] usb 7-1: Max retries (5) exceeded reading string descriptor 1 [ 431.090429][ T5990] letsketch 0003:6161:4D15.000F: probe with driver letsketch failed with error -71 [ 431.107375][ T5990] usb 7-1: USB disconnect, device number 21 [ 432.260902][ T5990] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 432.430839][ T5990] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 432.439584][ T5990] usb 7-1: config 5 has no interface number 0 [ 432.475939][T11266] fuse: Unknown parameter '8' [ 432.491768][ T5990] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 432.504156][ T30] audit: type=1400 audit(1765803875.345:1143): avc: denied { mounton } for pid=11254 comm="syz.5.1280" path="/150/file0" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 432.588470][ T5990] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 432.723386][ T5990] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 432.786535][ T5990] usb 7-1: config 5 interface 123 has no altsetting 0 [ 432.805274][ T5990] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 432.820210][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.844523][ T5990] usb 7-1: Product: syz [ 432.855684][ T5990] usb 7-1: Manufacturer: syz [ 432.869697][ T5990] usb 7-1: SerialNumber: syz [ 433.104068][ T5990] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 433.132880][ T5990] usb 7-1: USB disconnect, device number 22 [ 434.264253][T11285] overlayfs: failed to clone upperpath [ 434.271762][ T5935] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 434.291887][ T30] audit: type=1400 audit(1765803877.165:1144): avc: denied { accept } for pid=11286 comm="syz.6.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 434.421046][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 434.427929][ T5935] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 434.440243][ T5935] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 434.449727][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 434.490895][ T5935] usb 6-1: Product: syz [ 434.495060][ T5935] usb 6-1: Manufacturer: syz [ 434.501992][ T5935] usb 6-1: SerialNumber: syz [ 434.508145][ T5935] usb 6-1: config 0 descriptor?? [ 434.524319][T11276] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 434.533725][ T5935] hub 6-1:0.0: bad descriptor, ignoring hub [ 434.539873][ T5935] hub 6-1:0.0: probe with driver hub failed with error -5 [ 434.874757][ T48] usb 6-1: USB disconnect, device number 26 [ 436.177420][ T48] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 436.350880][ T48] usb 6-1: device descriptor read/64, error -71 [ 436.721015][ T6279] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 436.834711][T11346] overlay: Unknown parameter '/' [ 437.401165][ T6279] usb 7-1: Using ep0 maxpacket: 32 [ 437.411505][ T6279] usb 7-1: too many configurations: 164, using maximum allowed: 8 [ 437.422093][ T6279] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 437.429711][ T6279] usb 7-1: can't read configurations, error -61 [ 437.503841][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 437.626011][ T6279] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 438.241007][ T6279] usb 7-1: Using ep0 maxpacket: 32 [ 438.247888][ T6279] usb 7-1: too many configurations: 164, using maximum allowed: 8 [ 438.264963][ T6279] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 438.277938][ T6279] usb 7-1: can't read configurations, error -61 [ 438.290087][ T6279] usb usb7-port1: attempt power cycle [ 438.641246][ T6279] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 438.848383][ T6279] usb 7-1: Using ep0 maxpacket: 32 [ 438.859276][ T6279] usb 7-1: too many configurations: 164, using maximum allowed: 8 [ 438.874106][ T6279] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 438.885912][ T6279] usb 7-1: can't read configurations, error -61 [ 438.995698][T11375] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1305'. [ 439.021999][ T6279] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 439.053077][ T6279] usb 7-1: Using ep0 maxpacket: 32 [ 439.060552][ T6279] usb 7-1: too many configurations: 164, using maximum allowed: 8 [ 439.070672][ T6279] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 