last executing test programs: 32m25.27537728s ago: executing program 1 (id=3006): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000d000)={{{@in6, @in=@initdev}}, {{@in6}, 0x0, @in=@dev}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x5b0, @dev, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 32m24.726353778s ago: executing program 1 (id=3009): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = getpid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x6000}, 0x80) read(0xffffffffffffffff, 0x0, 0x0) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) 32m23.490254887s ago: executing program 1 (id=3015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_setup(0x987, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000300000002"], 0x0, 0x4e}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 32m22.445411403s ago: executing program 1 (id=3021): r0 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000540)=""/138, 0x8a}], 0x1, 0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) syz_clone(0x44209400, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4c5, &(0x7f0000000ec0)="$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") 32m22.295701985s ago: executing program 1 (id=3024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) 32m21.843696143s ago: executing program 1 (id=3028): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access', @ANYRESDEC=r4]) 32m21.677432055s ago: executing program 32 (id=3028): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access', @ANYRESDEC=r4]) 32m21.469162268s ago: executing program 3 (id=3032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) timer_create(0x7, 0x0, &(0x7f0000000540)=0x0) timer_delete(r2) 32m21.430179129s ago: executing program 3 (id=3033): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x10c) 32m21.429860029s ago: executing program 3 (id=3034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) listxattr(&(0x7f00000022c0)='./file0\x00', 0x0, 0x0) 32m21.429488449s ago: executing program 3 (id=3035): r0 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") socketpair$unix(0x1, 0x5, 0x0, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000540)=""/138, 0x8a}], 0x1, 0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) syz_clone(0x44209400, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4c5, &(0x7f0000000ec0)="$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") 32m21.167566683s ago: executing program 3 (id=3040): fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 32m20.65579402s ago: executing program 3 (id=3042): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 32m20.643162561s ago: executing program 33 (id=3042): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 22m35.857809096s ago: executing program 5 (id=7482): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0xe54b, 0x80000001, 0x0}) 22m35.826282627s ago: executing program 5 (id=7483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 22m35.819162267s ago: executing program 5 (id=7484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x100000001) mmap(&(0x7f0000703000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r2, 0x2546c000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 22m35.807979567s ago: executing program 5 (id=7486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22m35.59091837s ago: executing program 5 (id=7492): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 22m34.851690382s ago: executing program 5 (id=7493): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0xe54b, 0x80000001, 0x0}) 22m34.851356842s ago: executing program 34 (id=7493): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0xe54b, 0x80000001, 0x0}) 22m11.82019991s ago: executing program 0 (id=7724): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000009000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 22m11.022339822s ago: executing program 0 (id=7740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b}, 0x2060) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x5) socket$can_raw(0x1d, 0x3, 0x1) 22m10.164881625s ago: executing program 0 (id=7748): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22m9.355504017s ago: executing program 0 (id=7757): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x7, 0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000b00)}, 0x3ff}], 0x1, 0x20, &(0x7f0000000cc0)={0x77359400}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22m9.16450716s ago: executing program 0 (id=7761): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) unlink(&(0x7f00000001c0)='./file0\x00') 22m8.743725157s ago: executing program 0 (id=7764): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp850,fmask=000000 0000000000000240,errors=remount-ro,iocharset=cp936,iocharset=iso8859-14,dmask=00000000000000000000000,gid=', @ANYRESOCT, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,iocharset=iso8859-2,\x00'], 0x1, 0x153a, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002140)=""/4096, 0x1000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4b6, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="6d3e2dbd70"], 0x28}, 0x1, 0x0, 0x0, 0x40025}, 0x4024044) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 22m8.699252487s ago: executing program 35 (id=7764): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp850,fmask=000000 0000000000000240,errors=remount-ro,iocharset=cp936,iocharset=iso8859-14,dmask=00000000000000000000000,gid=', @ANYRESOCT, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,iocharset=iso8859-2,\x00'], 0x1, 0x153a, &(0x7f0000000c00)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+p985nZz/b57v57M/s5537Wftted53/3uvd935psuQ2s0qlm1ARHBvwUv/kgAgFgAGAgA1wBAAABl48rGZfRnl5jw722E/bkeSr7SM2BXEtc/a+P6Z21c/6yN65+1cf2zNq5/1sb1z9q4/oxlZZun57+Wl6y78P3/rIzf//8XSS859ou1Ja/vChDzR1O4/v//w38jl+v/v1bwR1bi+mdtXP+sKvZKT4D9F+DXf1aQ7R/2cP2zNq4/Y1nZL+8Fx8KVvx/9Vy8QydqfgVzp5x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsazhjL9MAUBm+0rPizHGGGOMMcYYY38en+1Kz4AxxhhjjDHGGGP/eQgCJCgIIAayQSxkhxwgAGIy+6+FOLgOcsP1kAfyQj7ID/FQAAqCBgMWCEIoBIUhCjdAEbgRikIxKA4lwEFJKAU3QWm4GcrALVAWboVycBuUhwpQESrB7VAZ7oAqcCdUhbugGlSHGlAT7oZacA/UhnuhDtwHdeF+qAcPQH14EBrAQ9AQHoZG8Ag0hkehCTSFZtAcWvxL+S9AD3gRekIvSIDe0Adegr7QD/rDABgIL8MgeAUGw6uQCENgKLwGw+B1GA5vwAgYCaPgTRgNb8EYGAvjYDwkwQSYCG/DJHgHJsMUmArTIBmmwwx4F2bCLJgN78EceB/mwjyYDwsgBT6AhbAIUuFDWAwfQRosgaWwDJbDClgJq2A1rIG1sA7WwwbYCJtgM2yBrbANtsMO2Akfwy74BHbDHtgLn8I++Ox/mH/67/K7IiCgQIEKFcZgDMZiLObAHJgTc2IuzIURjGAcxmFuzI15MA/mw3wYj/FYEAuiQYOEhIWwEEYxikWwCBbFolgci6NDh6WwFJbGm7EMlsGyWBbLYTksjxWwAlbCSlgZK2MVrIJVsSpWw2pYA2vg3Xg39sbaWBvrYB2si3Uzb09hA2yADbEhNsJG2BgbYxNsgs2wGbbAFtgSW2IrbIVtsA22xbbYDtthe2yPHbADdsSO2Ak7YWfsjF2wC3bFbtgt/YVsgC/ii9gLq4ne2Af7YF9MzNYfB+AAfBkH4Sv4Cr6KiTgEh+Jr+Bq+jsPxFI7AkTgKR2Fl8RaOwbFIYjwmYRJOxIk4CSfhZJyCU3AaJuN0nIEzcCbOwln4Hs7B9/F9nIfzcAGmYAouxEWYiqm4GE9jGi7BpbgMl+MKXI6rcDWuwrW4DtfiBtyAm3ATbsEtuA234Q7cgR+jAsBPcA/uwUTch/twP+7HA3gAD+JBTMd0PISH8DAexiN4BI/iUTyGx/EEHseTeBJP4Wk8g2fwHJ7D8/hc/FcNPy62JhFEBiWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARZhwpRFRERRFRRBQVRUVxUVw44UQpUUqUFqVFGVFGlBW3inLiNlFeVBCtXSVRSVQWbVwVcaeoKqqKaqK6qCFqipqilqglaovaoo6oI+qKuqKeeEDUF72xPz4kMirTSAzBxmIoNhFNhbx0hGophmMr0Vq0EU+IkTgC24mWrr14WnQQY7Cj+JsYi8+KzmI8dhHPi66im+guXhA9RCvXU/QSk7G36COmYV/RT/QXA8RMrC7ewznZa4hXRaIYIoaK18QCfF0MF2+IEWKkGCXeFKPFW2KMGCvGifEiSUwQE8XbYpJ4R0wWU8RUMU0ki+lihnhXzBSzxGzxnpgj3hdzxTwxXywQKeIDsVAsEqniQ7FYfCTSxBKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vFDrFTfCx2iU/EbrFH7BWfin3iM7FffC4OiC/EQfGlSBdfiUPia3FYfCOOiG/FUfGdOCaOixPie3FS/CBOidPijDgrzokfxXnxk7ggvACJUkgplQxkjMwmY2V2mUNeJXPKIPP4L+PkdTK3vF7mkXllPplfxssCsqDU0kgrSYaykCwso/IGWUTeKIvKYrK4LCGdLClLyZtkaXmzLCNvkWXlrbKcvE2WlxVkRVlJ3i4ryzskRC5uo5qsLmvImvJumQD3yNryXllH3ifryvtlPfmArC8flA3kQ7KhfFg2ko/IxvJR2UQ2lc1kc9lCPiZbysdlK9latpFPyLbySdlOPiXby6dlB+kvPUWelZ3lc7KLfF52ld1kd/mTvCC97Cl7SegNso98SfaV/WR/OUAOlC/LQfIVOVi+KhPlEDlUviaHydflcPmGHCFHylHyTTlaviXHyLFynBwvk+QEOVG+LSfJd+RkOUVOldNkspwu+18aabaU/zT/7d/JH/zz1jfJzXKL3Cq3ye1yh9wpP5a75C65W+6We+VeuU/uk/vlfnlAHpAH5UGZLtPlIXlIHpaH5RF5RB6VR+UxeVyeld/Lk/IHeUqelqflWXlOnpPnL/0OQKESSiqlAhWjsqlYlV3lUFepnOpqlUtdoyLqWhWnrlO51fUqj8qr8qn8Kl4VUAWVVkZZRSpUhVRhFVU34KUnjCquSiinSqpS6qb/Sb4qom5URVWxX+Vnzi/hH8yvhWqhWqqWqpVqpdqoNqqtaqvaqXaqvWqvOqgOqqPqqDqpTqqz6qy6qC6qq+qquqvuqofqoXqqnipBJag+6iXVV/VT/dUANVC9LDL2YbAarBJVohqqhqphapgaroarEWqEGqVGqdFqtBqjxqhxapxKUklqopqoJqlJarKarKaqqSpZJasZaoaaqWaq2Wq2mqPmqLlqrpqv5qsUlaIWqoUqVaWqxWqxSlNL1BK1TC1TK9QKtUqtUmvUGrVOrVMb1AaVpjarzWqr2qq2q+1qp9qpdqldarfarfaqvWqf2qf2q/3qgDqgDqqDKl2lq0PqkDqsDqsj6og6qo6qY+qYOqFOqJPqpDqlTqkz6ow6p86p8+q8uqAuZJz2BSIQgQpUEBPEBLFBbJAjyBHkDHIGuYJcQSSIBHFBXJA7uD7IE+QN8gX5g/igQFAw0IEJbCAuFT0a3BAUCW4MigbFguJBicAFJYNSwU1B6eDmoExwS1A2uDUoF9wWlA8qBBWDSsHtQeXgjqBKcGdQNbgrqBZUD2oENYO7g1rBPUHt4N6gTnBfUDe4P6gXPBDUDx4MGgQPBQ2Dh4NGwSNB4+DRoEnQNGgWNA9a/Knje38q7+Oup+6lE3Rv3Ue/pPvqfrq/HqAH6pf1IP2KHqxf1Yl6iB6qX9PD9Ot6uH5Dj9Aj9Sj9ph6t39Jj9Fg9To/XSXqCnqjf1pP0O3qynqKn6mk6WU/XM/S7eqaepWfr9/Qc/b6eq+fp+XqBTtEf6IV6kU7VH+rF+iOdppfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+id+mO9S3+id+s9eq/+VO/Tn+n9+nN9QH+hD+ovdbr+Sh/SX+vD+ht9RH+rj+rv9DF9XJ/Q3+uT+gd9Sp/WZ/RZfU7/qM/rn/QF7TNO7jPe3o0yysSYGBNrYk0Ok8PkNDlNLpPLREzExJk4k9vkNnlMHpPP5DPxJt4UNAVNBjJkCplCJmqipogpYoqaoqa4KW6ccaaUKWVKm9KmjCljypqyppwpZ8qb8qaiqWhuN7ebO8wd5k5zp7nL3GWqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWln2pv2poPpYDqajqaT6WQ6m86mi+liupquprvpbnqYHqan6WkSTILpY/qYvqav6W/6m4FmoBlkBpnBZrBJNIlmqBlqhplhZrgZbkaYkWZUxomqecuMMWPNODPeJJkkM9FMNJPMJDPZTDZTzVSTbJLNDDPDzDQzzWwz28wxc8xcM9fMN/NNikkxC81Ck2pSzWKz2KSZNLPULDXLzXKz0qw0q81qs9asNethvdloNprNZrPZaraa7Wa72Wl2ml1ml9ltdpu9Zq/ZZ/aZ/Wa/OWAOmIPmoEk36eaQOWQOm8PmiDlijpqj5pg5Zk6YE+akOWlOmVPmjDljzpm8l94vvYm12W0Oe5XNaa+2uew19u/jfDa/jbcFbEGrbR6b91exsdYWtcVscVvCOlvSlrI3/SYubyvYiraSvd1WtnfYKr+Ja9l7bG17r61j77M17d2/iuva+209+4itjwhgm9qGtrltZB+xje2jtoltapvZ5ratfdK2s0/Z9vZp28E+85t4oV1kV9s1dq1dZ3fbPfaMPWsP22/sOfuj7Wl72YH2ZTvIvmIH21dtoh3ym3iUfdOOtm/ZMXasHWfH/yaeaqfZZDvdzrDv2pl21m/iFPuBnWNT7Vw7z863C36OM+aUaj+0i+1HNs0GsNQus8vtCrvSrvq/c11mN9iNdpPdZT+xW+02u93usDszT4TtHrvXfmr32c/sIfu1PWC/sAftEZtuv/o5zti/I/Zbe9R+Z4/Z4/aE/d6etD+ozOyMff/e/mQvWG+BkIAkKQoohrJRLGWnHHQV5aSrKRddQxG6luLoOspN11Meykv5KD/FUwEqSJoMWSIKqRAVpijdQJnTK04lyFFJKkU3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BS1p6epAz1DHelv1Imepc70HHWh56krdaPu9AL1oBepJ/WiBOpNfegl6kv9qD8NoIH0Mg2iV2gwvUqJNISG0ms0jF6n4fQGjaCRNIrepNH0Fo2hsTSOxlMSTaCJ9DZNondoMk2hqTSNkmk6zaB3aSbNotn0Hs2h92kuzaP5tIBS6ANaSIsolT6kxfQRpdESWkrLaDmtoJW0ilbTGlpL62g9baCNtIk20xbaSttoO+2gnfQx7aJPaDftob30Ke2jz2g/fU4H6As6SF9SOn1Fh+hrOkzf0BH61vei7+gYHacT9D2dpB/oFJ2mM3SWztGPdJ5+ogvkCUIMRShDFQZhTJgtjA2zhznCq8Kc4dVhrvCaMBJeG8aF14W5w+vDPGHeMF+YP4wPC4QFQx2a0IYUhmGhsHAYDW8Ii4Q3hkXDYmHxsETowpJhqfCmsHR4c1gmvCUsG94algtvC8uHFcJH7qsU3h5WDu8Iq4R3hlXDu8JqYfWwRlgzvDusFd4T1g7vDeuE94VlwvvDeuEDYf3wwbBB+FDYMHw4bBQ+EjYOHw2bhE3DZmHzsEX4WNgyfDxsFbYO24RXhW3DJ8N24VNh+/DpsEP4zM/99y/K7H/iN/0JYe+wT/hS+FLo/b1yfnRBNCX6QXRhdFE0NfphdHH0o2hadEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RT1Pua2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1BVzxV0J51xJV8o1dy1cC9fSPe5audaujXvCPeGedE+6p9xT7mnXwT3jOrq/uU7uWdfZPeeec8+7rq6b6+5ecD3chFwXX5MJro/r4/q6vq6/6+8GuoFukBvkBrvBLtEluqFuqBvmhrnhbrgb4Ua4UW6UG+1GuzFujBvnxrkkl+QmuolukpvkJrvJbqqb6pJdspvh3gWAma7yrItbmevmuvluvktxKW6hyzhnTHWL3WKX5tLcUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W13291Ot9Ptcrvcbn/NxUHdPrff7XcH3AF30H3p0t1X7pD72h1237gj7lt31H3njrnj7oT73p10P7hT7rQ74866c+5Hd9795C4475IiEyITI29HJkXeiUyOTIlMjUyLJEemR2ZE3o3MjMyKzI68F5kTeT8yNzIvMj+yIJIS+SCyMLIokhr5MLI48lEkLbIksjSyLLI8siLifYGtoS/kC/uov8EX8Tf6or6YL+5LeOdL+lL+Jl/a3+zL+Ft8WX+rL+dv8+V9BV/RP+qb+Ka+mW/uW/jHfEv/uG/lW/s2/gnf1j/p2/mnfHv/tO/gn/Ed/d98J/+s7+yf8138876r7+a7+xd8D/+i7+l7+QTf2/fxL/m+vp/v7wf4gf5lP8i/4gf7V32iH+KH+tf8MP+6H+7f8CP8SD8q5k0/OvMSGcb7JD/BT/Rv+0n+HT/ZT/FT/TSf7Kf7Gf5dP9PP8rP9e36Of9/P9fP8fL/Ap/gP/EK/yKf6D/1i/5FP80sybxr7lX6VX+3X+LV+nV/vN/iNfpPf7Lf4rX6b3+53+J3+Y7/Lf+J3+z1+r//U7/Of+f3+c3/Af+EP+i99uv/KH/Jf+8P+G3/Ef+uP+u/8MX/cn/Df+5P+B3/Kn/Zn/Fl/zv/oz/uf/AX+mzXGGGOMsT9kwuWm+HXPxdv5vX8nR/xi5T4AcPW2/Om/7M84o1yf52K7n4hvGwGAp3t1eShzqVYtISHh0rppEoLC8wAyPwnK8PNXDy7FS6ANPAntoTWU/t359xPdztE/GT96K0COX+TEwuX48vifA2DC74z/2BOjFpYLz8T9P8afB1C08OWc7HA5XgJtfr6/0hrK/IP55235T+af/YskgFa/yMkJl+PL8y8Fj8Mz0P5XazLGGGOMMcYYYxf1ExU7ZV5/Zn7j8/euz+PV5ZxscDn+Z9fnjDHGGGOMMcYYu/Ke7db9qcfat2/d6Q81ev/ykSp/NOtfazSG/9TI/6GG/++Yxr/c8B4g8xEFAP/mgAAZDflX7sWWv2RbiZdeOn/ftfysD+C/o5R/RuMfHjLEX3ZwYowxxhhjjP2pLp/0//pxdaUmxBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZUF/xb8Tu9L7yBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjF1p/ycAAP//xK7/rQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002140)=""/4096, 0x1000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4b6, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="6d3e2dbd70"], 0x28}, 0x1, 0x0, 0x0, 0x40025}, 0x4024044) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 6.395510363s ago: executing program 8 (id=15555): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x20000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002c40), 0x80, 0x0) 5.569778966s ago: executing program 8 (id=15565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") recvmsg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) 4.467871213s ago: executing program 8 (id=15579): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[], 0x0) 871.198487ms ago: executing program 8 (id=15614): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x2, 0x3ff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000001c0)=0x1, 0x4) socket$tipc(0x1e, 0x2, 0x0) r5 = syz_clone(0xc4200000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 868.534557ms ago: executing program 6 (id=15622): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 788.013559ms ago: executing program 7 (id=15623): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff0c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000df91b58f070f5a6e1828654", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) listen(r3, 0x0) 787.756139ms ago: executing program 7 (id=15624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040880) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) 785.781509ms ago: executing program 6 (id=15625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000d904000600000000001000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 719.84625ms ago: executing program 7 (id=15629): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 719.37965ms ago: executing program 2 (id=15631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x10, 0x6, 0x790, 0x5d0, 0x378, 0x0, 0x490, 0x378, 0x6c0, 0x6c0, 0x6c0, 0x6c0, 0x6c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x7a00000000000000}, [@common=@ipv6header={{0x28}, {0x1, 0xc4, 0x1}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f0) 719.166819ms ago: executing program 2 (id=15632): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 697.191ms ago: executing program 6 (id=15634): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 682.38954ms ago: executing program 7 (id=15635): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff0c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000df91b58f070f5a6e1828654", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) listen(r3, 0x0) 681.96832ms ago: executing program 6 (id=15636): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 644.519791ms ago: executing program 7 (id=15637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 643.913821ms ago: executing program 2 (id=15638): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) close(r0) 575.888912ms ago: executing program 2 (id=15642): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 568.445022ms ago: executing program 6 (id=15643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x18) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61f, &(0x7f0000001680)="$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") 568.306752ms ago: executing program 4 (id=15644): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840000001a000100000000000000000080000000d9"], 0x84}}, 0x20048010) 492.817813ms ago: executing program 7 (id=15645): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./control\x00', 0x2c) fcntl$lock(r2, 0x24, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000440), 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@nobh}, {@nombcache}]}, 0xff, 0x258, &(0x7f0000000c40)="$eJzs3T9oHmUcB/Df3fu+xiQvEnURxD8gIhoIcRNc4qIQkBBEBBUiIi5KIsQEt8TJxUFnLZm6hNKtaceSJXRpKXRK2wzpUmhDh4YO7XDlfS+BJG/6J33f3pXc5wPH3SV393uO3Pe5G3L3BFBZQxExFhG1iBiOiEZEJHs3eDefhnZWl/rXpiKy7Ks7SXu7fD23u99gRCxGxCcRsZom8Us9Yn7lu81761988Pdc4/2TK9/2F3qSO7Y2N77cPjHx15nxj+cvXbk1kcRYNPedV+8lh/ysnkS89jyKvSCSetkt4GlM/nH6aiv3r0fEe+38NyKN/I/3z+xLq4346P9H7fvv7ctvFtlWoPeyrNG6By5mQOWkEdGMJB2JiHw5TUdG8mf4a7WB9NeZ2d+Hf56Zm/6p7J4K6JVmxMbn5/rODh7I/81ann/g+Grl/+vJ5eut5e1a2a0BCvFWPmvlf/iHhQ9D/qFy5B+qS/6huo6Yf//RAceI+z9U12Py/3JZbQKK0Zn/RtlNAgri+R8qKcuyTP6hwuQfqmtv/gGAasn6yn4DGShL2f0PAAAAAAAAAAAAAAAAAADQaal/bWp3Kqrmhf8itj7LRxfprF9rj0e8+znygbvJvkFIkh4MSvL9O10eoEunSn77+pUb5da/+Ha59RemIxb/jIjRer3z+kt2rr9n9+oTft/4scsCR5QcWP/0m2LrH/Rgudz64+sR51v9z+hh/U8ab7Tnh/c/zR58Mf23+10eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMI8DAAA//84UXFU") r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f0000000400)=0x13) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) getpid() 492.658913ms ago: executing program 6 (id=15646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400e300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) 492.411643ms ago: executing program 2 (id=15647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r1) 492.320113ms ago: executing program 4 (id=15648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYBLOB="18000180140002"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 490.166863ms ago: executing program 4 (id=15649): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 444.058204ms ago: executing program 2 (id=15650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080009efff000000100000000000000041e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5788bd927b132a311efbb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b85f2d271ff7bb3fe6d86cf5b894f530d105c11445f99c9a5371a09bfd86a4d873560d2eb8cd523447baaef8363dfb2a070"], 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) pipe(0x0) io_setup(0x4, 0x0) io_cancel(0x0, 0x0, 0x0) 351.223005ms ago: executing program 4 (id=15651): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 327.612216ms ago: executing program 4 (id=15652): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000d40)=[{r0}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 54.67135ms ago: executing program 8 (id=15653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 54.44653ms ago: executing program 4 (id=15654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0xa5) 0s ago: executing program 8 (id=15655): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) kernel console output (not intermixed with test programs): w USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.055833][ T4838] usb 3-1: config 0 descriptor?? [ 1993.080214][T17291] usb 8-1: config 4 has no interface number 0 [ 1993.086416][T17291] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1993.127425][T17291] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1993.155285][T17291] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1993.164344][T17291] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.205503][T17291] hub 8-1:4.128: USB hub found [ 1993.393851][T17291] hub 8-1:4.128: config failed, can't read hub descriptor (err -22) [ 1993.436543][T17291] usb 8-1: USB disconnect, device number 37 [ 1993.454051][ T28] audit: type=1400 audit(1750958586.802:5350): avc: denied { setopt } for pid=6961 comm="syz.4.13183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1993.635442][ T6969] hub 2-0:1.0: USB hub found [ 1993.640621][ T6969] hub 2-0:1.0: 1 port detected [ 1993.675779][ T6970] netlink: 'syz.6.13185': attribute type 3 has an invalid length. [ 1993.807692][ T4838] usbhid 3-1:0.0: can't add hid device: -71 [ 1993.813668][ T4838] usbhid: probe of 3-1:0.0 failed with error -71 [ 1993.814520][ T4838] usb 3-1: USB disconnect, device number 36 [ 1994.252424][ T28] audit: type=1326 audit(1750958587.650:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1995.611823][ T28] audit: type=1326 audit(1750958587.650:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1995.635546][ T28] audit: type=1326 audit(1750958587.650:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1995.659050][ T28] audit: type=1326 audit(1750958587.650:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb91218d197 code=0x7ffc0000 [ 1995.682635][ T28] audit: type=1326 audit(1750958587.650:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1995.772388][ T28] audit: type=1326 audit(1750958587.650:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1996.150331][ T28] audit: type=1326 audit(1750958587.650:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1998.029414][ T28] audit: type=1326 audit(1750958587.650:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1998.120150][ T28] audit: type=1326 audit(1750958587.650:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1998.216182][ T28] audit: type=1326 audit(1750958587.650:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1998.252300][ T28] audit: type=1326 audit(1750958587.650:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.7.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91218e929 code=0x7ffc0000 [ 1999.036106][T10829] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1999.297042][T10829] usb 8-1: Using ep0 maxpacket: 32 [ 1999.303304][T10829] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1999.321584][T10829] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1999.340884][T10829] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1999.361676][T10829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1999.381229][T10829] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1999.399440][T10829] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1999.409061][T10829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.417763][T10829] usb 8-1: config 0 descriptor?? [ 1999.700083][T18951] usb 8-1: USB disconnect, device number 38 [ 2000.276327][T17291] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2000.283978][T10081] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2001.375518][T10081] usb 9-1: Using ep0 maxpacket: 16 [ 2001.381811][T17291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2001.391989][T17291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2001.393217][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 2001.393231][ T28] audit: type=1326 audit(1750958595.321:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.405688][T17291] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2001.434418][ T28] audit: type=1326 audit(1750958595.332:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.443725][T17291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.476328][ T28] audit: type=1326 audit(1750958595.332:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.500220][T17291] usb 3-1: config 0 descriptor?? [ 2001.505681][T10081] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2001.515991][T10081] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.516099][ T28] audit: type=1326 audit(1750958595.332:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.525257][T10081] usb 9-1: Product: syz [ 2001.548399][T18951] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2001.552182][T10081] usb 9-1: Manufacturer: syz [ 2001.560097][ T28] audit: type=1326 audit(1750958595.332:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.564741][T10081] usb 9-1: SerialNumber: syz [ 2001.587857][ T28] audit: type=1326 audit(1750958595.332:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.598865][T10081] r8152-cfgselector 9-1: config 0 descriptor?? [ 2001.622801][ T28] audit: type=1326 audit(1750958595.332:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.646553][ T28] audit: type=1326 audit(1750958595.332:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.670384][ T28] audit: type=1326 audit(1750958595.407:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.695726][ T28] audit: type=1326 audit(1750958595.407:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.6.13209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2001.766937][T18951] usb 5-1: Using ep0 maxpacket: 32 [ 2001.925964][T17291] kovaplus 0003:1E7D:2D50.003A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 2001.971479][T18951] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 2001.979700][T18951] usb 5-1: config 4 has no interface number 0 [ 2001.985809][T18951] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2001.996873][T18951] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2002.007035][T18951] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2002.016126][T18951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.026140][T18951] hub 5-1:4.128: USB hub found [ 2002.082781][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13200'. [ 2002.092855][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13200'. [ 2002.110385][T17291] kovaplus 0003:1E7D:2D50.003A: couldn't init struct kovaplus_device [ 2002.118771][T10081] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2002.125101][T10081] r8152-cfgselector 9-1: bad CDC descriptors [ 2002.131203][T17291] kovaplus 0003:1E7D:2D50.003A: couldn't install mouse [ 2002.138609][T10081] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2002.145520][T17291] kovaplus: probe of 0003:1E7D:2D50.003A failed with error -71 [ 2002.155630][T10081] r8152-cfgselector 9-1: USB disconnect, device number 35 [ 2002.166586][T17291] usb 3-1: USB disconnect, device number 37 [ 2002.192896][ T7059] fido_id[7059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2002.216962][T18951] hub 5-1:4.128: config failed, can't read hub descriptor (err -22) [ 2002.261921][T18951] usb 5-1: USB disconnect, device number 40 [ 2002.453897][ T7063] 9pnet_fd: Insufficient options for proto=fd [ 2003.458529][ T7096] 9pnet_fd: Insufficient options for proto=fd [ 2005.425024][ T5111] udevd[5111]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2006.630206][ T7169] xt_hashlimit: max too large, truncated to 1048576 [ 2007.254587][ T5111] udevd[5111]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2009.266337][ T5111] udevd[5111]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2010.034686][ T7255] 9pnet_fd: Insufficient options for proto=fd [ 2010.922850][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 2010.922865][ T28] audit: type=1400 audit(1750958605.547:5401): avc: denied { setattr } for pid=7244 comm="syz.4.13277" name="/" dev="incremental-fs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2012.377219][ T6110] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2012.592653][ T4838] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 2012.634830][ T6110] usb 9-1: Using ep0 maxpacket: 16 [ 2012.656815][ T6110] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2012.737154][ T6110] usb 9-1: config 0 has no interface number 0 [ 2012.783998][ T4838] usb 7-1: Using ep0 maxpacket: 16 [ 2012.791393][ T4838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.825901][ T6110] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.301237][ T4838] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2013.310261][ T6110] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2013.320395][ T6110] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2013.330454][ T6110] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.340193][ T4838] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2013.354125][ T6110] usb 9-1: config 0 descriptor?? [ 2013.359252][ T4838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.383424][ T4838] usb 7-1: Product: syz [ 2013.390808][ T4838] usb 7-1: Manufacturer: syz [ 2013.395462][ T4838] usb 7-1: SerialNumber: syz [ 2013.938318][ T6110] input: HID 28bd:0071 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.003B/input/input39 [ 2013.968340][ T6110] input: HID 28bd:0071 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.003B/input/input40 [ 2013.992939][ T4838] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 2014.008133][ T6110] uclogic 0003:28BD:0071.003B: input,hiddev96,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1 [ 2014.021464][ T4838] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 2014.051462][ T5111] udevd[5111]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2014.068981][ T4838] usb 7-1: USB disconnect, device number 45 [ 2014.125878][T10081] usb 9-1: USB disconnect, device number 36 [ 2016.034067][ T7394] netlink: 'syz.2.13328': attribute type 3 has an invalid length. [ 2016.043972][ T7391] input: syz1 as /devices/virtual/input/input42 [ 2016.456103][T31620] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2016.633428][T31620] usb 9-1: Using ep0 maxpacket: 16 [ 2016.639702][T31620] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2016.658683][T31620] usb 9-1: config 0 has no interface number 0 [ 2016.677096][T31620] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.688409][T31620] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2016.698417][T31620] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2016.707450][T31620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.718901][T31620] usb 9-1: config 0 descriptor?? [ 2017.287221][T31620] input: HID 28bd:0071 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.003C/input/input43 [ 2017.300404][T31620] input: HID 28bd:0071 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.003C/input/input44 [ 2017.315135][T31620] uclogic 0003:28BD:0071.003C: input,hiddev96,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1 [ 2017.489911][ T4838] usb 9-1: USB disconnect, device number 37 [ 2017.668437][T31620] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 2017.836772][T31620] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2017.847923][T31620] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2017.857702][T31620] usb 8-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 2017.866771][T31620] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.875692][T31620] usb 8-1: config 0 descriptor?? [ 2018.091388][ T7436] input: syz1 as /devices/virtual/input/input46 [ 2018.308371][ T7444] netlink: 'syz.4.13345': attribute type 3 has an invalid length. [ 2018.610741][ T7448] syz.7.13340[7448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2018.611095][ T7448] syz.7.13340[7448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2018.683740][T17536] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2018.951760][T17536] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2018.980731][T17536] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2019.476396][T17536] usb 7-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 2019.487867][T17536] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.536719][T17536] usb 7-1: config 0 descriptor?? [ 2020.048820][T17536] saitek 0003:06A3:0CCB.003D: item fetching failed at offset 0/3 [ 2020.065465][T17536] saitek 0003:06A3:0CCB.003D: parse failed [ 2020.090731][T17536] saitek: probe of 0003:06A3:0CCB.003D failed with error -22 [ 2020.472788][T17536] usb 7-1: USB disconnect, device number 46 [ 2020.917350][ T7474] 9pnet_fd: Insufficient options for proto=fd [ 2020.985095][T31620] usbhid 8-1:0.0: can't add hid device: -71 [ 2020.991104][T31620] usbhid: probe of 8-1:0.0 failed with error -71 [ 2020.999419][T31620] usb 8-1: USB disconnect, device number 39 [ 2022.228919][ T7500] input: syz1 as /devices/virtual/input/input48 [ 2022.352783][ T7511] netlink: 'syz.2.13364': attribute type 3 has an invalid length. [ 2022.673254][ T4838] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2022.860347][ T4838] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.879133][ T4838] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2022.908256][ T4838] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2022.935506][ T4838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2022.948505][ T4838] usb 9-1: SerialNumber: syz [ 2023.497942][ T4838] usb 9-1: 0:2 : does not exist [ 2023.506636][ T4838] usb 9-1: USB disconnect, device number 38 [ 2024.512005][ T4850] udevd[4850]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2027.319904][ T7580] netlink: 'syz.6.13386': attribute type 3 has an invalid length. [ 2027.388528][ T7582] 9pnet_fd: Insufficient options for proto=fd [ 2028.356698][ T28] audit: type=1400 audit(1750958624.241:5402): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2028.633955][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.671869][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.721283][ T7595] device bridge_slave_0 entered promiscuous mode [ 2028.742388][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.755584][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.771337][ T7595] device bridge_slave_1 entered promiscuous mode [ 2028.882843][ T510] device bridge_slave_1 left promiscuous mode [ 2028.891045][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.906514][ T510] device bridge_slave_0 left promiscuous mode [ 2028.918863][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.967133][ T510] device veth0_vlan left promiscuous mode [ 2028.982181][T17536] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 2029.173165][T17536] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2029.185669][T17536] usb 9-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 2029.286280][T17536] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.776944][T17536] usb 9-1: config 0 descriptor?? [ 2030.128285][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2030.136130][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2030.151018][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2030.165081][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2030.174892][T30090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2030.181961][T30090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2030.279743][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2030.329611][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2030.373414][T30090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2030.380528][T30090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2030.451443][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2031.102272][T17536] cypress 0003:04B4:ED81.003E: collection stack underflow [ 2031.116656][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2031.124588][T17536] cypress 0003:04B4:ED81.003E: item 0 1 0 12 parsing failed [ 2031.132359][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2031.133622][T17536] cypress 0003:04B4:ED81.003E: parse failed [ 2031.146402][T17536] cypress: probe of 0003:04B4:ED81.003E failed with error -22 [ 2031.156084][T17536] usb 9-1: USB disconnect, device number 39 [ 2031.160160][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2031.178005][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2031.544574][ T7595] device veth0_vlan entered promiscuous mode [ 2031.739263][ T7595] device veth1_macvtap entered promiscuous mode [ 2032.001988][ T28] audit: type=1400 audit(1750958628.157:5403): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/root/syzkaller.GjxDXS/syz-tmp" dev="sda1" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2032.105203][ T28] audit: type=1400 audit(1750958628.189:5404): avc: denied { mount } for pid=7595 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2032.159543][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2032.178463][ T28] audit: type=1400 audit(1750958628.189:5405): avc: denied { mount } for pid=7595 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2032.183834][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2032.201689][ T28] audit: type=1400 audit(1750958628.189:5406): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/root/syzkaller.GjxDXS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2032.237836][ T28] audit: type=1400 audit(1750958628.189:5407): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/root/syzkaller.GjxDXS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=139445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2032.246500][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2032.266615][ T28] audit: type=1400 audit(1750958628.200:5408): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2032.297358][ T28] audit: type=1400 audit(1750958628.200:5409): avc: denied { mounton } for pid=7595 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2032.323526][ T28] audit: type=1400 audit(1750958628.253:5410): avc: denied { append } for pid=7650 comm="syz.7.13389" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2032.348568][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2032.356769][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2032.365184][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2032.373795][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2032.381931][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2032.390653][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2032.400694][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2032.409461][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2032.418859][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2032.427045][T30090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2032.696543][ T7668] netlink: 'syz.7.13408': attribute type 3 has an invalid length. [ 2035.433674][ T4838] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2036.012190][ T4838] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.030494][ T4838] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2036.058335][ T4838] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2036.084596][ T4838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2036.108614][ T4838] usb 5-1: SerialNumber: syz [ 2036.316159][ T4838] usb 5-1: 0:2 : does not exist [ 2036.329238][ T4838] usb 5-1: USB disconnect, device number 41 [ 2036.564048][ T7717] udevd[7717]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2038.247044][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13427'. [ 2040.353420][ T4838] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2043.700119][ T28] audit: type=1400 audit(1750958639.916:5411): avc: denied { listen } for pid=7772 comm="syz.4.13441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2043.745983][ T28] audit: type=1400 audit(1750958639.916:5412): avc: denied { connect } for pid=7772 comm="syz.4.13441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2043.851943][ T4838] usb 3-1: device descriptor read/all, error -71 [ 2043.876956][ T7794] xt_hashlimit: max too large, truncated to 1048576 [ 2045.461473][ T4838] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2045.676687][ T28] audit: type=1400 audit(1750958642.823:5413): avc: denied { mount } for pid=7817 comm="syz.4.13456" name="/" dev="configfs" ino=11570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2045.781186][ T28] audit: type=1400 audit(1750958642.834:5414): avc: denied { search } for pid=7817 comm="syz.4.13456" name="/" dev="configfs" ino=11570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2045.943475][ T4838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2045.955458][ T4838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2047.497633][T18951] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2047.545591][ T4838] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 2047.577435][ T4838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.680950][ T4838] usb 3-1: config 0 descriptor?? [ 2047.687522][ T4838] usb 3-1: can't set config #0, error -71 [ 2047.709856][ T4838] usb 3-1: USB disconnect, device number 39 [ 2047.940702][ T403] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 2048.059062][T18951] usb 9-1: Using ep0 maxpacket: 16 [ 2048.313756][ T403] usb 8-1: Using ep0 maxpacket: 32 [ 2048.330554][ T403] usb 8-1: config 4 has an invalid interface number: 128 but max is 0 [ 2048.345785][T18951] usb 9-1: device descriptor read/all, error -71 [ 2048.348449][ T403] usb 8-1: config 4 has no interface number 0 [ 2048.361045][ T403] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2048.402551][ T403] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2048.412817][ T403] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2048.493231][ T403] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.721486][ T403] hub 8-1:4.128: USB hub found [ 2048.746938][ T7858] xt_hashlimit: max too large, truncated to 1048576 [ 2048.908830][ T403] hub 8-1:4.128: config failed, can't read hub descriptor (err -22) [ 2048.958302][ T403] usb 8-1: USB disconnect, device number 40 [ 2049.012719][ T4838] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2049.226946][ T4838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2049.237977][ T4838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2049.248005][ T4838] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 2049.257153][ T4838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.266269][ T4838] usb 5-1: config 0 descriptor?? [ 2049.647840][ T4838] saitek 0003:06A3:0CCB.003F: item fetching failed at offset 0/3 [ 2049.655723][ T4838] saitek 0003:06A3:0CCB.003F: parse failed [ 2049.661757][ T4838] saitek: probe of 0003:06A3:0CCB.003F failed with error -22 [ 2049.770275][ T28] audit: type=1400 audit(1750958647.222:5415): avc: denied { mount } for pid=7882 comm="syz.7.13477" name="/" dev="ramfs" ino=140717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2049.874024][T31620] usb 5-1: USB disconnect, device number 42 [ 2050.439745][T17291] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2050.488769][T18951] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 2050.514414][ T28] audit: type=1400 audit(1750958648.027:5416): avc: denied { unmount } for pid=7595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2051.456268][T18951] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2051.464758][T18951] usb 9-1: config 179 has no interface number 0 [ 2051.471097][T18951] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 2051.483087][T18951] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 2051.494824][T18951] usb 9-1: config 179 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2051.506767][T18951] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2051.520495][T18951] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2051.529731][T18951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.540866][ T7876] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2051.712256][T17291] usb 3-1: Using ep0 maxpacket: 16 [ 2051.718748][T17291] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2051.765319][T17291] usb 3-1: config 0 has no interface number 0 [ 2051.773860][T17291] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2051.784937][T17291] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2051.794806][T17291] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2051.804087][T17291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.813576][T17291] usb 3-1: config 0 descriptor?? [ 2051.846837][ T7908] input: syz1 as /devices/virtual/input/input50 [ 2052.452260][T17291] uclogic 0003:28BD:0071.0040: failed retrieving string descriptor #100: -71 [ 2052.493531][T17291] uclogic 0003:28BD:0071.0040: failed retrieving pen parameters: -71 [ 2052.579230][T17291] uclogic 0003:28BD:0071.0040: pen probing failed: -71 [ 2052.745678][ T4838] usb 9-1: USB disconnect, device number 41 [ 2052.764362][T17291] uclogic 0003:28BD:0071.0040: failed probing parameters: -71 [ 2052.773569][T17291] uclogic: probe of 0003:28BD:0071.0040 failed with error -71 [ 2052.782585][T17291] usb 3-1: USB disconnect, device number 40 [ 2054.131780][ T7919] udevd[7919]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2055.651993][ T7977] input: syz1 as /devices/virtual/input/input51 [ 2056.121159][ T7919] udevd[7919]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2057.221099][T17291] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2058.127113][T17291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2058.143692][T17291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2058.154853][T17291] usb 7-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 2058.164407][T17291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.176256][T17291] usb 7-1: config 0 descriptor?? [ 2058.566476][T17291] saitek 0003:06A3:0CCB.0041: item fetching failed at offset 0/3 [ 2058.574372][T17291] saitek 0003:06A3:0CCB.0041: parse failed [ 2058.580226][T17291] saitek: probe of 0003:06A3:0CCB.0041 failed with error -22 [ 2058.750926][ T7573] usb 7-1: USB disconnect, device number 47 [ 2061.398833][ T28] audit: type=1400 audit(1750958659.689:5417): avc: denied { mount } for pid=8091 comm="syz.8.13545" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2061.400385][ T8092] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2064.247130][ T28] audit: type=1400 audit(1750958662.758:5418): avc: denied { unmount } for pid=313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2067.615177][ T4838] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 2068.066188][ T8148] input: syz1 as /devices/virtual/input/input54 [ 2071.822535][ T4838] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 2072.016678][ T4838] usb 7-1: not running at top speed; connect to a high speed hub [ 2072.025488][ T4838] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 2072.033897][ T4838] usb 7-1: config 95 has no interface number 0 [ 2072.558826][ T4838] usb 7-1: config 95 interface 1 has no altsetting 0 [ 2072.566723][ T4838] usb 7-1: string descriptor 0 read error: -71 [ 2072.572966][ T4838] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2072.582166][ T4838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.591429][ T4838] usb 7-1: can't set config #95, error -71 [ 2072.598120][ T4838] usb 7-1: USB disconnect, device number 49 [ 2072.705626][ T6] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2073.238096][ T6] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.248240][ T6] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2073.258223][ T6] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2073.267561][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2073.341802][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13591'. [ 2073.633789][ T6] usb 9-1: SerialNumber: syz [ 2073.730472][ T8241] kvm: pic: single mode not supported [ 2073.831285][ T6] usb 9-1: 0:2 : does not exist [ 2074.568247][T17291] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 2074.825416][T17291] usb 5-1: not running at top speed; connect to a high speed hub [ 2074.834074][T17291] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 2074.842431][T17291] usb 5-1: config 95 has no interface number 0 [ 2074.849088][T17291] usb 5-1: config 95 interface 1 has no altsetting 0 [ 2074.858246][T17291] usb 5-1: string descriptor 0 read error: -22 [ 2074.865030][T17291] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2075.103181][ T28] audit: type=1400 audit(1750958674.259:5419): avc: denied { ioctl } for pid=8255 comm="syz.7.13598" path="socket:[141248]" dev="sockfs" ino=141248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2075.134773][T17291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.178516][ T6] usb 9-1: USB disconnect, device number 42 [ 2076.039102][T17291] usb 5-1: USB disconnect, device number 43 [ 2078.350448][ T8293] xt_hashlimit: max too large, truncated to 1048576 [ 2079.241756][ T28] audit: type=1400 audit(1750958678.841:5420): avc: denied { ioctl } for pid=8307 comm="syz.7.13612" path="socket:[141924]" dev="sockfs" ino=141924 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2079.296615][ T28] audit: type=1400 audit(1750958678.905:5421): avc: denied { remount } for pid=8307 comm="syz.7.13612" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2079.416396][T17291] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2079.518982][ T28] audit: type=1400 audit(1750958679.044:5422): avc: denied { read } for pid=8307 comm="syz.7.13612" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=141925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2079.574880][T17291] usb 5-1: device descriptor read/64, error -71 [ 2079.826481][T17291] usb 5-1: device descriptor read/64, error -71 [ 2080.137589][T17291] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2080.683300][T17291] usb 5-1: device descriptor read/64, error -71 [ 2081.071756][T17291] usb 5-1: device descriptor read/64, error -71 [ 2081.659852][T17291] usb usb5-port1: attempt power