439.078478][ T6279] usb 7-1: can't read configurations, error -61 [ 439.085940][ T6279] usb usb7-port1: unable to enumerate USB device [ 439.199541][ T434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.214414][ T434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.416288][ T434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.440804][ T434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.789834][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.796544][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.116480][ T30] audit: type=1400 audit(1765803882.985:1145): avc: denied { write } for pid=11389 comm="syz.6.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 440.220985][ T434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.246184][ T434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.457129][ T434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.472235][ T434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.562459][ T30] audit: type=1400 audit(1765803883.435:1146): avc: denied { ioctl } for pid=11404 comm="syz.3.1314" path="socket:[30379]" dev="sockfs" ino=30379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 440.788585][T11415] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.803871][T11415] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.814258][T11415] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.828211][T11415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.836255][T11415] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.952419][T11414] lo speed is unknown, defaulting to 1000 [ 441.086967][ T434] bridge_slave_1: left allmulticast mode [ 441.102959][ T434] bridge_slave_1: left promiscuous mode [ 441.118402][ T434] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.136972][ T434] bridge_slave_0: left allmulticast mode [ 441.154182][ T434] bridge_slave_0: left promiscuous mode [ 441.168817][ T434] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.809439][ T434] bridge0 (unregistering): left promiscuous mode [ 442.071298][T11439] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 442.086648][ T434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.201881][ T434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.270833][ T434] bond0 (unregistering): Released all slaves [ 442.362124][T11431] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 442.958498][T11415] Bluetooth: hci1: command tx timeout [ 443.632524][T11456] overlayfs: missing 'workdir' [ 443.756392][T11414] chnl_net:caif_netlink_parms(): no params data found [ 444.980897][T11415] Bluetooth: hci1: command tx timeout [ 447.060832][T11415] Bluetooth: hci1: command tx timeout [ 449.140839][T11415] Bluetooth: hci1: command tx timeout [ 501.228669][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.238736][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.304530][ T5819] Bluetooth: hci6: command 0x0406 tx timeout [ 549.050753][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 549.057725][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11339/1:b..l [ 549.066259][ C0] rcu: (detected by 0, t=10502 jiffies, g=43377, q=390 ncpus=2) [ 549.073971][ C0] task:syz.0.1291 state:R running task stack:23624 pid:11339 tgid:11339 ppid:5812 task_flags:0x40064c flags:0x00080001 [ 549.088751][ C0] Call Trace: [ 549.092036][ C0] [ 549.094960][ C0] ? __schedule+0x10b9/0x6150 [ 549.099642][ C0] __schedule+0x1139/0x6150 [ 549.104141][ C0] ? find_held_lock+0x2b/0x80 [ 549.108844][ C0] ? __pfx___schedule+0x10/0x10 [ 549.113702][ C0] preempt_schedule_irq+0x51/0x90 [ 549.118725][ C0] irqentry_exit+0x1d8/0x8c0 [ 549.123322][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 549.129307][ C0] RIP: 0010:lock_is_held_type+0x107/0x150 [ 549.135028][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 5c f0 3a 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 2c 03 00 45 31 ed eb [ 549.154631][ C0] RSP: 0018:ffffc9000e057128 EFLAGS: 00000286 [ 549.160695][ C0] RAX: 0000000000000046 RBX: ffff888058f954b0 RCX: 0000000000000001 [ 549.168654][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7ab3 RDI: ffffffff8bf2b300 [ 549.176615][ C0] RBP: ffffffff8e3c9620 R08: 0000000000000006 R09: 