cycle [ 2084.844517][ T7573] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2084.844658][ T6110] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2085.270817][ T7573] usb 9-1: Using ep0 maxpacket: 32 [ 2085.789993][ T7573] usb 9-1: config 4 has an invalid interface number: 128 but max is 0 [ 2085.798495][ T7573] usb 9-1: config 4 has no interface number 0 [ 2085.805056][ T7573] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.816409][ T7573] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2085.826758][ T7573] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2085.835990][ T7573] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.846656][ T7573] hub 9-1:4.128: USB hub found [ 2085.851671][ T6110] usb 7-1: device descriptor read/64, error -71 [ 2086.035352][ T7573] hub 9-1:4.128: config failed, can't read hub descriptor (err -22) [ 2086.054762][ T8392] incfs: Options parsing error. -22 [ 2086.060171][ T8392] incfs: mount failed -22 [ 2086.081533][ T7573] usb 9-1: USB disconnect, device number 43 [ 2086.136481][ T6110] usb 7-1: device descriptor read/64, error -71 [ 2086.322880][ T6] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2086.388080][ T6110] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2086.492335][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.515932][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2086.527897][ T6110] usb 7-1: device descriptor read/64, error -71 [ 2086.534206][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2086.543686][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2086.551765][ T6] usb 5-1: SerialNumber: syz [ 2087.012022][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13642'. [ 2087.018634][ T6] usb 5-1: 0:2 : does not exist [ 2087.042802][ T6] usb 5-1: USB disconnect, device number 47 [ 2087.524736][ T8431] binder: 8412:8431 ioctl c0306201 0 returned -14 [ 2088.019197][T18395] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2088.159099][T18395] usb 5-1: device descriptor read/64, error -71 [ 2089.431612][T18395] usb 5-1: device descriptor read/64, error -71 [ 2089.897733][ T8486] binder: 8483:8486 ioctl c0306201 0 returned -14 [ 2090.002114][T18395] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2090.144381][T18395] usb 5-1: device descriptor read/64, error -71 [ 2090.550591][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13676'. [ 2090.619625][T18395] usb 5-1: device descriptor read/64, error -71 [ 2090.740895][T18395] usb usb5-port1: attempt power cycle [ 2091.329297][T18395] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2091.366094][T18395] usb 5-1: Using ep0 maxpacket: 32 [ 2091.372456][T18395] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 2091.380879][T18395] usb 5-1: config 4 has no interface number 0 [ 2091.609188][T18395] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2091.620395][T18395] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2091.630682][T18395] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2091.639760][T18395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.657402][T18395] hub 5-1:4.128: USB hub found [ 2091.842510][ T8531] binder: 8528:8531 ioctl c0306201 0 returned -14 [ 2091.966675][ T4838] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 2091.974847][T18395] hub 5-1:4.128: config failed, can't read hub descriptor (err -22) [ 2092.008872][T18395] usb 5-1: USB disconnect, device number 50 [ 2092.120301][ T4838] usb 9-1: device descriptor read/64, error -71 [ 2092.371911][ T4838] usb 9-1: device descriptor read/64, error -71 [ 2092.435832][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13692'. [ 2092.474679][T18395] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2092.769984][ T4838] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 2092.801653][T18395] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.811820][T18395] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2092.821834][T18395] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2092.830951][T18395] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2092.839015][T18395] usb 7-1: SerialNumber: syz [ 2092.912461][ T4838] usb 9-1: device descriptor read/64, error -71 [ 2093.034036][T18395] usb 7-1: 0:2 : does not exist [ 2093.040655][T18395] usb 7-1: USB disconnect, device number 52 [ 2093.164138][ T4838] usb 9-1: device descriptor read/64, error -71 [ 2093.235195][ T8129] udevd[8129]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2093.276678][ T4838] usb usb9-port1: attempt power cycle [ 2094.083858][ T4838] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 2094.190220][ T4838] usb 9-1: device descriptor read/8, error -71 [ 2094.329750][ T4838] usb 9-1: device descriptor read/8, error -71 [ 2094.785879][ T4838] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 2094.815221][ T4838] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2094.825427][ T4838] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2094.835008][ T4838] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2094.844099][ T4838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2094.852138][ T4838] usb 9-1: SerialNumber: syz [ 2095.048502][ T4838] usb 9-1: 0:2 : does not exist [ 2095.056332][ T4838] usb 9-1: USB disconnect, device number 47 [ 2095.261396][ T6] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2095.274318][ T8129] udevd[8129]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2095.293774][ T8623] 9pnet_fd: Insufficient options for proto=fd [ 2095.419775][ T6] usb 7-1: device descriptor read/64, error -71 [ 2095.606000][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13725'. [ 2095.671336][ T6] usb 7-1: device descriptor read/64, error -71 [ 2095.876394][T17291] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 2095.922992][ T6] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2096.072163][T17291] usb 9-1: Using ep0 maxpacket: 8 [ 2096.079271][T17291] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2096.119234][T17291] usb 9-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 2096.206042][T17291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.227514][ T6] usb 7-1: device descriptor read/64, error -71 [ 2096.277132][T17291] usb 9-1: config 0 descriptor?? [ 2096.650018][ T6] usb 7-1: device descriptor read/64, error -71 [ 2096.761911][ T6] usb usb7-port1: attempt power cycle [ 2096.839405][ T8661] 9pnet_fd: Insufficient options for proto=fd [ 2097.164735][ T6] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2097.236811][ T6] usb 7-1: device descriptor read/8, error -71 [ 2098.002589][ T6] usb 7-1: device descriptor read/8, error -71 [ 2100.628024][T17291] usbhid 9-1:0.0: can't add hid device: -71 [ 2100.636391][T17291] usbhid: probe of 9-1:0.0 failed with error -71 [ 2100.698102][T17291] usb 9-1: USB disconnect, device number 48 [ 2101.940819][ T8726] 9pnet_fd: Insufficient options for proto=fd [ 2101.977225][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13755'. [ 2102.071295][ T8741] netlink: 'syz.2.13752': attribute type 3 has an invalid length. [ 2102.820211][ T7573] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2103.294345][ T8764] 9pnet_fd: Insufficient options for proto=fd [ 2103.754594][ T7573] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.771279][ T7573] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2103.790407][ T7573] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2103.801314][ T7573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2103.810142][ T7573] usb 5-1: SerialNumber: syz [ 2105.226345][ T7573] usb 5-1: 0:2 : does not exist [ 2105.240752][ T7573] usb 5-1: USB disconnect, device number 51 [ 2105.629035][ T8798] 9pnet_fd: Insufficient options for proto=fd [ 2105.750032][ T8807] xt_hashlimit: max too large, truncated to 1048576 [ 2105.908513][ T28] audit: type=1400 audit(1750958707.444:5423): avc: denied { bind } for pid=8804 comm="syz.7.13781" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2106.032586][ T28] audit: type=1400 audit(1750958707.444:5424): avc: denied { node_bind } for pid=8804 comm="syz.7.13781" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2107.423156][ T7573] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2107.564305][ T7573] usb 7-1: device descriptor read/64, error -71 [ 2107.815974][ T7573] usb 7-1: device descriptor read/64, error -71 [ 2107.899892][ T6] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2108.101887][ T7573] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2108.111946][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2108.124577][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2108.136311][ T6] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 2108.146595][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.172729][ T6] usb 3-1: config 0 descriptor?? [ 2108.272999][ T7573] usb 7-1: device descriptor read/64, error -71 [ 2108.543075][ T7573] usb 7-1: device descriptor read/64, error -71 [ 2108.567694][ T6] saitek 0003:06A3:0CCB.0042: item fetching failed at offset 0/3 [ 2108.602654][ T6] saitek 0003:06A3:0CCB.0042: parse failed [ 2108.655065][ T7573] usb usb7-port1: attempt power cycle [ 2108.675588][ T6] saitek: probe of 0003:06A3:0CCB.0042 failed with error -22 [ 2109.478060][ T6] usb 3-1: USB disconnect, device number 41 [ 2111.366276][ T28] audit: type=1326 audit(1750958713.302:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2111.448804][ T28] audit: type=1326 audit(1750958713.302:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2111.542812][ T28] audit: type=1326 audit(1750958713.334:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2111.629139][ T28] audit: type=1326 audit(1750958713.334:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2111.702658][ T28] audit: type=1326 audit(1750958713.334:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2111.796391][ T28] audit: type=1326 audit(1750958713.334:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2111.859655][ T28] audit: type=1326 audit(1750958713.334:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f102af8e963 code=0x7ffc0000 [ 2111.934202][ T28] audit: type=1326 audit(1750958713.334:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f102af8d3df code=0x7ffc0000 [ 2112.056648][ T28] audit: type=1326 audit(1750958713.334:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f102af8e9b7 code=0x7ffc0000 [ 2112.187580][ T28] audit: type=1326 audit(1750958713.334:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.6.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f102af8d290 code=0x7ffc0000 [ 2112.764370][ T8905] incfs: Backing dir is not set, filesystem can't be mounted. [ 2112.772069][ T8905] incfs: mount failed -2 [ 2115.533506][ T9085] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2115.794012][ T9085] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.804586][ T9085] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2115.817401][ T9085] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2115.827637][ T9085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2115.837122][ T9085] usb 3-1: SerialNumber: syz [ 2116.112313][ T9085] usb 3-1: 0:2 : does not exist [ 2116.136170][ T9085] usb 3-1: USB disconnect, device number 42 [ 2116.395400][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 2116.395415][ T28] audit: type=1326 audit(1750958718.699:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.6.13831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2116.425286][ T28] audit: type=1326 audit(1750958718.699:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.6.13831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2116.678842][ T8986] 9pnet_fd: Insufficient options for proto=fd [ 2116.750010][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13836'. [ 2117.762078][ T28] audit: type=1400 audit(1750958720.158:5493): avc: denied { write } for pid=9005 comm="syz.2.13845" name="/" dev="incremental-fs" ino=2387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2117.784982][ T28] audit: type=1400 audit(1750958720.158:5494): avc: denied { add_name } for pid=9005 comm="syz.2.13845" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2117.806464][ T28] audit: type=1400 audit(1750958720.158:5495): avc: denied { create } for pid=9005 comm="syz.2.13845" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2117.826891][ T28] audit: type=1400 audit(1750958720.158:5496): avc: denied { associate } for pid=9005 comm="syz.2.13845" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2118.774901][T18951] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 2119.020276][T18951] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2119.036274][T18951] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2119.068646][T18951] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2119.091106][T18951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2119.108470][T18951] usb 9-1: SerialNumber: syz [ 2119.872685][T18951] usb 9-1: 0:2 : does not exist [ 2120.424204][T18951] usb 9-1: USB disconnect, device number 49 [ 2120.433281][ T9042] xt_hashlimit: max too large, truncated to 1048576 [ 2120.468449][ T9053] 9pnet_fd: Insufficient options for proto=fd [ 2121.502923][ T9081] fuse: Bad value for 'fd' [ 2122.188452][ T9101] 9pnet_fd: Insufficient options for proto=fd [ 2122.530793][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13875'. [ 2124.850283][ T9122] xt_hashlimit: max too large, truncated to 1048576 [ 2125.913160][ T9144] device wg2 entered promiscuous mode [ 2126.162754][T18951] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2126.439530][T18951] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2126.454957][T18951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2126.793564][T18951] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2126.815126][T18951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2126.825190][T18951] usb 3-1: SerialNumber: syz [ 2127.069002][T18951] usb 3-1: 0:2 : does not exist [ 2127.087809][T18951] usb 3-1: USB disconnect, device number 43 [ 2127.780945][ T9142] udevd[9142]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2128.773980][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13902'. [ 2128.789539][ T28] audit: type=1400 audit(1750958732.003:5497): avc: denied { ioctl } for pid=9203 comm="syz.7.13901" path="net:[4026532404]" dev="nsfs" ino=4026532404 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2128.861312][ T9214] device wg2 entered promiscuous mode [ 2129.234622][T31620] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 2129.402394][T31620] usb 7-1: Using ep0 maxpacket: 16 [ 2129.408610][T31620] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2129.416667][T31620] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2129.426783][T31620] usb 7-1: config 0 has no interface number 0 [ 2129.432896][T31620] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2129.445796][T31620] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2129.455100][T31620] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.463686][T31620] usb 7-1: config 0 descriptor?? [ 2129.469397][T31620] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 2129.703599][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13915'. [ 2130.509946][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13927'. [ 2131.921222][T31620] usb 7-1: USB disconnect, device number 60 [ 2133.047350][ T9085] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2133.216594][ T9085] usb 9-1: config index 0 descriptor too short (expected 3133, got 61) [ 2133.276623][ T9085] usb 9-1: config 0 has an invalid interface number: 156 but max is 1 [ 2133.573425][ T9085] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2133.584669][ T9085] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2133.643407][ T9085] usb 9-1: config 0 has no interface number 0 [ 2133.650771][ T9085] usb 9-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2133.667451][ T9085] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2133.676589][ T9085] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.687457][ T9085] usb 9-1: config 0 descriptor?? [ 2133.829700][T18395] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2133.881873][ T9085] usb 9-1: USB disconnect, device number 50 [ 2134.071934][T18395] usb 5-1: Using ep0 maxpacket: 32 [ 2134.078235][T18395] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 2134.101549][T18395] usb 5-1: config 4 has no interface number 0 [ 2134.120110][T18395] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2134.153815][T18395] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2134.184039][T18395] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2134.193591][T18395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.207285][T18395] hub 5-1:4.128: USB hub found [ 2134.396574][T18395] hub 5-1:4.128: config failed, can't read hub descriptor (err -22) [ 2134.445359][T18395] usb 5-1: USB disconnect, device number 52 [ 2135.007188][ T9377] xt_hashlimit: max too large, truncated to 1048576 [ 2135.027563][ T9376] input: syz1 as /devices/virtual/input/input63 [ 2136.290243][T18395] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2136.467334][T18395] usb 5-1: Using ep0 maxpacket: 32 [ 2136.473795][T18395] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 2136.498002][T18395] usb 5-1: config 4 has no interface number 0 [ 2136.518252][T18395] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2136.550231][T18395] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2136.572459][T18395] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2136.606319][T18395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.629211][T18395] hub 5-1:4.128: USB hub found [ 2136.816056][T18395] hub 5-1:4.128: config failed, can't read hub descriptor (err -22) [ 2136.859310][T18395] usb 5-1: USB disconnect, device number 53 [ 2137.245757][ T9439] xt_hashlimit: max too large, truncated to 1048576 [ 2137.304999][ T9445] binder_alloc: 9444: binder_alloc_buf, no vma [ 2138.391133][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13991'. [ 2138.557135][ T28] audit: type=1400 audit(1750958742.485:5498): avc: denied { relabelfrom } for pid=9478 comm="syz.7.13993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2138.804902][ T28] audit: type=1400 audit(1750958742.506:5499): avc: denied { relabelto } for pid=9478 comm="syz.7.13993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2139.124285][T18951] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2139.131654][ T9498] input: syz1 as /devices/virtual/input/input66 [ 2139.249621][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14003'. [ 2139.300764][T18951] usb 3-1: Using ep0 maxpacket: 32 [ 2139.312254][T18951] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 2139.321967][T18951] usb 3-1: config 4 has no interface number 0 [ 2139.328123][T18951] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2139.340283][ T9505] xt_hashlimit: max too large, truncated to 1048576 [ 2139.350366][T18951] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2139.361350][T18951] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2139.378652][T18951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.397211][T18951] hub 3-1:4.128: USB hub found [ 2139.766121][T18951] hub 3-1:4.128: config failed, can't read hub descriptor (err -22) [ 2139.815362][T18951] usb 3-1: USB disconnect, device number 44 [ 2139.849173][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14009'. [ 2141.097348][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14025'. [ 2142.633811][ T9590] device pim6reg1 entered promiscuous mode [ 2144.671352][ T9647] binder: BINDER_SET_CONTEXT_MGR already set [ 2144.687379][ T9647] binder: 9646:9647 ioctl 4018620d 200000000040 returned -16 [ 2144.750499][ T9651] device wg2 entered promiscuous mode [ 2146.918478][ T9703] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.936665][ T9703] binder: 9702:9703 ioctl 4018620d 200000000040 returned -16 [ 2147.511010][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14071'. [ 2148.464248][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14082'. [ 2148.599024][ T9736] xt_hashlimit: max too large, truncated to 1048576 [ 2150.151269][ T9773] device wg2 entered promiscuous mode [ 2150.373658][T18951] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2150.578668][T18951] usb 3-1: Using ep0 maxpacket: 16 [ 2150.585899][T18951] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2150.594398][T18951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2150.605488][T18951] usb 3-1: config 0 has no interface number 0 [ 2150.612292][T18951] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2150.625887][T18951] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2150.635830][T18951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.653847][T18951] usb 3-1: config 0 descriptor?? [ 2150.660454][T18951] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 2153.092807][T18395] usb 3-1: USB disconnect, device number 45 [ 2153.098985][ T9823] incfs: Backing dir is not set, filesystem can't be mounted. [ 2153.107063][ T9823] incfs: mount failed -2 [ 2153.543579][ T9841] device wg2 left promiscuous mode [ 2153.551621][ T9841] device wg2 entered promiscuous mode [ 2153.919667][ T9855] 9pnet_fd: Insufficient options for proto=fd [ 2154.696704][ T9863] incfs: Backing dir is not set, filesystem can't be mounted. [ 2154.717623][ T9863] incfs: mount failed -2 [ 2155.009031][ T9876] binder: BINDER_SET_CONTEXT_MGR already set [ 2155.015209][ T9876] binder: 9875:9876 ioctl 4018620d 200000000040 returned -16 [ 2155.718367][T31620] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2156.871370][T31620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2156.897423][T31620] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2156.908519][ T9769] udevd[9769]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2156.940261][T31620] usb 9-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 2156.952868][ T9894] incfs: Backing dir is not set, filesystem can't be mounted. [ 2156.976392][ T9894] incfs: mount failed -2 [ 2156.982001][T31620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.010731][T31620] usb 9-1: config 0 descriptor?? [ 2157.336138][ T403] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2157.411531][T31620] usbhid 9-1:0.0: can't add hid device: -71 [ 2157.435731][T31620] usbhid: probe of 9-1:0.0 failed with error -71 [ 2157.479101][T31620] usb 9-1: USB disconnect, device number 51 [ 2157.559823][ T403] usb 5-1: Using ep0 maxpacket: 32 [ 2157.566188][ T403] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 2157.574555][ T403] usb 5-1: config 4 has no interface number 0 [ 2157.580855][ T9910] device wg2 left promiscuous mode [ 2157.580866][ T403] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2157.597433][ T403] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2157.607943][ T403] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2157.617713][ T403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.680923][ T403] hub 5-1:4.128: USB hub found [ 2157.725850][ T9910] device wg2 entered promiscuous mode [ 2157.862188][ T403] hub 5-1:4.128: config failed, can't read hub descriptor (err -22) [ 2157.896085][ T403] usb 5-1: USB disconnect, device number 54 [ 2158.137786][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.147084][ T9923] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.157004][ T9923] device bridge_slave_0 entered promiscuous mode [ 2158.167786][ T9923] bridge0: port 2(bridge_slave_1) entered blocking state [ 2158.174896][ T9923] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.185747][ T9923] device bridge_slave_1 entered promiscuous mode [ 2158.371963][ T9923] bridge0: port 2(bridge_slave_1) entered blocking state [ 2158.379034][ T9923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2158.386335][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.393378][ T9923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2158.452038][ T9923] device veth0_vlan entered promiscuous mode [ 2158.465721][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2158.478571][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2158.487677][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2158.497841][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2158.506799][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2158.515470][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2158.524538][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2158.533171][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2158.546804][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2158.591847][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2158.613368][ T9923] device veth1_macvtap entered promiscuous mode [ 2158.688517][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2158.697249][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2158.787201][ T9938] device pim6reg1 entered promiscuous mode [ 2159.151759][ T510] device bridge_slave_1 left promiscuous mode [ 2159.171973][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.186926][ T9948] incfs: Backing dir is not set, filesystem can't be mounted. [ 2159.221922][ T9948] incfs: mount failed -2 [ 2159.231320][ T510] device bridge_slave_0 left promiscuous mode [ 2159.301789][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.310391][ T510] device veth0_vlan left promiscuous mode [ 2159.653595][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14149'. [ 2159.690954][ T9968] fuse: Bad value for 'fd' [ 2159.977566][ T9983] input: syz1 as /devices/virtual/input/input73 [ 2160.621759][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14163'. [ 2160.728802][ T4838] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2160.881909][T10010] fuse: Bad value for 'fd' [ 2160.944169][ T4838] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2160.960022][ T4838] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2160.978366][ T4838] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2160.988023][ T4838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2160.996268][ T4838] usb 5-1: SerialNumber: syz [ 2161.585486][ T4838] usb 5-1: 0:2 : does not exist [ 2161.590427][ T4838] usb 5-1: unit 255 not found! [ 2161.605031][ T4838] usb 5-1: USB disconnect, device number 55 [ 2161.622989][ T9768] udevd[9768]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2161.805585][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14171'. [ 2162.040637][T10031] device pim6reg1 entered promiscuous mode [ 2163.091742][T10051] device syzkaller0 entered promiscuous mode [ 2163.590361][T18395] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 2163.768229][T18395] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2163.778572][T18395] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2163.788170][T18395] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2163.797227][T18395] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2163.805492][T18395] usb 7-1: SerialNumber: syz [ 2164.000445][T18395] usb 7-1: 0:2 : does not exist [ 2164.005391][T18395] usb 7-1: unit 255 not found! [ 2164.022206][T18395] usb 7-1: USB disconnect, device number 61 [ 2166.582480][T10113] device wg2 entered promiscuous mode [ 2166.693940][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14205'. [ 2167.145759][T10129] input: syz1 as /devices/virtual/input/input75 [ 2167.979760][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14209'. [ 2168.225146][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14218'. [ 2168.562484][T10171] device wg2 entered promiscuous mode [ 2169.222832][T10179] input: syz1 as /devices/virtual/input/input76 [ 2170.204029][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14231'. [ 2170.220586][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14227'. [ 2170.683780][T10220] device pim6reg1 entered promiscuous mode [ 2172.483364][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14244'. [ 2172.885842][ T9769] udevd[9769]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2172.905205][T10261] device pim6reg1 entered promiscuous mode [ 2174.103775][ T6110] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 2174.273862][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14263'. [ 2174.304031][ T6110] usb 9-1: Using ep0 maxpacket: 32 [ 2174.305550][T10297] input: syz1 as /devices/virtual/input/input78 [ 2174.336665][ T6110] usb 9-1: config 4 has an invalid interface number: 128 but max is 0 [ 2174.768866][ T6110] usb 9-1: config 4 has no interface number 0 [ 2174.775327][ T6110] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2174.786720][ T6110] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2174.799183][ T6110] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2174.813568][ T6110] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.827795][ T6110] hub 9-1:4.128: USB hub found [ 2174.936030][T10312] device wg2 left promiscuous mode [ 2174.945910][T10312] device wg2 entered promiscuous mode [ 2175.016237][ T6110] hub 9-1:4.128: config failed, can't read hub descriptor (err -22) [ 2175.073894][ T6110] usb 9-1: USB disconnect, device number 52 [ 2175.228810][T10319] xt_hashlimit: max too large, truncated to 1048576 [ 2177.342713][T10369] device pim6reg1 entered promiscuous mode [ 2177.502823][T10364] input: syz1 as /devices/virtual/input/input81 [ 2177.585228][T10381] xt_hashlimit: max too large, truncated to 1048576 [ 2178.022433][T10393] device pim6reg1 entered promiscuous mode [ 2178.767682][ T9768] udevd[9768]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2179.691425][T10433] device pim6reg1 entered promiscuous mode [ 2179.952432][T10422] input: syz1 as /devices/virtual/input/input82 [ 2180.307872][T10456] syz.6.14314[10456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2180.307949][T10456] syz.6.14314[10456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2182.331282][T10523] syz.4.14337[10523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2182.343062][T10523] syz.4.14337[10523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2182.363882][T10527] device pim6reg1 entered promiscuous mode [ 2182.545380][T10537] binder: 10536:10537 ioctl c0306201 0 returned -14 [ 2183.250476][T10562] device pim6reg1 entered promiscuous mode [ 2191.833168][T10764] input: syz1 as /devices/virtual/input/input89 [ 2191.859392][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14427'. [ 2192.067057][ T9768] udevd[9768]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2197.523691][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14447'. [ 2197.590063][T10834] input: syz1 as /devices/virtual/input/input90 [ 2206.555738][T10878] device pim6reg1 entered promiscuous mode [ 2207.541792][T31620] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 2207.723553][T31620] usb 9-1: not running at top speed; connect to a high speed hub [ 2207.758069][T31620] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 2207.787427][T31620] usb 9-1: config 95 has no interface number 0 [ 2207.805736][T31620] usb 9-1: config 95 interface 1 has no altsetting 0 [ 2207.832873][T31620] usb 9-1: string descriptor 0 read error: -22 [ 2207.850659][T31620] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2207.870300][T31620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.943237][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14473'. [ 2208.111869][T31620] usb 9-1: USB disconnect, device number 53 [ 2208.167459][T10911] binder: 10910:10911 ioctl c0306201 0 returned -14 [ 2208.339437][T10893] udevd[10893]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2208.473542][T10921] device pim6reg1 entered promiscuous mode [ 2209.094531][T10927] device pim6reg1 entered promiscuous mode [ 2209.512372][ T403] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2209.717435][ T403] usb 9-1: Using ep0 maxpacket: 16 [ 2209.723736][ T403] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2209.733572][ T403] usb 9-1: config 0 has no interface number 0 [ 2209.739770][ T403] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2209.750803][ T403] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2209.760810][ T403] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2209.769935][ T403] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.783067][ T403] usb 9-1: config 0 descriptor?? [ 2210.558526][ T403] usbhid 9-1:0.1: can't add hid device: -71 [ 2210.567125][ T403] usbhid: probe of 9-1:0.1 failed with error -71 [ 2210.575628][T10968] device pim6reg1 entered promiscuous