0000000000000000 [ 549.184576][ C0] R10: 0000000000001000 R11: ffff888058f954b0 R12: ffff888058f94980 [ 549.192542][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000000 [ 549.200528][ C0] lookup_page_ext+0x6e/0x100 [ 549.205207][ C0] __update_page_owner_free_handle.constprop.0+0xaa/0x4a0 [ 549.212325][ C0] __reset_page_owner+0x93/0x1a0 [ 549.217272][ C0] free_unref_folios+0xa22/0x1610 [ 549.222297][ C0] ? rcu_is_watching+0x12/0xc0 [ 549.227055][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 549.232862][ C0] folios_put_refs+0x4be/0x750 [ 549.237628][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 549.242912][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 549.249243][ C0] shmem_undo_range+0x58f/0x1140 [ 549.254189][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 549.259579][ C0] ? find_held_lock+0x2b/0x80 [ 549.264290][ C0] shmem_evict_inode+0x39e/0xbe0 [ 549.269223][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 549.274940][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 549.280388][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 549.286458][ C0] ? find_held_lock+0x2b/0x80 [ 549.291142][ C0] ? evict+0x37e/0xad0 [ 549.295210][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 549.300660][ C0] evict+0x3c2/0xad0 [ 549.304545][ C0] ? find_held_lock+0x2b/0x80 [ 549.309224][ C0] ? __pfx_evict+0x10/0x10 [ 549.313636][ C0] ? iput.part.0+0x619/0x1190 [ 549.318317][ C0] iput.part.0+0x621/0x1190 [ 549.322818][ C0] iput+0x35/0x40 [ 549.326445][ C0] dentry_unlink_inode+0x29c/0x480 [ 549.331561][ C0] __dentry_kill+0x1d0/0x600 [ 549.336146][ C0] finish_dput+0x76/0x480 [ 549.340476][ C0] dput.part.0+0x451/0x570 [ 549.344888][ C0] dput+0x1f/0x30 [ 549.348515][ C0] __fput+0x51c/0xb70 [ 549.352491][ C0] task_work_run+0x150/0x240 [ 549.357082][ C0] ? __pfx_task_work_run+0x10/0x10 [ 549.362192][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 549.367394][ C0] do_exit+0x87f/0x2bd0 [ 549.371545][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 549.377176][ C0] ? __pfx_do_exit+0x10/0x10 [ 549.381773][ C0] do_group_exit+0xd3/0x2a0 [ 549.386274][ C0] get_signal+0x2671/0x26d0 [ 549.390791][ C0] ? __pfx_get_signal+0x10/0x10 [ 549.395655][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 549.401204][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 549.407366][ C0] ? __bad_area_nosemaphore+0x350/0x690 [ 549.412921][ C0] irqentry_exit+0x38a/0x8c0 [ 549.417514][ C0] asm_exc_page_fault+0x26/0x30 [ 549.422359][ C0] RIP: 0033:0x7f55f8b8f751 [ 549.426762][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 549.432821][ C0] RAX: 0000000000000000 RBX: 00007f55f8de6180 RCX: 00007f55f8b8f749 [ 549.440783][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 549.448744][ C0] RBP: 00007f55f8c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 549.456704][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 549.464663][ C0] R13: 00007f55f8de6218 R14: 00007f55f8de6180 R15: 00007ffd9121c998 [ 549.472654][ C0] [ 549.475662][ C0] rcu: rcu_preempt kthread starved for 10539 jiffies! g43377 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 549.486849][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 549.496809][ C0] rcu: RCU grace-period kthread stack dump: [ 549.502690][ C0] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 549.516192][ C0] Call Trace: [ 549.519482][ C0] [ 549.522410][ C0] ? __schedule+0x10b9/0x6150 [ 549.527099][ C0] __schedule+0x1139/0x6150 [ 549.531623][ C0] ? __lock_acquire+0x436/0x2890 [ 549.536565][ C0] ? __mod_timer+0x8f2/0xd30 [ 549.541175][ C0] ? __pfx___schedule+0x10/0x10 [ 549.546021][ C0] ? find_held_lock+0x2b/0x80 [ 549.550700][ C0] ? schedule+0x2d7/0x3a0 [ 549.555028][ C0] schedule+0xe7/0x3a0 [ 549.559097][ C0] schedule_timeout+0x123/0x290 [ 549.563943][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 549.569310][ C0] ? __pfx_process_timeout+0x10/0x10 [ 549.574593][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 549.580407][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 549.585871][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 549.590640][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 