mode [ 2210.604959][ T403] usb 9-1: USB disconnect, device number 54 [ 2211.730611][ T7573] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2211.907752][ T7573] usb 3-1: Using ep0 maxpacket: 16 [ 2211.914294][ T7573] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2211.939985][ T7573] usb 3-1: config 0 has no interface number 0 [ 2211.952840][ T7573] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2211.991089][ T7573] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2212.031091][ T7573] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2212.055809][ T7573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.067480][ T7573] usb 3-1: config 0 descriptor?? [ 2212.320725][ T6110] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 2212.466972][ T6110] usb 7-1: device descriptor read/64, error -71 [ 2212.541466][ T4838] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 2212.719445][ T4838] usb 5-1: not running at top speed; connect to a high speed hub [ 2212.728121][ T4838] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 2212.736234][ T4838] usb 5-1: config 95 has no interface number 0 [ 2212.742492][ T6110] usb 7-1: device descriptor read/64, error -71 [ 2212.748809][ T4838] usb 5-1: config 95 interface 1 has no altsetting 0 [ 2212.757479][ T4838] usb 5-1: string descriptor 0 read error: -22 [ 2212.763784][ T4838] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2212.772954][ T4838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.823354][ T7573] usbhid 3-1:0.1: can't add hid device: -71 [ 2212.829395][ T7573] usbhid: probe of 3-1:0.1 failed with error -71 [ 2212.836721][ T7573] usb 3-1: USB disconnect, device number 46 [ 2212.972840][ T4838] usb 5-1: USB disconnect, device number 56 [ 2213.007502][ T6110] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2213.157204][ T6110] usb 7-1: device descriptor read/64, error -71 [ 2213.408603][ T6110] usb 7-1: device descriptor read/64, error -71 [ 2213.520272][ T6110] usb usb7-port1: attempt power cycle [ 2213.995504][ T6110] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2214.024479][ T6110] usb 7-1: device descriptor read/8, error -71 [ 2214.209664][ T6110] usb 7-1: device descriptor read/8, error -71 [ 2215.544323][T11113] xt_hashlimit: max too large, truncated to 1048576 [ 2215.552041][ T6110] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 2215.592570][ T6110] usb 7-1: not running at top speed; connect to a high speed hub [ 2215.604435][ T6110] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 2215.619724][ T6110] usb 7-1: config 95 has no interface number 0 [ 2215.632054][ T6110] usb 7-1: config 95 interface 1 has no altsetting 0 [ 2215.649277][ T6110] usb 7-1: string descriptor 0 read error: -22 [ 2215.659659][ T6110] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2215.683022][ T6110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.869009][T17291] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2216.486994][T17291] usb 5-1: device descriptor read/64, error -71 [ 2216.832626][ T6110] usb 7-1: USB disconnect, device number 65 [ 2217.094743][T10893] udevd[10893]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2217.470758][T17291] usb 5-1: device descriptor read/64, error -71 [ 2217.742786][T17291] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2218.237564][T17291] usb 5-1: device descriptor read/64, error -71 [ 2218.312436][T11159] xt_hashlimit: max too large, truncated to 1048576 [ 2218.506813][T17291] usb 5-1: device descriptor read/64, error -71 [ 2218.639121][T17291] usb usb5-port1: attempt power cycle [ 2219.539318][T11206] device pim6reg1 entered promiscuous mode [ 2219.987084][T11227] device pim6reg1 entered promiscuous mode [ 2224.218208][T11336] device pim6reg1 entered promiscuous mode [ 2227.151422][T11371] device pim6reg1 entered promiscuous mode [ 2233.365627][T11429] device pim6reg1 entered promiscuous mode [ 2233.441344][T11435] device pim6reg1 entered promiscuous mode [ 2234.495228][T11450] syz.6.14672[11450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2234.496110][T11450] syz.6.14672[11450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2235.444732][T11446] xt_hashlimit: max too large, truncated to 1048576 [ 2235.698717][T11471] device pim6reg1 entered promiscuous mode [ 2236.887869][T11496] syz.7.14688[11496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2236.888021][T11496] syz.7.14688[11496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2238.324608][T11510] device pim6reg1 entered promiscuous mode [ 2242.140541][T11573] syz.7.14717[11573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2242.140614][T11573] syz.7.14717[11573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2242.176015][T11583] device wg2 left promiscuous mode [ 2242.233273][T11583] device wg2 entered promiscuous mode [ 2242.479793][T11603] device pim6reg1 entered promiscuous mode [ 2242.588402][T11610] 9pnet_fd: Insufficient options for proto=fd [ 2243.424923][T11623] device wg2 left promiscuous mode [ 2243.460943][T11623] device wg2 entered promiscuous mode [ 2243.600344][T11639] 9pnet_fd: Insufficient options for proto=fd [ 2243.643500][T11644] device pim6reg1 entered promiscuous mode [ 2244.162272][T11660] device pim6reg1 entered promiscuous mode [ 2244.262210][T11664] syz.7.14751[11664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2244.262283][T11664] syz.7.14751[11664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2244.297191][T11672] 9pnet_fd: Insufficient options for proto=fd [ 2244.759021][T11687] syz.2.14760[11687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2244.759096][T11687] syz.2.14760[11687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2245.627460][T11707] 9pnet_fd: Insufficient options for proto=fd [ 2246.983148][T11738] syz.8.14773[11738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2246.983222][T11738] syz.8.14773[11738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2248.370899][T11753] device pim6reg1 entered promiscuous mode [ 2248.557692][T11766] device pim6reg1 entered promiscuous mode [ 2249.571333][T11806] device pim6reg1 entered promiscuous mode [ 2252.634582][T11868] device pim6reg1 entered promiscuous mode [ 2252.943709][T11875] device wg2 left promiscuous mode [ 2253.046913][T11875] device wg2 entered promiscuous mode [ 2253.645723][T11888] device pim6reg1 entered promiscuous mode [ 2254.174373][T11904] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.181894][T11904] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.189599][T11904] device bridge_slave_0 entered promiscuous mode [ 2254.196777][T11904] bridge0: port 2(bridge_slave_1) entered blocking state [ 2254.203885][T11904] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.336354][T11904] device bridge_slave_1 entered promiscuous mode [ 2255.629584][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2255.646295][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2255.660247][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2255.669068][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2255.679315][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 2255.686424][T10664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2255.695420][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2255.744590][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2255.815942][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 2255.823047][T10664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2255.844815][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2255.869559][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2255.882914][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2255.899964][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2255.916329][T11904] device veth0_vlan entered promiscuous mode [ 2255.943000][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2255.954035][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2255.962702][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2255.977877][T11945] device wg2 left promiscuous mode [ 2255.985699][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2255.995913][T11904] device veth1_macvtap entered promiscuous mode [ 2256.004307][T11945] device wg2 entered promiscuous mode [ 2256.020757][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2256.036553][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2256.064639][T11949] device pim6reg1 entered promiscuous mode [ 2256.170999][T17291] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2256.280604][T24540] device bridge_slave_1 left promiscuous mode [ 2256.296653][T24540] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.398394][T17291] usb 5-1: Using ep0 maxpacket: 32 [ 2256.408802][T17291] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 2256.419984][T24540] device bridge_slave_0 left promiscuous mode [ 2256.427225][T17291] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.442434][T24540] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.495178][T24540] device veth0_vlan left promiscuous mode [ 2256.498081][T17291] usb 5-1: config 4 has no interface number 0 [ 2256.517502][T17291] usb 5-1: config 4 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2256.530894][T17291] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2256.544102][T17291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.577237][T17291] hub 5-1:4.128: bad descriptor, ignoring hub [ 2256.585806][T17291] hub: probe of 5-1:4.128 failed with error -5 [ 2256.592840][T17291] usbhid 5-1:4.128: couldn't find an input interrupt endpoint [ 2256.661877][T11966] device pim6reg1 entered promiscuous mode [ 2256.749777][T11968] device pim6reg1 entered promiscuous mode [ 2257.150271][T11982] device pim6reg1 entered promiscuous mode [ 2258.776692][T12011] device pim6reg1 entered promiscuous mode [ 2258.864976][ T9085] usb 5-1: USB disconnect, device number 60 [ 2258.889491][ T28] audit: type=1400 audit(1750958871.587:5500): avc: granted { setsecparam } for pid=12022 comm="syz.6.14875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2259.808555][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14872'. [ 2259.815786][ T4838] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 2260.809004][T12047] syz.2.14879[12047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2260.809078][T12047] syz.2.14879[12047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2261.204195][ T4838] usb 7-1: not running at top speed; connect to a high speed hub [ 2261.224848][ T4838] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 2261.233063][ T4838] usb 7-1: config 95 has no interface number 0 [ 2261.239834][ T4838] usb 7-1: config 95 interface 1 has no altsetting 0 [ 2261.248553][ T4838] usb 7-1: string descriptor 0 read error: -22 [ 2261.254834][ T4838] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2261.263954][ T4838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.470164][ T4838] usb 7-1: USB disconnect, device number 66 [ 2261.484597][T11941] udevd[11941]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2262.318150][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14897'. [ 2263.530928][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14904'. [ 2263.655473][ T4838] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2263.843237][ T4838] usb 3-1: not running at top speed; connect to a high speed hub [ 2263.852610][ T4838] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 2263.861893][ T4838] usb 3-1: config 95 has no interface number 0 [ 2263.868238][ T4838] usb 3-1: config 95 interface 1 has no altsetting 0 [ 2263.878589][ T4838] usb 3-1: string descriptor 0 read error: -22 [ 2263.885816][ T4838] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2263.896172][ T4838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.163615][ T4838] usb 3-1: USB disconnect, device number 47 [ 2264.384990][T12130] device pim6reg1 entered promiscuous mode [ 2265.378332][T12155] device pim6reg1 entered promiscuous mode [ 2265.504342][T12166] device pim6reg1 entered promiscuous mode [ 2265.557896][T12171] device pim6reg1 entered promiscuous mode [ 2265.574509][ T28] audit: type=1400 audit(1750958878.754:5501): avc: denied { remount } for pid=12172 comm="syz.4.14924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2265.595249][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14920'. [ 2266.447844][T12193] device pim6reg1 entered promiscuous mode [ 2266.535531][ T4838] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 2266.565734][T12201] device pim6reg1 entered promiscuous mode [ 2266.908985][ T4838] usb 5-1: not running at top speed; connect to a high speed hub [ 2266.917639][ T4838] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 2266.925806][ T4838] usb 5-1: config 95 has no interface number 0 [ 2266.932513][ T4838] usb 5-1: config 95 interface 1 has no altsetting 0 [ 2266.948301][ T4838] usb 5-1: string descriptor 0 read error: -22 [ 2266.959705][ T4838] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2266.975589][ T4838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.197912][ T4838] usb 5-1: USB disconnect, device number 61 [ 2267.227484][T11941] udevd[11941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2267.480481][T12236] device pim6reg1 entered promiscuous mode [ 2267.842764][T12262] device pim6reg1 entered promiscuous mode [ 2267.924435][T12269] device wg2 entered promiscuous mode [ 2268.534309][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14970'. [ 2268.741951][T11941] udevd[11941]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2273.491075][T12310] device pim6reg1 entered promiscuous mode [ 2273.553047][ T28] audit: type=1400 audit(1750958887.316:5502): avc: denied { compute_member } for pid=12314 comm="syz.7.14982" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2275.043026][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15002'. [ 2275.225702][T12377] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.240883][T12377] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.250311][T12377] device bridge_slave_0 entered promiscuous mode [ 2275.265142][T12377] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.272431][T12377] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.280098][T12377] device bridge_slave_1 entered promiscuous mode [ 2275.301397][T12388] device pim6reg1 entered promiscuous mode [ 2275.402211][T12377] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.409289][T12377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2275.416556][T12377] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.423606][T12377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2275.435144][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.453297][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.091178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2276.122934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2276.153523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2276.194592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2276.214144][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 2276.221211][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2276.256348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2276.285215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2276.304339][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 2276.311409][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2276.357421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2276.372887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2276.414795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2276.437178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2276.470828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2276.479637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2276.490772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2276.498927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2276.507494][T12377] device veth0_vlan entered promiscuous mode [ 2276.519426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2276.536001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2276.553804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2276.571162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2276.580046][T12377] device veth1_macvtap entered promiscuous mode [ 2276.591196][T12430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15020'. [ 2276.602327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2276.611491][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2276.623866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2276.637978][T24540] device bridge_slave_1 left promiscuous mode [ 2276.645301][T24540] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.654045][T24540] device bridge_slave_0 left promiscuous mode [ 2276.660607][T24540] bridge0: port 1(bridge_slave_0) entered disabled state [ 2276.671317][T24540] device veth0_vlan left promiscuous mode [ 2276.867240][T12436] device pim6reg1 entered promiscuous mode [ 2276.876246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2276.884741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2277.665808][T12461] device pim6reg1 entered promiscuous mode [ 2277.774216][T12473] device pim6reg1 entered promiscuous mode [ 2279.022905][ T28] audit: type=1326 audit(1750958893.185:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.053440][ T28] audit: type=1326 audit(1750958893.185:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.077893][ T28] audit: type=1326 audit(1750958893.217:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.106546][ T28] audit: type=1326 audit(1750958893.217:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.131113][ T28] audit: type=1326 audit(1750958893.217:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.155063][ T28] audit: type=1326 audit(1750958893.249:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.179083][ T28] audit: type=1326 audit(1750958893.249:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.203383][ T28] audit: type=1326 audit(1750958893.249:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.227642][ T28] audit: type=1326 audit(1750958893.249:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.255989][ T28] audit: type=1326 audit(1750958893.249:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.6.15050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102af8e929 code=0x7ffc0000 [ 2279.333178][T12531] device wg2 entered promiscuous mode [ 2279.340454][T12529] device veth1_macvtap left promiscuous mode [ 2279.349063][T12529] device macsec0 entered promiscuous mode [ 2280.031939][ T403] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 2280.582272][ T403] usb 9-1: not running at top speed; connect to a high speed hub [ 2280.594780][ T403] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 2280.619118][ T403] usb 9-1: config 95 has no interface number 0 [ 2280.638058][ T403] usb 9-1: config 95 interface 1 has no altsetting 0 [ 2280.666287][ T403] usb 9-1: string descriptor 0 read error: -22 [ 2280.672659][ T403] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2280.682632][ T403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.811708][T12542] syz.4.15065[12542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2280.811869][T12542] syz.4.15065[12542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2281.036554][ T403] usb 9-1: USB disconnect, device number 55 [ 2281.041903][T12560] device pim6reg1 entered promiscuous mode [ 2281.067232][T12562] device wg2 left promiscuous mode [ 2281.087341][T12562] device wg2 entered promiscuous mode [ 2281.209185][T12579] device veth1_macvtap left promiscuous mode [ 2281.220617][T12579] device macsec0 entered promiscuous mode [ 2281.618412][T12598] device wg2 left promiscuous mode [ 2281.626676][T12598] device wg2 entered promiscuous mode [ 2281.821342][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15088'. [ 2282.488372][T12633] device pim6reg1 entered promiscuous mode [ 2282.622886][ T403] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 2282.810185][ T403] usb 9-1: not running at top speed; connect to a high speed hub [ 2282.852313][ T403] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 2282.986919][ T403] usb 9-1: config 95 has no interface number 0 [ 2282.993277][ T403] usb 9-1: config 95 interface 1 has no altsetting 0 [ 2283.003638][ T403] usb 9-1: string descriptor 0 read error: -22 [ 2283.010089][ T403] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2283.019474][ T403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.224410][ T403] usb 9-1: USB disconnect, device number 56 [ 2283.519786][T12669] device pim6reg1 entered promiscuous mode [ 2284.278309][T10664] Bluetooth: hci0: Frame reassembly failed (-84) [ 2284.298643][T12700] netlink: 'syz.8.15127': attribute type 4 has an invalid length. [ 2284.349261][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15132'. [ 2285.376918][T12739] device veth1_macvtap left promiscuous mode [ 2285.383073][T12739] device macsec0 entered promiscuous mode [ 2285.770438][T12754] device pim6reg1 entered promiscuous mode [ 2285.835275][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 2285.835289][ T28] audit: type=1326 audit(1750958900.491:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.4.15151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2285.865011][ T28] audit: type=1326 audit(1750958900.491:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.4.15151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2285.888745][ T28] audit: type=1326 audit(1750958900.491:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.4.15151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2285.923544][ T28] audit: type=1326 audit(1750958900.491:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.4.15151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2285.962081][ T28] audit: type=1326 audit(1750958900.491:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.4.15151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2286.090561][T32108] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2288.624744][ T28] audit: type=1400 audit(1750958903.484:5525): avc: denied { map } for pid=12815 comm="syz.8.15172" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=160272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2288.687728][ T28] audit: type=1400 audit(1750958903.517:5526): avc: denied { write } for pid=12815 comm="syz.8.15172" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=160272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2290.828932][ T28] audit: type=1326 audit(1750958905.834:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.4.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2290.856624][ T28] audit: type=1326 audit(1750958905.834:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.4.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2291.283448][ T28] audit: type=1326 audit(1750958905.834:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.4.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2291.421161][ T4838] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2291.421293][ T28] audit: type=1326 audit(1750958905.834:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.4.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2291.475015][ T28] audit: type=1326 audit(1750958905.834:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.4.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2291.725611][T12880] device pim6reg1 entered promiscuous mode [ 2291.776982][ T4838] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2291.794448][ T4838] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2291.822163][ T4838] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2291.832679][ T4838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2291.841548][ T4838] usb 9-1: SerialNumber: syz [ 2291.962224][ T28] audit: type=1326 audit(1750958907.079:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.4.15198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2291.985927][ T28] audit: type=1326 audit(1750958907.079:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.4.15198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2292.011568][ T28] audit: type=1326 audit(1750958907.079:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.4.15198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2292.035363][ T28] audit: type=1326 audit(1750958907.079:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.4.15198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2292.059200][ T28] audit: type=1326 audit(1750958907.079:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.4.15198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2292.085025][ T4838] usb 9-1: 0:2 : does not exist [ 2292.101778][ T4838] usb 9-1: USB disconnect, device number 57 [ 2292.148959][T12901] syz.2.15203[12901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2292.149030][T12901] syz.2.15203[12901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2292.185986][T12906] device pim6reg1 entered promiscuous mode [ 2292.215530][T12908] device pim6reg1 entered promiscuous mode [ 2292.223874][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15200'. [ 2292.656434][T12928] SELinux: security policydb version 18 (MLS) not backwards compatible [ 2292.665110][T12928] SELinux: failed to load policy [ 2292.718599][T12937] device pim6reg1 entered promiscuous mode [ 2293.696700][T12978] device pim6reg1 entered promiscuous mode [ 2293.736784][T12985] netlink: 'syz.6.15240': attribute type 4 has an invalid length. [ 2293.742767][ T6] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2294.289557][ T6] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2294.386775][ T6] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2294.487399][ T6] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2294.498586][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2294.528070][ T6] usb 9-1: SerialNumber: syz [ 2295.102865][T13016] netlink: 100 bytes leftover after parsing attributes in process `syz.6.15248'. [ 2295.263180][ T6] usb 9-1: 0:2 : does not exist [ 2295.279362][ T6] usb 9-1: USB disconnect, device number 58 [ 2295.308949][T13023] device pim6reg1 entered promiscuous mode [ 2295.364431][T13025] netlink: 'syz.7.15253': attribute type 4 has an invalid length. [ 2295.411344][T13032] device pim6reg1 entered promiscuous mode [ 2295.914101][T13052] syz.2.15261[13052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2295.914340][T13052] syz.2.15261[13052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2296.630656][T13054] usb usb1: usbfs: process 13054 (syz.8.15264) did not claim interface 63 before use [ 2296.740838][T13057] netlink: 'syz.8.15265': attribute type 4 has an invalid length. [ 2296.871174][T13067] device pim6reg1 entered promiscuous mode [ 2296.887522][T13055] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.894683][T13055] bridge0: port 1(bridge_slave_0) entered disabled state [ 2296.902131][T13055] device bridge_slave_0 entered promiscuous mode [ 2296.909084][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.917270][T13055] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.928077][T13055] device bridge_slave_1 entered promiscuous mode [ 2297.175921][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 2297.182990][T13055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2297.190365][T13055] bridge0: port 1(bridge_slave_0) entered blocking state [ 2297.197414][T13055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2297.215786][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2297.229931][ T948] bridge0: port 1(bridge_slave_0) entered disabled state [ 2297.238420][ T948] bridge0: port 2(bridge_slave_1) entered disabled state [ 2297.285155][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2297.293556][ T948] bridge0: port 1(bridge_slave_0) entered blocking state [ 2297.300622][ T948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2297.308354][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2297.316991][ T948] bridge0: port 2(bridge_slave_1) entered blocking state [ 2297.324074][ T948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2298.165729][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2298.174996][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2298.185484][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2298.195123][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2298.203384][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2298.211868][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2298.223052][T13055] device veth0_vlan entered promiscuous mode [ 2298.236097][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2298.252153][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2298.274068][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2298.284455][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2298.292168][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2298.301426][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2298.310586][T24540] Bluetooth: hci0: Frame reassembly failed (-84) [ 2298.311754][T13055] device veth1_macvtap entered promiscuous mode [ 2298.323392][T24540] Bluetooth: hci0: Frame reassembly failed (-84) [ 2298.334232][T13109] device pim6reg1 entered promiscuous mode [ 2298.348613][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2298.357328][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2298.366014][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2298.376958][ T8] device bridge_slave_1 left promiscuous mode [ 2298.383134][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.391492][ T8] device bridge_slave_0 left promiscuous mode [ 2298.397710][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.417699][ T8] device veth0_vlan left promiscuous mode [ 2299.345178][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15287'. [ 2299.414648][T13116] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2299.416820][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2299.424030][T13116] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2299.432378][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2300.191957][T12698] Bluetooth: hci0: command 0x1003 tx timeout [ 2300.191985][T32108] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2300.643569][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 2300.643584][ T28] audit: type=1400 audit(1750958916.381:5559): avc: denied { ioctl } for pid=13150 comm="syz.2.15297" path="socket:[162883]" dev="sockfs" ino=162883 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2301.517297][T13190] device pim6reg1 entered promiscuous mode [ 2301.800396][T13208] syz.6.15319[13208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2301.800713][T13208] syz.6.15319[13208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2302.577228][ T6] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 2302.680774][T13219] 9pnet_fd: Insufficient options for proto=fd [ 2302.753277][T13225] device pim6reg1 entered promiscuous mode [ 2302.774585][ T6] usb 5-1: not running at top speed; connect to a high speed hub [ 2302.793033][ T6] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 2302.801235][ T6] usb 5-1: config 95 has no interface number 0 [ 2302.816290][ T6] usb 5-1: config 95 interface 1 has no altsetting 0 [ 2302.825661][ T6] usb 5-1: string descriptor 0 read error: -22 [ 2302.833604][ T6] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2302.844835][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.016163][T31515] Bluetooth: hci0: command 0x1003 tx timeout [ 2303.016200][T13139] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2303.821586][T13245] netlink: 'syz.6.15334': attribute type 4 has an invalid length. [ 2303.878709][ T6] usb 5-1: USB disconnect, device number 62 [ 2303.935708][T13254] device wg2 left promiscuous mode [ 2303.950708][T13254] device wg2 entered promiscuous mode [ 2304.213375][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15335'. [ 2304.228812][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15333'. [ 2304.340093][T11941] udevd[11941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2305.261615][T13280] netlink: 'syz.4.15347': attribute type 2 has an invalid length. [ 2306.159585][T13297] device pim6reg1 entered promiscuous mode [ 2306.348610][T13326] netlink: 'syz.8.15367': attribute type 4 has an invalid length. [ 2306.381518][T13329] device pim6reg1 entered promiscuous mode [ 2306.411114][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15358'. [ 2306.428833][ T28] audit: type=1400 audit(1750958922.593:5560): avc: denied { write } for pid=13332 comm="syz.7.15370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2306.562095][ T28] audit: type=1400 audit(1750958922.732:5561): avc: denied { mount } for pid=13349 comm="syz.8.15378" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2306.593695][ T28] audit: type=1400 audit(1750958922.764:5562): avc: denied { unmount } for pid=13349 comm="syz.8.15378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2306.644950][T13361] device pim6reg1 entered promiscuous mode [ 2306.858754][ T28] audit: type=1400 audit(1750958923.054:5563): avc: denied { watch watch_reads } for pid=13376 comm="syz.6.15391" path="/20" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2307.383955][ T28] audit: type=1326 audit(1750958923.612:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13395 comm="syz.4.