549.595930][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 549.601142][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 549.606087][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 549.610971][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 549.616783][ C0] rcu_gp_kthread+0x26d/0x380 [ 549.621462][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 549.626658][ C0] ? rcu_is_watching+0x12/0xc0 [ 549.631415][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 549.636615][ C0] ? __kthread_parkme+0x19e/0x250 [ 549.641640][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 549.646837][ C0] kthread+0x3c5/0x780 [ 549.650993][ C0] ? __pfx_kthread+0x10/0x10 [ 549.655583][ C0] ? rcu_is_watching+0x12/0xc0 [ 549.660340][ C0] ? __pfx_kthread+0x10/0x10 [ 549.664936][ C0] ret_from_fork+0x983/0xb10 [ 549.669525][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 549.674636][ C0] ? __switch_to+0x7af/0x10d0 [ 549.679313][ C0] ? __pfx_kthread+0x10/0x10 [ 549.683943][ C0] ret_from_fork_asm+0x1a/0x30 [ 549.688749][ C0] [ 549.691772][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 549.698092][ C0] Sending NMI from CPU 0 to CPUs 1: [ 549.703303][ C1] NMI backtrace for cpu 1 [ 549.703323][ C1] CPU: 1 UID: 0 PID: 11472 Comm: syz.3.1334 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.703348][ C1] Tainted: [L]=SOFTLOCKUP [ 549.703354][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 549.703364][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 549.703390][ C1] Code: 82 48 16 00 00 83 f8 02 75 20 48 8b 8a 50 16 00 00 8b 92 4c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 549.703408][ C1] RSP: 0018:ffffc9000d7a7ae0 EFLAGS: 00000093 [ 549.703422][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81aadc4c [ 549.703434][ C1] RDX: ffff888058dc24c0 RSI: ffffffff81aae072 RDI: ffffffff8dd7af28 [ 549.703445][ C1] RBP: ffff8880b8528440 R08: 0000000000000005 R09: 0000000000000000 [ 549.703456][ C1] R10: 0000000000000000 R11: ffff888058dc2ff0 R12: 0000000000000001 [ 549.703467][ C1] R13: ffff88807451b518 R14: 0000000000000000 R15: ffff8880b85284c0 [ 549.703479][ C1] FS: 0000555573eb5500(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 549.703495][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.703507][ C1] CR2: 00007f22d0008190 CR3: 0000000030435000 CR4: 00000000003526f0 [ 549.703518][ C1] Call Trace: [ 549.703523][ C1] [ 549.703529][ C1] hrtimer_start_range_ns+0x962/0x11f0 [ 549.703565][ C1] posixtimer_deliver_signal+0x30d/0x6b0 [ 549.703594][ C1] dequeue_signal+0x307/0x520 [ 549.703615][ C1] ? __pfx_dequeue_signal+0x10/0x10 [ 549.703633][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 549.703657][ C1] ? __pfx___might_resched+0x10/0x10 [ 549.703676][ C1] get_signal+0x601/0x26d0 [ 549.703704][ C1] ? x86_task_fpu+0x5f/0x90 [ 549.703727][ C1] ? __pfx_get_signal+0x10/0x10 [ 549.703751][ C1] ? x86_task_fpu+0x5f/0x90 [ 549.703776][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 549.703801][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 549.703825][ C1] ? __pfx_restore_altstack+0x10/0x10 [ 549.703858][ C1] ? restore_signal_shadow_stack+0x63/0x460 [ 549.703889][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 549.703917][ C1] do_syscall_64+0x4ee/0xf80 [ 549.703940][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.703959][ C1] RIP: 0033:0x7f94dec6efbb [ 549.703973][ C1] Code: 03 14 ca 80 3d 0d 8e 37 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c5 c1 ed 04 31 c5 69 ed 2d eb d4 27 <89> e8 c1 e8 0f 31 c5 81 e5 ff 0f 00 00 48 31 d5 80 3d 76 30 37 00 [ 549.703990][ C1] RSP: 002b:00007fff1c9ec410 EFLAGS: 00000a07 [ 549.704002][ C1] RAX: 000000000000034e RBX: 00007f94dfb15720 RCX: 000000000000122b [ 549.704013][ C1] RDX: ffffffff8162306f RSI: ffffffff81623034 RDI: 0000000000000009 [ 549.704025][ C1] RBP: 000000007a399a72 R08: 00007f94defe6038 R09: 00007f94defd2000 [ 549.704036][ C1] R10: 00007f94de7ff008 R11: 0000000000000009 R12: 0000000000000009 [ 549.704047][ C1] R13: 0000000000000000 R14: ffffffff8162306f R15: 000000000000122b [ 549.704058][ C1] ? x86_task_fpu+0x5f/0x90 [ 549.704082][ C1] ? x86_task_fpu+0x5f/0x90 [ 549.704154][ C1] ? x86_task_fpu+0x24/0x90 [ 549.704182][ C1]