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2307.407892][ T28] audit: type=1326 audit(1750958923.612:5565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13395 comm="syz.4.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2307.439328][ T28] audit: type=1326 audit(1750958923.612:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13395 comm="syz.4.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2307.467516][ T28] audit: type=1326 audit(1750958923.612:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13395 comm="syz.4.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2307.491233][ T28] audit: type=1326 audit(1750958923.666:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13395 comm="syz.4.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2307.515083][ T28] audit: type=1326 audit(1750958923.676:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13395 comm="syz.4.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdcfd18e929 code=0x7ffc0000 [ 2307.521837][T13407] device pim6reg1 entered promiscuous mode [ 2307.658154][T13416] device pim6reg1 entered promiscuous mode [ 2307.784182][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15409'. [ 2307.825311][ T6] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2307.986186][ T6] usb 9-1: device descriptor read/64, error -71 [ 2308.208252][T13435] netlink: 'syz.6.15416': attribute type 4 has an invalid length. [ 2308.227440][T13437] device pim6reg1 entered promiscuous mode [ 2308.244726][ T6] usb 9-1: device descriptor read/64, error -71 [ 2308.267121][T13441] device pim6reg1 entered promiscuous mode [ 2308.354353][T13447] device pim6reg1 entered promiscuous mode [ 2308.491544][T13461] netlink: 'syz.4.15429': attribute type 4 has an invalid length. [ 2308.499889][ T6] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2308.530972][T13470] device pim6reg1 entered promiscuous mode [ 2308.566384][T13469] device pim6reg1 entered promiscuous mode [ 2308.688610][ T6] usb 9-1: device descriptor read/64, error -71 [ 2308.920592][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15441'. [ 2308.943827][ T6] usb 9-1: device descriptor read/64, error -71 [ 2309.055880][ T6] usb usb9-port1: attempt power cycle [ 2309.422066][T13497] device wg2 entered promiscuous mode [ 2309.437783][ T6] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2309.467451][ T6] usb 9-1: device descriptor read/8, error -71 [ 2309.606744][ T6] usb 9-1: device descriptor read/8, error -71 [ 2309.991227][ T6] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2310.035347][ T6] usb 9-1: device descriptor read/8, error -71 [ 2310.174632][ T6] usb 9-1: device descriptor read/8, error -71 [ 2310.185634][T13530] device wg2 left promiscuous mode [ 2310.193677][T13530] device wg2 entered promiscuous mode [ 2310.286135][ T6] usb usb9-port1: unable to enumerate USB device [ 2310.557538][T13566] device pim6reg1 entered promiscuous mode [ 2310.783617][T13600] device wg2 left promiscuous mode [ 2310.791190][T13600] device wg2 entered promiscuous mode [ 2310.827075][ T6] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2311.016448][ T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2311.026678][ T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2311.038253][ T6] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2311.048031][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2311.056547][ T6] usb 7-1: SerialNumber: syz [ 2311.255553][ T6] usb 7-1: 0:2 : does not exist [ 2311.270750][ T6] usb 7-1: USB disconnect, device number 67 [ 2311.416091][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 2311.416105][ T28] audit: type=1400 audit(1750958927.946:5606): avc: granted { setsecparam } for pid=13648 comm="syz.2.15513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2312.152978][T13662] netlink: 'syz.6.15518': attribute type 4 has an invalid length. [ 2312.404138][T13670] device pim6reg1 entered promiscuous mode [ 2313.136864][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15530'. [ 2313.172908][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15527'. [ 2313.253165][T13703] device pim6reg1 entered promiscuous mode [ 2313.286699][ T28] audit: type=1400 audit(1750958929.942:5607): avc: denied { unmount } for pid=11904 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2313.493081][ T28] audit: type=1400 audit(1750958930.178:5608): avc: denied { write } for pid=13727 comm="syz.2.15546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2314.062080][T13738] device pim6reg1 entered promiscuous mode [ 2315.096100][T13783] device pim6reg1 entered promiscuous mode [ 2315.189018][T13788] netlink: 3 bytes leftover after parsing attributes in process `syz.7.15567'. [ 2315.581122][T17291] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2315.600518][T13803] device wg2 left promiscuous mode [ 2315.618232][T13803] device wg2 entered promiscuous mode [ 2315.766533][T17291] usb 7-1: Using ep0 maxpacket: 16 [ 2315.806005][T17291] usb 7-1: config 0 has no interfaces? [ 2315.868676][T17291] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 2315.945322][T17291] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.953638][T17291] usb 7-1: Product: syz [ 2315.957883][T17291] usb 7-1: Manufacturer: syz [ 2315.962681][T17291] usb 7-1: SerialNumber: syz [ 2315.968515][T17291] usb 7-1: config 0 descriptor?? [ 2316.170131][ T7573] usb 7-1: USB disconnect, device number 68 [ 2316.344296][ T6] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2316.484131][ T6] usb 9-1: device descriptor read/64, error -71 [ 2316.736824][ T6] usb 9-1: device descriptor read/64, error -71 [ 2316.787109][T13843] syz.6.15589[13843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2316.787424][T13843] syz.6.15589[13843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2318.223764][T13862] 9pnet_fd: Insufficient options for proto=fd [ 2318.463923][ T28] audit: type=1400 audit(1750958935.500:5609): avc: denied { bpf } for pid=13875 comm="syz.6.15603" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2318.486930][ T28] audit: type=1400 audit(1750958935.500:5610): avc: denied { prog_load } for pid=13875 comm="syz.6.15603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2318.513367][ T28] audit: type=1400 audit(1750958935.500:5611): avc: denied { map_create } for pid=13875 comm="syz.6.15603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2318.534707][ T6] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2318.542662][ T28] audit: type=1400 audit(1750958935.500:5612): avc: denied { map_read map_write } for pid=13875 comm="syz.6.15603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2318.563286][ T28] audit: type=1400 audit(1750958935.500:5613): avc: denied { perfmon } for pid=13875 comm="syz.6.15603" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2318.594723][ T28] audit: type=1400 audit(1750958935.500:5614): avc: denied { prog_run } for pid=13875 comm="syz.6.15603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2318.623537][ T28] audit: type=1400 audit(1750958935.510:5615): avc: denied { read } for pid=13878 comm="syz.2.15604" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2318.648334][ T28] audit: type=1400 audit(1750958935.510:5616): avc: denied { open } for pid=13878 comm="syz.2.15604" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2318.706013][ T28] audit: type=1400 audit(1750958935.510:5617): avc: denied { ioctl } for pid=13878 comm="syz.2.15604" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2318.734009][T13897] syz.6.15606[13897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2318.734314][T13897] syz.6.15606[13897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2319.259444][ T28] audit: type=1400 audit(1750958935.510:5618): avc: denied { name_bind } for pid=13874 comm="syz.7.15602" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2319.297305][ T6] usb 9-1: device descriptor read/64, error -71 [ 2320.018451][T13980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15648'. [ 2320.204719][T13990] 9pnet: Could not find request transport: rdma [ 2540.802274][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 236s! [ 2540.811297][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 235s! [ 2540.820171][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 232s! [ 2540.829227][ C0] Showing busy workqueues and worker pools: [ 2540.835125][ C0] workqueue events: flags=0x0 [ 2540.839809][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 2540.839852][ C0] pending: psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 2540.839952][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=9/256 refcnt=10 [ 2540.839987][ C0] pending: kfree_rcu_monitor, vmstat_shepherd, jump_label_update_timeout, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 2540.840107][ C0] workqueue events_long: flags=0x0 [ 2540.895960][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 2540.896011][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work [ 2540.896092][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=10/256 refcnt=11 [ 2540.896129][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 2540.896266][ C0] workqueue events_unbound: flags=0x2 [ 2540.951650][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 2540.951693][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 2540.951741][ C0] workqueue events_power_efficient: flags=0x80 [ 2540.972733][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 2540.972784][ C0] pending: neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker, reg_check_chans_work, check_lifetime [ 2540.972908][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2540.972942][ C0] pending: wg_ratelimiter_gc_entries [ 2540.972972][ C0] workqueue events_freezable_power_: flags=0x84 [ 2541.014743][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.014791][ C0] pending: sync_hw_clock [ 2541.014822][ C0] workqueue mm_percpu_wq: flags=0x8 [ 2541.032351][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.032400][ C0] pending: vmstat_update [ 2541.032433][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.032475][ C0] pending: vmstat_update [ 2541.032506][ C0] workqueue writeback: flags=0x4a [ 2541.061963][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.062007][ C0] pending: wb_workfn [ 2541.062033][ C0] workqueue kblockd: flags=0x18 [ 2541.078323][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 2541.078374][ C0] pending: blk_mq_timeout_work [ 2541.078412][ C0] workqueue dm_bufio_cache: flags=0x8 [ 2541.096691][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.096738][ C0] pending: work_fn [ 2541.096772][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 2541.114075][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 2541.114120][ C0] pending: addrconf_verify_work [ 2541.114154][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 2541.114207][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 2541.114242][ C0] pending: addrconf_verify_work [ 2541.114272][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 2541.114325][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2541.158970][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 2541.159010][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 2541.159093][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2541.183779][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.183823][ C0] pending: wg_packet_encrypt_worker [ 2541.197006][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2541.202021][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.202058][ C0] pending: wg_packet_handshake_send_worker [ 2541.202095][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2541.220447][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.220485][ C0] pending: wg_packet_handshake_send_worker [ 2541.220522][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2541.239127][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.239170][ C0] pending: wg_packet_encrypt_worker [ 2541.239205][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2541.257371][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.257409][ C0] pending: wg_packet_handshake_send_worker [ 2541.257446][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2541.276047][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.276099][ C0] pending: wg_packet_encrypt_worker [ 2541.276130][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.276166][ C0] pending: wg_packet_encrypt_worker [ 2541.276200][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2541.307549][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2541.307592][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2541.307655][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2541.328866][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.328905][ C0] pending: wg_packet_handshake_send_worker [ 2541.328941][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2541.347564][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.347605][ C0] pending: wg_packet_encrypt_worker [ 2541.347632][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.347667][ C0] pending: wg_packet_encrypt_worker [ 2541.347691][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2541.378985][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.379024][ C0] pending: wg_packet_handshake_send_worker [ 2541.379061][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2541.397395][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.397431][ C0] pending: wg_packet_handshake_send_worker [ 2541.397466][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2541.416150][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.416196][ C0] pending: wg_packet_encrypt_worker [ 2541.416223][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2541.434388][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.434422][ C0] pending: wg_packet_handshake_send_worker [ 2541.434458][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2541.453074][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.453122][ C0] pending: wg_packet_encrypt_worker [ 2541.453152][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.453195][ C0] pending: wg_packet_encrypt_worker [ 2541.453221][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2541.484538][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.484576][ C0] pending: wg_packet_handshake_send_worker [ 2541.484614][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2541.503243][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.503289][ C0] pending: wg_packet_encrypt_worker [ 2541.503318][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2541.521475][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2541.521514][ C0] pending: wg_packet_handshake_send_worker [ 2541.521550][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2541.540180][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.540227][ C0] pending: wg_packet_encrypt_worker [ 2541.540258][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2541.540294][ C0] pending: wg_packet_encrypt_worker [ 2541.540325][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2541.571775][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2541.571820][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker