last executing test programs: 13.812512911s ago: executing program 4 (id=156): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0, 0x0, 0x0, 0x300}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) readv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/177, 0xb1}], 0x5) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r4 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x20, 0xfc, [{{0x9, 0x4, 0x0, 0x4b, 0x1, 0x7, 0x1, 0x1, 0xfb, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x76, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x55, 0x70}}]}}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x8, 0x1, 0xf, 0x10, 0xd}, 0x139, &(0x7f0000001640)={0x5, 0xf, 0x139, 0x3, [@generic={0x96, 0x10, 0x3, "0db2ae50496c0fe9714bea4c40414b5ba4216d09f9b9ad30127478d7df3061da62f30b5e4b7ef0ddf0930ed7ded169dbae9338036268149a78bbbaade09f28d3ed2b357cca3c1a1684d34bc0575cb55a27a7f9b97003a9713c1ab14bcf583abd759b4fae766680dc52b63603d459ae064eb4e9becc6dbe3cdd89d68070f3ad2aa28ec8c43cc3060a7b3e6333f11e9acc91e0a4"}, @generic={0x97, 0x10, 0x3, "a88d3fe2f12fd0cd96639d6d0d04da0685b139282b3258b3951e32ff06c4a634b2f24f1b49575b0388fd4203a1877165aa9f501f0efba8bf13542e5396217c00a44d4f2bbc96ac7c962b59ba1fc264612478876980f00d4df928eb5275921ec99149aa3d5d87402ed6514ce2716f79c6a1a1f7e662feae1a4ea79533c290265eb8677ec8831dda13da4bfac76712dfd9ed7aa368"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0xf, 0x7ff}]}, 0x8, [{0x81, &(0x7f0000001780)=ANY=[@ANYBLOB="8103c74101059577e85aaf00aabfabec23c768f38b9549c60ccc923af5824e56e4ca43e03571364a3f0d5bf213d998de4f78b5f74aedc691c956067baafff9b199488a058aab9a27a687f47f74b52d0df014db9ec37073e6b57ad5b25198a19e7dfc1303919cc0a15a69e273336466aa8559b13ebbf5"]}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x2001}}, {0x20, &(0x7f0000001880)=@string={0x20, 0x3, "2dcaf1aa857da163056842d63ae6b59c7ad2c9d26f4404f6b4019b6bf67f"}}, {0xe1, &(0x7f00000018c0)=@string={0xe1, 0x3, "d98b2d2213a5ee04c893eb32102866028bd783c3e45aac796d840f14a3e3799c3ffa5c123495bf1a465269f864913e258d9ce9421e58d3dffff9b44d4f38979cc44c0cf64d77f9d41889097a5844a7cc25740d745f27ea40c70ea99ed989341d516a5d0695164f132c4e46d7c244ffd06eb4b8659a54d9dc6c63747a27e62e854553cecc47c2bad6ef0d4f08b31bbbef2a173b00f2eaf071b2f7cd65ba9c4331b0268a36ccb0cc5d504a03f7dc01ae9c792d2631b76250f54f0e3fcc2072f07102000f071f594ec9399571195061b8975cf10b1038cf47ea19470155d48f09"}}, {0x14, &(0x7f00000019c0)=@string={0x14, 0x3, "01c1007fe2f79b42e57f92eb0d6fe423e28f"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x1404}}]}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000100)={'veth0_vlan\x00', 0x8a}) sendmsg$NFT_BATCH(r5, &(0x7f0000001fc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000001f80)={&(0x7f0000003000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0xac, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x17a}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff6}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x138}, 0x1, 0x0, 0x0, 0x45}, 0x80) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$printer(r4, &(0x7f0000001c80)={0x14, &(0x7f0000001b40)={0x0, 0x9, 0xf0, {0xf0, 0x2, "588422fb93f2f7b75d19f5daf3cc1b3f5d3477b088b09b1548243c8f196b0edc55d36e74a5ff1ae192e272ddc8a5d8cbd56a0a59b4d310b499bb154bb58de75ac5f3fd03db7f0d760e3815cfb16afb9f56c19113f01b0d524fd5bf4951bf0444319ebbc1810868e9a2b737ed7c3c837567b328662adb8c06c01c00e8bc6f12690cf0c331fbaac22694e347d9199965e1b4ffa209efd28d24405d4449acb81494f1ce63e6c2ec518c02595b251949f81f56dc8b99d54b98b3ade5f35057f3d1623a843a70dfb127ab53cb70f5d05b88eec691d7e0d8cbabda0ab3f847d088494b050a8e91c2e86c73115fc39df214"}}, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f0000001f40)={0x34, &(0x7f0000001cc0)={0x0, 0xd, 0xce, "54e624da326e666215face8c45c3b5af20158522f759a13cb6cb3396e9d0bfd3c5853e954e0ac8e039cec10cbbcf134598aaa85a5b9b95b35bb5e222cc9b8ccc71d501d8c9af452e7347426ec933d55f8d86e836eca774789a10989395c4a719c445a02894fe87ee8ed01b5c8555c45f77f024bae599a70e3054202f9a95575467addcb47a1323a384680ddf09e70c3d2479ccac53ee69f2b957544d78c150217b0e4ca7c85bc14292c8a14f42ce63a71d1ca9bd8530505c700d148ab49dd1fbc240ff13fc32c739f239c21c9eb5"}, &(0x7f0000001dc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001e00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001e40)={0x20, 0x0, 0x5d, {0x5b, "c345795f7989a4459268ee0bbada837d9c3816a8555591889fea1b108a8ce9cea9774760d708ee777fd816acc211ca08c68cab5112e9573e2b9426febf0705dec4140b9fc86717daf78763da8bd5b93557e950a2ca60c82314e0f6"}}, &(0x7f0000001ec0)={0x20, 0x1, 0x1}, &(0x7f0000001f00)={0x20, 0x0, 0x1, 0x9}}) 11.164705521s ago: executing program 3 (id=164): accept$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3f}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x176}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c8}, 0x400c3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095", @ANYRES8, @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "5ac5a9c5f0617295", "01ea8b275be257b91fca01d113de6db0", "33915b02", "b3f5d686491c5629"}, 0x28) 10.872123046s ago: executing program 4 (id=165): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000200)={{}, r0, 0x8, @unused=[0x3ff, 0x100, 0x8000000, 0x1], @subvolid=0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000001200)={0x80, 0x81, 0x1, 'queue1\x00', 0x3ff}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000001400)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000001800)={0x1ff, "e7591a68d8882c14d3aa0f04cdee2722fb77c98e626ba7a7822d6fae3ca88949", 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001880), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_clone3(&(0x7f00000040c0)={0x1c000, &(0x7f0000002f00), &(0x7f0000002f40), &(0x7f0000002f80)=0x0, {0x4}, &(0x7f0000002fc0)=""/148, 0x94, &(0x7f0000003080)=""/4096, &(0x7f0000004080)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x6, {r1}}, 0x58) r7 = getpgid(0x0) r8 = fcntl$getown(r4, 0x9) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000049c0)={'\x00', 0x8, 0x6, 0x0, 0xfffffffffffffffb, 0x7, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004a40)={{{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000004b40)=0xe8) getgroups(0x5, &(0x7f0000004b80)=[0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) read$FUSE(r1, &(0x7f0000004bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006c00)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000006d00)=0xe8) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000006d80)=@generic={&(0x7f0000006d40)='./file0\x00', 0x0, 0x18}, 0x18) r15 = open$dir(&(0x7f0000006dc0)='./file0\x00', 0x80000, 0x124) read$FUSE(r1, &(0x7f0000006e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000008e40)={{0x1, 0x1, 0x18, r4, {0xee00}}, './file0\x00'}) r19 = getgid() sendmsg$netlink(r4, &(0x7f0000008f00)={&(0x7f0000001980)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000004940)=[{&(0x7f00000019c0)={0x1204, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x4, 0x56}, @nested={0x1f0, 0x33, 0x0, 0x1, [@generic="ea089d5ad89bc5345c33c9369f9a366e15bc54173b241e002f67b5dfe68ffcf81252136bb5765c5759dcc913ce0729ba09cf6cdc8bac2735a69a0a927ff3d6c0626dc20782fe21d303e349696513bd0df955fea198360d998b305a9f07efd4c3a89b96391d588111d38fd19bfd6b84241cdb4f32b771c13bcd0059fb06ffdd2ed622956563c869ddc54c4fb4c58612d1107103ec1f0f4c5070c89d31b55f86652c348c", @nested={0x4, 0xf5}, @generic="ec5d749d50655d8ccfca3b572b3d23e6b2c1d96b6af6dc6d31fc06d304a2fc1542bfb7a4400476b2cbc53e5c573aac6ef801075f9770faeb2c37927df6e5d2b664745e4ccd5d6130", @nested={0x4, 0x2f}, @generic="3576e63bc5f7be1ad0a91a49f61d1bce7f91a2f5e76d55b6dd508e20482cf3c11c1782464ef319367f5a98034fc36d0256422c825899d9f010daaf5a066d82acc7dc81eb08da9fd62133f0e75489c2bd18183cb89320c4167b61895703578657ab816545cd234f0bf0065a5a9d085dc95b545783439b9c83762efd7d18f76ff1c93c9118c829502c8a02be7bafcd3c5196f299f65fb892743af40ce9cc7b817af4f7f3f60de0f20810af16ec203ca389cce668370da25709e64a48a43246670070e340ee", @generic="34bba3286b0b34f641e5ba7f473c7551b94f210e1eef7590021a94e0ed5cd008", @typed={0x8, 0x21, 0x0, 0x0, @fd=r1}, @generic="c92c7a697dc56065e56c5e3f86"]}, @generic="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"]}, 0x1204}, {&(0x7f0000002c00)={0x198, 0x2c, 0x200, 0x70bd25, 0x25dfdbfc, "", [@nested={0x187, 0xfd, 0x0, 0x1, [@typed={0x4, 0x40}, @generic="0d08e83eac05f68459c6431e8ecf7ea31c18d1ded84de538e464d4f54774b67c6ab3c4f99327a85f5d353d87703a5e84b1c652be98f307ff4270c8b3a6eb5e89bacf4ccc836457dd8302764ea4778c9afce23d538b69c230ba866210a82530b4373237e4aea47e921df4c63580c2e8a02b810eee8bc234de29e0ddae8a37b1576109a22d971acefaff7b85e1006f71e16111f4aeaa15f9d3541d0bd2111af94791f786c7c591bc7ec68288ca5945e6b10f9c73592059", @generic="5a7ff0afb92470f1a5f2aa254570d203f0c2d8fcd602d5fc8788a27418fcf4860da44eb34f5668fb813a09afdf1e8a05bbc28e67b0d93b473ec316ec86261516d29b4d36920b7e9a32d22ed02c11f91c5636df9b8dfb06172e0e3df7a2beba3dcba246685f57e7600ccbbc6a874f112a8bae18d2b6cc313f3f026b6dcb6d7811", @nested={0x4, 0x12f}, @generic="272631679d1f64f6385a3b8bcc225d6400202a444a5790f9c8bcd467fb7a01d7fc74aa7a51fc0222750cc91f5ca52a2a2a53bec1f8582deb5c2c7062ddc4e7b9b7a12887af"]}]}, 0x198}, {&(0x7f0000002dc0)={0x140, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x12f, 0x14d, 0x0, 0x1, [@generic="86c730a70e39808af5c9f6a358d37521f330f3e07d0f585dec0d4b09f65c539a428db5542564a654697b1f2e71958145c3f467f6f7583d59c5ea87e4982cd2c419cc9d40b1cbed95105a13cd4b357ab9efb97a2597183587bf7fdb04565c04a3c24333a323061f1633546ad81caa995345549713d8ee1545bb7cb517b3cbb5e1861ac1f05b872b720c04fb03c9d9484f", @typed={0x8, 0x54, 0x0, 0x0, @u32=0x800}, @generic="8ff0a9e7667061d8a10ab99fdfded5cd43e961f7bcafc71c0833717eb9da68b19a8d1d45a91f7faaf42078621f35b06d5e8d871169b60da0b0a58684affcf7f3737a1cf493ac5222e5fcebdb8fdd485626cddd42b230ff0c000b2d57cfa5a2bcb7ad15d2e999bab5638cc565f01084bcc3b83b4d2aff45866b8ff0ee306e665e0fc7ce", @nested={0x4, 0x14a}, @typed={0x9, 0xc3, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}]}]}, 0x140}, {&(0x7f0000004140)={0x18, 0x40, 0x400, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0xa0, 0x0, 0x0, @pid=r6}]}, 0x18}, {&(0x7f0000004180)={0x1e8, 0x2d, 0x300, 0x70bd26, 0x25dfdbff, "", [@generic="bd01a11ed944d5a60cd51f68d282fad0f67b79a66dffd4f5e726c5698a4caac826e44b67230efe2d86b511bbe96ed53d69ee695d98e23db790cdb23debfc295007a4043b4d7a35691be720c5b41f41216aefe3405823c0fa2182d2f2c2b75b31402d706faf24a48c35164ff11da33a7a3fcd0119d69d71c0e09313aa550befa5efc724eb8ccac181946a1d6dd9c651ab12c01bb0a5db5c1fad8dd108a4dce25f783dce179057ea6450b19a2ddbd275330a70c48b3b8d8b353a2df0ca528f70f7abfe1f42b269631dd571887cf1dea35aa2335b766baaeac76714", @nested={0xb0, 0x14d, 0x0, 0x1, [@typed={0x6, 0x57, 0x0, 0x0, @str='{\x00'}, @typed={0x9b, 0x7a, 0x0, 0x0, @binary="8d07c79f2ce3e6641519b0ecd744b2351da76298db880bf2ae40479e21adebab6a8398bf4f8c7f7fea079e2889bffc1726b36c5cd0d91c9ede2c3c956be666c8b1e40b5df044355f9d8db88eccc9458077d48146ee7d7a4169271478955ac2fed81704b629f1de765eae4738e3d23c18f4f869be9aaf6a2bf7c5063d218b099889079ccf88339b16c749272a8c286be71bb015d5f9a380"}, @typed={0x8, 0x74, 0x0, 0x0, @pid=r7}]}, @generic="bae54817fa58069f1a840657cca79592d8e2b11a6bbb929f7b89774de357d644b30ab06951523a5f84b37fa31bad1ef76694b2ed42368be1a888ff9f9b8c6cfa9bcbd3e79aaa", @generic="4cc35ae6f898"]}, 0x1e8}, {&(0x7f0000004380)={0x378, 0x14, 0x800, 0x70bd28, 0x25dfdbfe, "", [@nested={0x25b, 0x19, 0x0, 0x1, [@generic="b722c501ef1cd3b5ebde13d130c884791a9ee6777fe47de769a97fe17db94455ea851e6b34a3038118f25a8ac3238617898fe7fa8f2ab87952bd72b6fee7c59c2318d2848d9b62fc405f8ccc98ddf1e10881f0acf6c97387f26534b1c5eb2ce37a861227b578728b1fec624f2e0c9ce1fc6d217f6ae4af0341d658b66bc454d13fcbe19ab2cddcb24c8fa67507d54df60f02f90024c0fab34931d0f6785ffb181a0122b38538c8a9d5", @nested={0x4, 0x8a}, @typed={0x8, 0x4f, 0x0, 0x0, @u32=0xd}, @generic="8e7546f93999cd765fe12da53b9772d538a4e54179b3253888087eca69a2be02c24bbdf4752fba655a5a9d75d3318dc9a0b99ea3528d71430c1a82e103f83dee3b16219ba48846028be4bdf70dd6cfb4e293c69c4c86653579fa177185af08d663c7e1cf5e05d75c631d69c0aae4b1cee396b5d2c65e27b195e53b953b12110dff357ed1cd3b4ca29181a5c115699c3066e837bb1e1d9eecd712bf7a58934f5679e72488b99c0953dc6c35f0460c65dae0c97076c3f575027b4168bdc607f8004a95e122031977afb4d6cac2d41b0a2a56e033", @nested={0x4, 0x109}, @nested={0x4, 0x53}, @generic="abff9b064dfdb761f5e280633c4e5ccb5ec4c060e6eb0a6032035b268632ffc9d1681ca656060a15f6b8bc1ac775bd36f079745329eb98465bbacb60eb2fe5d45e51a13ed43442598690aa0d644dde2583c829256d1d466e3b8f3a72af34ce452fc8d0e49e203b3f15b3fc26af91dfa881e763e9df8af6327efebc98659aecd408f07583cb880dd2818e9f35be3ed808db80a51ed53255a790563e472387e7767a97d96fa02789f0014e91ae545aadf37c6e602f6db0d5bc03156cbb90a6e4", @typed={0x8, 0xd, 0x0, 0x0, @pid=r8}]}, @typed={0x4, 0x107}, @nested={0x108, 0x1b, 0x0, 0x1, [@generic="3b6884ca7fefbd72a1cc516b43c390f8726421fa2da8a32efa2482754c64123f8f3224152f84b4b72bd641ccb52903387e8e704670f2f34c160c0ff6dc7c147abfee06e6", @generic="410699680e4003289404ebcce5a4c24ec8c9fc16a4b89bd42f19f81cb05fa857ae6df32dc591925282b5d319be3e16ded8ba08b6759429ccea29527db98c492a593d1b6b06063a63ce3dabd7ca3b", @generic="b7c738dbe93caa917065d27b3a43c127bfc6eb9d71c129267f2565b6aefa0a44b0cff28d324fa662317ca85e0227cbb9363af27d10842c1555ecd875f8b5028a80", @generic="92f1401a9cb9074b8653d716e627047255cd3b35f4219179e47d0428b9", @typed={0x14, 0x121, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x378}, {&(0x7f0000004700)={0x238, 0x13, 0x10, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x88, 0xeb, 0x0, 0x1, [@nested={0x4, 0x62}, @generic="fb94804a27b32cad56a153afeb67ecf2bf052abfdf9707f4e931fa77bddd104594610ea0f689ec17c4514c863b3664941de8eeb0c1728f5b9f892019cbf20cb635c29f99d63667f16a49a39bfc78080f67ba9b3e57e2e94d8989b6f32efca1a7600895fa56261020f5f86cafed359b4c1b4584c682eeb3e1e1850ab2640b47e2"]}, @typed={0xe0, 0xb8, 0x0, 0x0, @binary="4df9c43e0f5c02da3b5350301823773aac695b852cbe777e43ba795522ac6fb86be884a48d18bae0502cd13cbe42ac0dc53e2daac3ad358aed819d80add7eabc9331dd1eecb6c91fa7ad4731bc106cc8dd0715251eba01dfb9a4b097305dc13631a1058fedd4bd9ec245db46ee0cfc5f7cfaf8b7959a395e4ae27fdf017f4da327fa35f39d60d2b66b76bda5c90675aa190f8f20b92aac352cfb193378641f8ced62c5fdc038506cabb3f04f42e0bccdab2858e134f5fda79defa4d65e7727ffbdc75bf73b5c08a7173a8f866f357080a13a56d831b7b2e3107dbe7c"}, @nested={0xb8, 0x4c, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0xfa}, @generic="6bf155723befdd57bb3fe97a445cc4c12818807105f6d795ddc377fde1a07ef5f375f02b8345f2a915ef04e4a0d54712256766f3c9555c0a4712a0d2346e3bea0b0fed09e6e1fe9fb29a72aeb2d59ab060b44834679f3852e7b199ed62ce7617b74e30de2b0c46be743586dfe68b52ef3a1aaea52d487f933b1ca4562a778d710b1f76e8e8e9091b", @generic="ab55b78c3e4c54cb73ad014880008ee42a94aaa145786fb72ef6452950abebe11df37a00"]}]}, 0x238}], 0x7, &(0x7f0000008e80)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r14, r15, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r19}}}], 0x80, 0x44000}, 0x40000d0) r20 = accept$inet(r17, &(0x7f0000008f40)={0x2, 0x0, @loopback}, &(0x7f0000008f80)=0x10) setsockopt$inet_int(r20, 0x0, 0xc, &(0x7f0000008fc0)=0x5, 0x4) r21 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r21, &(0x7f00000094c0)={&(0x7f0000009000)=@ieee802154, 0x80, &(0x7f0000009240)=[{&(0x7f0000009080)="b14aa52072c01667a88f514b728539224f50562fa923543302a934d12e7a2fbc79f3dc02fd1ab29a8998b6b31ac19c38e45dbccfb7535eb0e9936fbb3e902f8205a040775077d56ad675e6c71d25e1", 0x4f}, {&(0x7f0000009100)="46ac498c65d4ef87146663941f7dce4379392f11a15a32a8d04c", 0x1a}, {&(0x7f0000009140)="2515fb7dc839f116f2f9ddd75b12a562f7b3e0eb25de2b1cf8a05c50fbebca9f65f2892d2ff203cc88cf367ca1d7e5512ce84da1489b9d05c3184b159f059059e392e11a30e6f66ee4030a7a9c02435c7505bf481ced0ed0e8d88d22", 0x5c}, {&(0x7f00000091c0)="043ca3d5b14dc323fe9becde9735226ac786aeb0d2430538d5fa08185eba75a88b073ce54d978cb766f720b349d246", 0x2f}, {&(0x7f0000009200)}], 0x5, &(0x7f00000092c0)=[{0xd0, 0x108, 0x5, "c500f05c357fede126424fb5c46f4a476707916170f04c829bc2200799e1839a3e0bf759ad6ada5c77a2f65e2aab44ed1c8aa1bd2a0e80f1620a689a6d5871eaed6c311500ab9b9befcb08b1dad5cb2e0b06f6820db57cf696ae116a0e1b1ce86c3879aa6f8c4ab761fb01befd11f8fba0ea43ca2c64a048bece63a340e6e1aaae1eb048ef17b4561bb9124b2d5ed086d73c2d3a92b343addf0a4981362dec15fffc0867d627e87548ce6513648704d297fab31be2ac5418e2ab226ab330"}, {0x40, 0x102, 0x7, "67e0ca7a8d69c12b497ec3d04fd46631edc69cf2fd0d45d293b3dd08c4d43385d9d89b8bec492a8227604e00955fb0"}, {0xc0, 0x117, 0xac, "c8e8356b035db624b0243a77eb477aa59aee27e2811aff9ad73d1b665bc32893c129fd819748c851c932ec57badd93f983b708f95927f62011b9aa814a2600f425396434343d8f05662e070d78fd3c1e7bbb201d5cb157749802254750682e5646d83d5fa04acab1bb9edf49971829b26c87728a6569fb859974b12bba97d8cea186fc1bf4a66fb8f712fc2472d93123508867682c2c85908832f47cf668ec2647803efdd013b3fad1959c91"}, {0x28, 0x108, 0x6, "a3000ee4b152d82fbd0fae99abe5452ed5a400420e42"}], 0x1f8}, 0x44800) 9.705045049s ago: executing program 1 (id=166): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket(0xa, 0x3, 0x3a) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async, rerun: 64) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000480)={0x2ec, 0x34, 0x400, 0x0, 0x0, "", [@nested={0x2da, 0x13d, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffffffffffc}, @generic="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", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc013529ec47d7f69f514408049fc119a74fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x2ec}], 0x1}, 0x94) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x81, 0x0) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) read$FUSE(r6, &(0x7f00000057c0)={0x2020}, 0x2020) (async) readv(r3, 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000652000/0x2000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x8, 0x6, 0x303, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4050) (async, rerun: 64) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000a, 0x10, r3, 0xfffff000) (rerun: 32) r7 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r7, 0xc0045103, &(0x7f0000000040)) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) 9.472605762s ago: executing program 1 (id=168): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004300)=""/102400, 0x19000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000034a565926c073c87eb00dd210000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000085000000500000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xfffffffffffffffe) 9.402683135s ago: executing program 4 (id=169): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r8], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000012c0)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="003170b70ecf3e52a900000000000000440012800e00010069703601fc7370616e00000030000280140006002001000000000000000000000000000214000700fc02000000d09a40d10d624ca80000009f461200"], 0x64}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="2004000000000000ff7f1b0000000000f30d"], 0x28}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 7.848449781s ago: executing program 3 (id=171): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f0000000080)=[{0x4, 0xff, 0x1800}, {0x4, 0x2, 0x800}, {0x1, 0x0, 0x1000}], 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x40800) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sysfs$2(0x2, 0x817fff, &(0x7f0000000300)=""/101) 7.848068135s ago: executing program 2 (id=172): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xcb6, 0x400, 0x0, 0x1bb}, &(0x7f0000000240)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x40}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000909"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r0, 0x8000000) sendmsg$NFT_BATCH(r6, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r3, 0x0, 0x0, 0x0, 0x80000, 0x0, {0x0, r7}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.664437348s ago: executing program 0 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x1e0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) read(r3, &(0x7f0000000800)=""/236, 0xec) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000002c0)="fc66b9400101c066b8b200000066ba000000000f30f4df1d0f070f01cb640f0018ba4300b000eeba6100b016ee2e0fae6ba4", 0x32}], 0x1, 0x7e, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x1e0) (async) openat$cgroup_int(r2, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) (async) read(r3, &(0x7f0000000800)=""/236, 0xec) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000002c0)="fc66b9400101c066b8b200000066ba000000000f30f4df1d0f070f01cb640f0018ba4300b000eeba6100b016ee2e0fae6ba4", 0x32}], 0x1, 0x7e, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 7.185189109s ago: executing program 1 (id=174): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1109, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x8a, 0x7, 0x956a, 0x49, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, 0x7800, 0x10, 0x80000001, 0xfffffff9}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x87c8}, 0x50) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = creat(&(0x7f0000000500)='./file0\x00', 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.events.local\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x23}, {}, {}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9be}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x6, 0xfffffff9, 0x878}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r3, r4, r5, r6, r7], &(0x7f00000005c0)=[{0x5, 0x5, 0x1, 0x5}, {0x0, 0x2, 0x9, 0xb}, {0x5, 0x2, 0x3, 0x1}], 0x10, 0x5}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000700)=""/139, &(0x7f00000007c0)=0x8b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xac}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x9f}]}, &(0x7f00000008c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', r2, 0x25, r7, 0x8, &(0x7f0000000900)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000940)=[{0x1, 0x2, 0x8}], 0x10, 0xfffffffa}, 0x94) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)) bind$llc(r7, &(0x7f0000000a80)={0x1a, 0x201, 0x9, 0x50, 0x8, 0x1, @multicast}, 0x10) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f0000000ac0)=0x61bd) read$msr(r5, &(0x7f0000000b00)=""/66, 0x42) connect$unix(r5, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r8, r3, &(0x7f0000000c00)=0x1, 0x1) r9 = pidfd_getfd(r7, r4, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, &(0x7f0000000c40)={0xfff, 0x9}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000dc0)={'veth1_macvtap\x00', &(0x7f0000000d80)=@ethtool_rxfh={0x47, 0x3ce2, 0x4, 0x1, 0x3, "f9912f", 0x2, [0x7, 0x7ff, 0xb6, 0x9, 0x2]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000e00)={0x73622a85, 0x100b, 0x1}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000e40)={0x0, 0x5}, &(0x7f0000000e80)=0x8) socketpair(0x21, 0x4, 0x1, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r10, 0x1, 0x1b, 0x0, 0x0) sync_file_range(r4, 0x0, 0x8, 0x6) r11 = syz_clone(0x1000000, &(0x7f00000022c0)="5bbbc825b3ee1440d01c59d4", 0xc, &(0x7f0000002300), &(0x7f0000002340), &(0x7f0000002380)="fff0fc516cb84cb3da67845da25834974c80f7890bfd11fd4f30e41272049b3dc8a6fc") sendmmsg$unix(r9, &(0x7f0000004900)=[{{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000f80)="e6d1baab777809ef4013a75397f4be888dfd96fa1b7c1784c2db2ed3ef7cdf779f7f606a37dd4fee1d35205f2abd7614362a07f80605d71e04074f869006edcd6f395bce23bc91dd7bae6ecb447910d312d7606427d9d952c99801861936b603d844f20776043acc89688a3fb5c2215369f00267dde2ef4ab5d9", 0x7a}, {&(0x7f0000001000)="878ad70012a926a70551ea1cae1830b4de85175871c9bc5db86e53f50dda68335995f08db71aa4e7e5066a031b86cf20e804abc9b5447464cdfb0b08acd9de6aa1b97ce39cd5ece6e4977aa111d0e8b0aeaa38e616c8931a6ba7e935641a73938bbc0051bad812236e0615ac5672bd1dfaf4273fc5922c5d2df43ddc44f3711afc41abd40c9c3e4613c61653f35ddf8568a227b6ff39211dae2ff1598b7401b43db37cdf7f61015e2c10edbbc1e9d6f2ef035bf87df922dd83399535ec58b2c6e7358574ae88f253b33fb6d7a9f8a95da78fbc19ac5232332118203f5789fe71ca96e81017c7c915ad9324ef9eb0b1632b2d334aee2bf063895975646f1ed897acea72745a205fcf508ce9024cd33ca38f4af727acc4e75550a1d3ed12594e13bc0bac1c99fb34023fa38dd2f16ae29cd9ed92c0e51bd91c277d8fb33b7209f7e4f57f7130d4c9217e06489db94536cf6ef105ebcb712ac8e2bff8d7a863d14eb3fec596e2ebaa1d8709cbdd02db18d5efc7e61cc4b90f2acd9c150888951e00b166408272da471b293f2087a598de2a5b646e7528da1afc9ab876f62b692cf65ba857b9bc81a62bb5c3fd3920d209bed45e076b40cf4a1e82c08b0e9e3c88e85dc1ce3316f70ac847ba72b5cdc416371c4bab207866aa6a487e20571ac1228c3922768dd457c9ab3d115933e6aa20f2305223e6a611e2462c3255ff1e729f2d42a3cdb3ab5863ceb27777ab85cf48950ec0209d7c522764a76f90f051d36342915cba31827be8a4e62e1d815bdd9ec723901d847cfd220ddc926d25d378841853ddc6d6b2ec92dd57f406f83d7a28cc18375e6f7398b2ac10c9bc22472d06be5a45f11895f2193019cddca6efd818b0d4ca5636609e49628bdbfed9b86a0f716adf559e3768a0f531379f308f57b507045d30f5c7e63f15173547cc60840380e4d7470a4b14c0ff93145987c6141adaa0938f6d824f9b12d29ef861549466957bd5b0c24353f3b925976ce1815b5982dd850094c5425537bd8596b7a83ede1378c720b7bcb7adbe305fd114b4f9478b2f60d875c6f67578da2e6be4a8e85e5ea6ad32a248a86f0e561aed17e9f4648f319d9b4aacce36e60848ac6403379530cb9335ce256ea5dba35e4739e9fb300bd24d766683b5af0abc076d740b594f685e0ca0354b4513cfa100820bd684dbb0468628b402a34f1b37cd5975161512d4b78bacb890d3680238facc09f583d19509516d9edd7d4769d2ecbaeeff3debd4bb80e6ef3195a1890618adf0449a07e85ffca03ab91085c772c0ebdba2994f9afc84cf60c99007be1b5fd2011297547171e9c3137c76dca3be8beb02eb9863cdd8652a71592d6c231c9e7cfb3d6c69555d61f1747b537dc0553aa0f4769f5c0be91d07726e0d5e7f77dd0d3c4f86693977e73c4891d6b34776a755fd7ee1f0a234861a95f76d212a3bd7688bb7b2a633bdae18737293c7f1cee2288b5371ddc25000d1b142b7967ea07bfe79291a6fb17c76b3ae35cfd8ee59c4b561fb0b87692d48da4abe4c60ec1b163b541f2c4c7fbb82f347462d8c3f02f700a07d76b21d53133ad30d65710293af78de455fab2095d728280bb8370f72c8eb1ddc59c662f1c382f01ac5212d97ef6e16cc9d050e64d90462ed54a37d1c733e8169c8b35ac625d352264ceedcbb79b92855ca6667d15af342f87b3d1887d8821a2e1855aeb66202580595a6f6709b32dada034837972f9c8a10a390f7ff1a7834664cddd435b2ff28dc1b48aff8f56a2f4c2ca661691912cf59ae2275b4beaa6dc152064d11bff1885d51d5475bd02f1c1298bb9136c4f39de4937ff4c93439bc201d4822096d705cc6664ced883bc3aae7adf4ba47519497f498ee54043732a6b8082de8789c2d7065e28d094d2bd86a5a4297b6ca06bda14133c53b1b87fbe43c7d8af22ced253befb63ce359ef0fea94e205e3bbee5ee6a1434c7a4a40137c16da9076b4cba64d96b094db6db902d4180c6498af682905a5c9d0de35056379701c06641b050e50a80024447e9e7f14054578f9e1eed9d5f5756826a915efcf3e689f1df27e138415607e751253e1779d00ad5eff2400e0d64cff78e32b893118c6d804b77d1ece1fb22d9610ac0bbccf6e353dd1d5edb93961e3ba70e3d00dc99bc6a2e53879dc5f606c3ed587bfbc0415c37737d5d36efe3af594d246d21ab5756594f760364cca51b69b93452f76298a72a583fae2ebaf4427a22729303a4944b8ded74fc403a5521766311173812d2141a5cfb5e5be46192904b0a329564b4be5cc3de59bb50e635d01128413b296e3b148a0456197ceb7a80ac5827b625b72a455e38ca0a09d38c1edf548b93c96858b0cec6779db1d6f9eeea0231afde0a07692e08ab3e75206b5ebf5705982a5bc9cc1e60e4c557d3440263c7f3efd8bb763cb0d1bc2e73b6777fbd521f3342fe98934f41ba61f3c4d70f03efd71bdd064629f2282141aa5f87a9668514156cf1ed43ddebce00c23c22f490a4f2d758483c9fb62a4271405273e9e33290c26d82f0398fdd97b72579c79f31657a1eed459c37ada392ed803a530652f0421ad1efeadfdc394eb46f05a48b5b60b7a96c3075ea7588323be07f7f41f9792587c66efa522f7ea1e1db1c7c7cc24dc7e34d4336f5365c03d42101c6085d5dfbf3cef06dc1b90318280488e5826354b4133d0df05bab611a228fe1ba43145892c6310502deca7782494398c8cc52427ef7244c46d04a819d8debeab78ec1a788d7540775641999e2bf41b1841d173f055960030afc9af0b493c0cba189a164b69d3e0909b1eba6b02642a87e1c23be99e0a0ebf603dff9b693cd0d029dea940d189ca35fc12074b88bae475d7b09ccbcbb173d582f042ed0c880d4707ade7896433bafd7daaea3c7a1d8a6d4de7b422f94a8e774cf616115d91d2d6128b47f7ce3fee82b8c39fdb190425031e1390b9363a73f603657ae2620bf81df15962c2c74a04f8442f7c463c5d20eab26402689f21182d928b5a71c67e7e1d069d53e498824998aba629382f3b7d05b133cca8fa75b2549ad37bc67d4dd2fe2aeb6c65c26abd428489b598fc516d25bdcb5a75c376a7c92e043b6b7bc9e750f2bed698a91c94866a3cb98ed81ff8e8b0298f43cfd8c02644942735533a577819545586a3ec7ab2784f0e10a318f3b4c5dd1c91aec54584e67fab5b0ca09cec75d60bf526358f9acb4ca5797786ac6fbec901c43eb12941c8dc9cbb33dac09a61cc21f64e716e0f9769fe8e428abd4d6e442d2587efeb1dc88ac6ac23b68502682308a756283418ac4111bd309adf43c75089b8b59fa35122da45b3f6bffda0998665d11005584833e1215aee86ce2866fba88f384ccdcdf4a7d4a45a41855e89e58d0f8f78501cc68f65d6e31e1bf7111cf4f5d36ddc0d1286e0571132e1ad6ae038ed5518735f515e67670d6da81ab4e0f6e7fb85711ceadd0cd95703496145555eb2f22a654deb26ee5a882c91ae1c179a55cd7d5003dad0fdf7d1e93b586d85084f80bedf9d41d4c5aab59bc8af9f4f9f96b973cb7f6c2f61b039a23397e50b6649f4be1572708df7cff0452d29b299fefa686bf9fc9e74667d583532255bd8428f3a7f298082617ac8af4ff2026bd5bd768c4fa11dd8467448cb4e45d5e7848f96f8677f863c83f6c9114e3e66c4a40ca7b265e79455acdc7afa006a082170915a427fd5a0632a26cd6eda35d4503652318383dbda3876ce2ee3fbcdd5d64d850cc3f2494a78dfe44ec2e4afd3463d0887591eef9d13dca1c267b6f42e835914c335c1f095d0b261fa5b3736ffc1fb9a6e28c90f76c4cc40ca72068b997416a3be31ff7db64c6723493777eefbc648befed40b58f8d94697b5d9074a974b70fb33d71715fcaa03082c334eeeed8c392d03c432137a70bd9a43f7879af29b0bb4610077b6500922c75d02a7c7f1633f802abf9c874477acf87298d79620e88932a717fcf2643958023f9c501de34eea1c1268fba56d15aa96cd0307c70c56c05b606206011a6de7571861bf020ab203153d5b3eeb6506e7de0369ad3bb33dd09933dc41ffb3e1fa255301a66f29d22335cf0c6cc09d7c00e55aa82f7497a0722ca0a2f2927243370511b9a0483b1903730cfbae1012d43e8c080447e618f64fe55eaf8e369bde2499d25d46f9bb7e0c11c963d9131270166557ba59d7cf8527cdaa7480114358e6272e50402ef1951da6db0afecd725e200c7d8abcd677e153574d7625281e883e1c7ad3f5fe5bb34066cfa0b42428828b5a1a5f14fc59cdc427831b389265d8d724a8b1a0a24ed392f2b0e77294a12d15fc1e614c080c46c2f2735424e9726a6607819f2986b33782deff256800cc343750d328d8a98a6857399cd04798e742da544c69ccb7675bf65715d42d866d49ce9890ba9457e815194c0afc70b05cf3fdb7ce4996d7ee4c3ccb029ed63e9e2748787d8934cbcb0215b36f4f36ed43fef7c995a99b31e06c5de8b9ef430f6ab8b880d060fe7530bfa9996b747b344c95cb079d5642aeabbc03f697c496238b47bb9f94d3c74f1b2c0f6754483879763c96e4d332f02d2806d758502d505b4ab927150a2a1e16053f1a2a69cd54494552426ece613a8f1db4e9dab16b65c23bfb29018430c72381b4c8039c909049f5dae385b6519513bd5467334f4c2baf563119a297ae3c391765765024b06429e008515e33965048ce5404c0c67fac1dc2b8011be088e9c0d12333b5b6163a64aad03d63832116c535c4965afecfe4c208a4dc1d4cd303be52730f58588c8b7e8f90102c9a378286bb2796440ba683b52809ec704fa6dfb6bf777fe3e2fe903a78f72a8714cda7171ab51e271b6bf4a302ed94c4cc9c71a788a1c8be4bbff05d7d5210d1e18f62092833d5e7f4aa60e13a3374ce714b92f5ec7b5636d2d8c34905866c0fa13a43f1223f62df73c009d5f57722f18c02a788cd9a3278fa42bfc29f81bf38cfaa72593008b2272617dd661e84de4a73164852866c99488a3fa101a16095fb5ecb2a83a18ec6916675a3a3b90b403b3f0f296599e52211a8cf5d6f083d5847f2d7dd2ece340b525b227dd7870014cee9ef6dc72a22ac5237eca8cba500d57ceed5874574128a02566a3a63e6352b57c3981e7092faeb1a763761499be0c985cfec765192e565bf3fca202caba58c2f8ee7408fcd7d1a0a98308ff61f8e106d10792c92ee42557e084bfe5d6eaf47fdafed76328071efbbf86303dbe5dd42e02e9854d8027ef8dd9378465ea74ceaa18b76e74b1e4180dfe3655bbdd438ea431708238042284658d5a81762714dfee998d5060ef337f2d12eaaae4dd4ed40b79a283487f42b82eb673e522a7b58018f98ce1fa219d9a21e9ca14c2afce98c7ba1b6c4f30f8962300c21632d495cff29ce261b46afb1f51ada9fee1adf50ef136d303d516b703e723ff82ba8292f53637210ede26de95e7520b06cc229ca6fe330247f8a7b14fd5dbd9dafe3c6cf0259acb6f909fa3d152693e6b42f3dcabbe2a959acdcc5fa2e3a66a1e7b87ab48260330b258eb709358a6fa4f40135fd04bfc5de2f0fe3d13ee189454e52af21aaf1f6fa3afeb622f70c9443afa92dab13cb1fc6b2acf617cbee8adc250b80c2fb8eb43157a74b12d750691ef6d6efb87885d90efca272b4858c85671b83c6c0a83ae9f7bfe2f7c10c295765e28f599bd513b73fec20c4125f0e3c234eb03b68b20d540ccfbc28bce9cdab589cd07d8b29e31ffbd748d6efc097c8fc82875e71b7", 0x1000}, {&(0x7f0000002000)="abb16e65c03409d06a68b3b56ca06312173d86119169dbe474e49101417c1614b80aec9ee839b5ffbbca29e867220de46a1deb1f", 0x34}, {&(0x7f0000002040)="fe178a460814e2f9787605f6155c879c5e9e50435ccb6024d7399b97c1ce7c9b37896d3b7d05fbf2d3bf45c1e70cd70ac411eff5d3fc75371139f4c2c35b91aded7b7b0149cceeaf33a55932902375cd3111f352849d98c77e3faf1040244d76cfa695df5903d7633d3745a7e1314226ec26c1ec4948ca7a2b83e98cb1d2161b8a4ba27c7be7066c199dc91f8d", 0x8d}, {&(0x7f0000002100)="155d3a11d72eb9b41689ad244d40157456c2503ea19985002d716d91b4cd577140ff348e7d49e0a6a8e4d23b219a7d46f2b7431c672cb5590646f58957cfa4fd23b957bf48b5cf05eab4eedab5be95dd2032dcb5b29f047669200a7579e3c0138a3148d1d2b9dca54a9cad366f895077082a36232b78fff12d8784f78d3ead26da281373d283b698be6c858f584669a8008be7ad43859a863f1ee84c8ddca91b8a5269be2b91722b2f242ab6ff5a4cd0356c3a1e49376e8625f4a6de21", 0xbd}, {&(0x7f00000021c0)="19afa546702dfc122ebd216d2fede1127c15d8c355de4a4ec0873aec2667b8342affe45f9a3bac300f19fc40d51b97e40da4a0756faa7cd59fb93af3c23b41bb0f", 0x41}], 0x6, &(0x7f00000025c0)=[@cred={{0x1c, 0x1, 0x2, {r11}}}], 0x20, 0x40}}, {{&(0x7f0000002600)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002680)="6186852bd04bea446fdaeb4f8d503913683f9d19e4e9ac9d7da4fadef6b88d906fe46b00a8a887e33911c99e39104b8b009622856b4453f143dfc6f0a6c67958a3f6ad5a5327758933b337cab78a3fb1cd59348eb50221885b1ffbbba302f0be983a6265962d7fef55dbe34cad265cf5fc9a7472e5e28d0f947bfe4e54e82f368b8dca6b6feae08af65b11bfd43b7a75ffba90f8548fa3f39e2481f46ad0a400b9df49ff28d0f683f8", 0xa9}], 0x1, &(0x7f00000048c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x4000800) 6.985705456s ago: executing program 0 (id=175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x402c031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x700, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 6.960319187s ago: executing program 4 (id=176): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000300)={0x60, 0x8000000000000001, 0x0, {{0x6, 0x54faefea, 0x3, 0x0, 0x8, 0x80000002, 0x3, 0x7ff}}}, 0x60) r1 = syz_usb_connect$cdc_ncm(0x1, 0x7a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x1ff, 0xe, 0x7fffffff, 0xa7, 0x2, 0x2, 0xb3, 0xfffffffc, 0x5, 0x1ff, 0xfff5, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 6.770047999s ago: executing program 2 (id=177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_emit_ethernet(0x102, &(0x7f0000000240)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0xc8, 0x3a, 0x0, @remote, @mcast2, {[@routing={0x33, 0x10, 0x0, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @local, @private1, @remote]}], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x1, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xd40, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x40000000000020f, 0x20) 6.768547029s ago: executing program 1 (id=178): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x8000, 0x400, 0x0, 0x1, 0x10, "00010000001b0400"}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000300)={r5, &(0x7f0000000340)=[{}, {0x80000000}], &(0x7f0000000000)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={r7, 0x0, &(0x7f00000004c0)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f000000a300)={{r6, r9, 0x0, [0x0, 0x8]}, {r8, 0x0, 0x0, [0x1, 0xfffffff9]}, 0x1}) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x903, 0x0, 0xffffff80}}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 6.67225422s ago: executing program 3 (id=179): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) 6.04645847s ago: executing program 0 (id=180): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x3, 0xfa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_usbip_server_init(0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usbip_server_init(0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x12, &(0x7f00000005c0)={@local, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@generic={0x88f7}}}, 0x0) 4.706177109s ago: executing program 2 (id=181): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, &(0x7f0000000100)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_create_resource$binfmt(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mprotect(&(0x7f0000f9b000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(0x0, 0xf9ba, 0x143882) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x1000070}, 0x2c) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000500)={r3, 0x4000, {0x0, 0x0, 0x0, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a010000000000000000000000002010e2000000e000"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.688128315s ago: executing program 0 (id=182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = dup3(r1, r1, 0x80000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001880)={{r1}, 0x0, 0x9, @unused=[0x8, 0x7f, 0x81, 0x5], @name="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"}) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="d200000010001fff000700000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000d000100000008000a00", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x5, 0x92b, {{0x1a, 0x4, 0x1, 0x17, 0x68, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_addr={0x44, 0x34, 0x5b, 0x1, 0x5, [{@local, 0x5}, {@rand_addr=0x64010101, 0xe70}, {@multicast2, 0x80}, {@loopback, 0xfffffffd}, {@broadcast, 0x1}, {@rand_addr=0x64010101, 0x5}]}, @lsrr={0x83, 0x1f, 0x7f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @local, @broadcast]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) (async) sendmsg$AUDIT_SIGNAL_INFO(r2, 0x0, 0x0) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x2, 0xf, 0x2, "600e229ba133a2fd972ef1fb92c8be83c669c4e432eb59047d82569a0c3706ed457ed2e884930af0c0cea5439fb872c48f7ea8ece9b5e5276cecce82288f93", 0x3f}, 0x60) (async) bind$nfc_llcp(r8, &(0x7f0000000100)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x44, 0xe, "acce2fc01ad42ec17938ad855f915d6557f547eb1b63bd90d7572fb72dd645d394744622f8d6fb0a9af6f5fd83019a1689240648f8482682709948ce19e6b7", 0x34}, 0x60) (async) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000006a00000429bd7000fcdbdf2500000000000000000400090004000b0008000500", @ANYRES32=r6, @ANYBLOB="08000a00020000000800", @ANYRES32=r7, @ANYBLOB="08000a00020000000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x48084) (async) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) (async) getsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000cce7af3b6a5fbb38757800"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x15, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf090000000000005509010000000000950000000000000007000000000000004500f4fffcffffff18000000060000040000000009000000bf91200000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) 4.616414065s ago: executing program 1 (id=183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setrlimit(0xb, &(0x7f0000000080)={0x9, 0x800}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e1e, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.400387727s ago: executing program 0 (id=184): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(r3, &(0x7f0000019300)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r7 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r11 = add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000019200)={'syz', 0x3}, &(0x7f0000019240)="3150bce562735501c682aaa7de7adf4ce09f766ed6f1fc2640602c508507360cede1d3bd971202686dc0784f76fa6066a0921b176d5b3b9fc3704ae2a6b1d14c5cbf730d77a805e7f8023d7fed9c83e52ce2a351e62f6ea4fded62b6755c218c69f00775d69187b9", 0x68, r7) keyctl$link(0x8, r7, r11) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r10, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000019340)=@assoc_value={0x0, 0x80000000}, 0x8) 3.765630067s ago: executing program 4 (id=185): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1ec, r1, 0x3, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc88}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa7a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdf}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x48010}, 0x800) (async) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='./file0\x00', 0x14000144) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000380)=@name, &(0x7f00000003c0)=0x10, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20c800, 0x60) getdents(r4, &(0x7f0000000440)=""/109, 0x6d) (async, rerun: 64) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f00000004c0)) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000500)) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000640)='/dev/comedi1\x00', 0x288000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf253}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x59}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x5) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x9, 0x100000) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x40000) (async) fcntl$getflags(r2, 0x401) r6 = syz_usb_connect$cdc_ncm(0x1, 0x75, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x6, 0x40, 0xf1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "b8e6"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x6, 0x6, 0xfc}, {0x6, 0x24, 0x1a, 0x1, 0x21}, [@obex={0x5, 0x24, 0x15, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xb, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x208, 0x1e, 0x9, 0x7}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x110, 0x0, 0x5, 0x5, 0x40, 0xff}, 0x3d, &(0x7f00000009c0)={0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x48, 0x7, 0x8d, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x7, 0x9, 0x5, 0xfff, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b707e33595a85f8f6e73192bdcba3bbd"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x1, 0x8, 0x1, 0xe}]}, 0x3, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x2809}}, {0xb9, &(0x7f0000000a40)=@string={0xb9, 0x3, "e8bd18a74a3d8c1102c7db5ed409b27a584c2fce98a323f439be68c3bfeb596d7ed05e5e01b6f59d960210f026c7e8675d3beab438e199f5fbc614ea1d1058d84bd71f8244182409348177268f22af097bf1bf3ef9febdb87b434c22dd39ebc1f3d09a8731d154f0b7c61088fa6ea9bd2f485c49bad1c61cfd0d9aa7831dc22c1114da193d1cf25ff8f30faa68340a14c383f35c3b7403faea96c1cb563fb0f5239da8b948ca2f13fb7f4b3fd2e9a290b4afa9cf6b092c"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x178290b90fb56162}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x7, 0xaf, {0xaf, 0xc, "a06ea89f52141e2242c09263ad43452f041a65f98386c074fe06bddf72ca3c1e3d06c353a45ed31212cc3ef02eaa7862dcf5d729d5f18a6d5cb2b08fe6d5dcfe3546ce217be7da8a75fa1e82c6912b43112db9952408f5877f4cf68e45d9f04e15f4e2fb94852f2288b27a769bb6d2a84d82f74cfb1913696f2be73b1fac42e84a1646ae32e3f144890f3f1132902284261e29d89374963eb77cbaae6de1530eec0275571c084b98953df7998f"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f40)={0x44, &(0x7f0000000cc0)={0x0, 0x11, 0x8f, "05d061f8b87b81006b73970dc9e44612e1a1c8008b9f61f28742dc2b4b68451797ba402a1a6e02906ef01dfb943e1ab4b1e9c586a0d46a99ccabe4cb1950558ed72ea51d469aab2b8b3d37dcdd7202b24da0ca4c6cd473293558c5b31b6fe550bc95d66fcc161024e413b18cfb38743446262b1d1cc5e3021fce1a82d1f6a9ab6c92911899a3b980819556b8ab0192"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x9, 0xd, 0x5, 0xbf9, 0x401, 0xde3a, 0xb, 0xd35, 0x98, 0x1, 0x5, 0xffff}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0x542}, &(0x7f0000000e80)={0x20, 0x83, 0x2}, &(0x7f0000000ec0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000f00)={0x20, 0x89, 0x2, 0x1}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) (async, rerun: 64) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000fc0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f0000001000)={0x9, {0x5, 0x6, 0x2, 0x8000000000000001, 0x2}}) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000001040)=0x1000) (async) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001080)={0x8, "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"}) (async) getresgid(&(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001380), r10) 3.707469987s ago: executing program 1 (id=186): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x66, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES64=r0, @ANYRES32=r1], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x1, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8000, 0xc574450d1af3b5be}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3.632442859s ago: executing program 3 (id=187): syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x5, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x42980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'pim6reg0\x00'}) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cee200016000000", @ANYRES32=0x0, @ANYBLOB="1400010020010000000000000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x10, 0x2, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TCFLSH(r2, 0x400455c8, 0x4) (async, rerun: 64) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xb2) (async, rerun: 32) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 32) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000002c0)=0x70, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) syz_open_procfs(0x0, 0x0) (async) socket(0x1e, 0x4, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) 3.399330795s ago: executing program 3 (id=188): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000680008002cbd7000fbdbdf25000002000c000000140006000000000000000000000000000000000044000c8006000100feff000006000100cd00000006000100f9ff00000800030000000030060001000900000006000100000000000800030002000000080003002300000004000b001800088014000500fc02000000000000000000000000000114000600ac1e000100000000000000000000000054000c8006000100ff030000080002000a000000080003001b540000080003000100008006000100eb8700000800020006000000080002000800000006000100810000000600010009000000080003000300000008000500", @ANYRES32=0x0, @ANYBLOB="1da5f7d088254749cd0bae8fd1de6ed5dd9ac2e45e15359474429a9b54cc592993c245e206c5fada67d5764eff1f0ce1b60e82b4e50f258fc73f497f3940ee7b469eae6808b39007dd67444d2c624046bc2759d86eb50575a3acb07e"], 0xfc}}, 0x4048000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x10040, 0x0) syz_pidfd_open(0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0200000004000000030000000720000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x001\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000000100"/28], 0x50) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x223d, &(0x7f0000000540)={0x0, 0x57d9, 0x0, 0x1, 0x79}, &(0x7f00000002c0), &(0x7f0000000300)) 3.328757296s ago: executing program 2 (id=189): mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000160f4f400d1001cbd1840000000109021b00010000000009046d0001749adc000905c1"], 0x0) r0 = syz_io_uring_setup(0x4c5, &(0x7f0000000180)={0x0, 0x2b50, 0x10000, 0x3, 0x1c6}, &(0x7f0000000240), &(0x7f0000000280)) fstatfs(r0, &(0x7f0000000580)=""/4096) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xf4, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}, {@xino_on}, {@index_off}, {@userxattr}]}) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000160f4f400d1001cbd1840000000109021b00010000000009046d0001749adc000905c1"], 0x0) (async) syz_io_uring_setup(0x4c5, &(0x7f0000000180)={0x0, 0x2b50, 0x10000, 0x3, 0x1c6}, &(0x7f0000000240), &(0x7f0000000280)) (async) fstatfs(r0, &(0x7f0000000580)=""/4096) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xf4, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}, {@xino_on}, {@index_off}, {@userxattr}]}) (async) 1.815846764s ago: executing program 2 (id=190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x402c031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0xa00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 757.884308ms ago: executing program 2 (id=191): socket$inet(0x2, 0x2, 0x1) clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x5) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f00000001c0)) close(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x10c, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xd0, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 745.344563ms ago: executing program 0 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) (async, rerun: 32) r3 = syz_usb_connect(0x4, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0xc1, 0xda, 0x19, 0x0, 0x4f1, 0x3012, 0xadd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xc, 0x20, 0x5, [{{0x9, 0x4, 0x8d, 0x1, 0x0, 0x50, 0x6f, 0xd8, 0x7f}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io(r3, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRES8, @ANYBLOB="285428ec845d71fc77458152f021f9566db74e4768eace3743acd548f6d1edf00e68cb78823bf0a7b17eb97f82fb3f32135e3526675bf7902f9a37568e6d02108787e4fdc392df"]) 488.608542ms ago: executing program 4 (id=193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x3, 0xfa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_usbip_server_init(0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usbip_server_init(0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x12, &(0x7f00000005c0)={@local, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@generic={0x88f7}}}, 0x0) 0s ago: executing program 3 (id=194): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000280)=0xfffffffffffffff9) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r2, 0x4, r1}, 0x6) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000003c0)=ANY=[], 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 400.366831][ T30] audit: type=1400 audit(1758903401.185:63): avc: denied { mounton } for pid=5882 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 400.370707][ T5882] cgroup: Unknown subsys name 'net' [ 400.389687][ T30] audit: type=1400 audit(1758903401.185:64): avc: denied { mount } for pid=5882 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 400.418681][ T30] audit: type=1400 audit(1758903401.235:65): avc: denied { unmount } for pid=5882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 400.558552][ T5882] cgroup: Unknown subsys name 'cpuset' [ 400.566770][ T5882] cgroup: Unknown subsys name 'rlimit' [ 400.711859][ T30] audit: type=1400 audit(1758903401.525:66): avc: denied { setattr } for pid=5882 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.747284][ T30] audit: type=1400 audit(1758903401.525:67): avc: denied { create } for pid=5882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.768090][ T30] audit: type=1400 audit(1758903401.525:68): avc: denied { write } for pid=5882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.789243][ T30] audit: type=1400 audit(1758903401.525:69): avc: denied { read } for pid=5882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.809537][ T30] audit: type=1400 audit(1758903401.555:70): avc: denied { read } for pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 400.830470][ T30] audit: type=1400 audit(1758903401.555:71): avc: denied { mounton } for pid=5882 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 400.855266][ T30] audit: type=1400 audit(1758903401.555:72): avc: denied { mount } for pid=5882 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 400.879487][ T5885] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 401.849245][ T5882] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 404.267486][ T5906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.275390][ T5906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.276564][ T5907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.285350][ T5906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.290626][ T5907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.298199][ T5910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.310791][ T5909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.315173][ T5910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 404.318257][ T5909] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.333053][ T5909] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.341521][ T5909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.349755][ T5909] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.357734][ T5906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.358653][ T5909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 404.365265][ T5906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.372199][ T5903] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.387871][ T5903] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.396837][ T5903] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.405228][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.413424][ T5169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.420049][ T5914] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 404.429457][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.436675][ T5903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 404.448250][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.455455][ T5903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.868122][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 404.916630][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 405.010813][ T5894] chnl_net:caif_netlink_parms(): no params data found [ 405.085706][ T5908] chnl_net:caif_netlink_parms(): no params data found [ 405.162675][ T5896] chnl_net:caif_netlink_parms(): no params data found [ 405.173123][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.180387][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.188420][ T5893] bridge_slave_0: entered allmulticast mode [ 405.195669][ T5893] bridge_slave_0: entered promiscuous mode [ 405.203826][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.211256][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.218534][ T5893] bridge_slave_1: entered allmulticast mode [ 405.225366][ T5893] bridge_slave_1: entered promiscuous mode [ 405.274204][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.282462][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.290110][ T5892] bridge_slave_0: entered allmulticast mode [ 405.297540][ T5892] bridge_slave_0: entered promiscuous mode [ 405.336807][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.348576][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.358015][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.366597][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.373720][ T5892] bridge_slave_1: entered allmulticast mode [ 405.380603][ T5892] bridge_slave_1: entered promiscuous mode [ 405.387316][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.394393][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.401589][ T5894] bridge_slave_0: entered allmulticast mode [ 405.408283][ T5894] bridge_slave_0: entered promiscuous mode [ 405.439711][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.447103][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.454230][ T5894] bridge_slave_1: entered allmulticast mode [ 405.461377][ T5894] bridge_slave_1: entered promiscuous mode [ 405.516022][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.538717][ T5893] team0: Port device team_slave_0 added [ 405.546394][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.558843][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.569439][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.587906][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.595550][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.602678][ T5908] bridge_slave_0: entered allmulticast mode [ 405.609544][ T5908] bridge_slave_0: entered promiscuous mode [ 405.616799][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.623869][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.631366][ T5908] bridge_slave_1: entered allmulticast mode [ 405.638271][ T5908] bridge_slave_1: entered promiscuous mode [ 405.653927][ T5893] team0: Port device team_slave_1 added [ 405.711811][ T5892] team0: Port device team_slave_0 added [ 405.720077][ T5894] team0: Port device team_slave_0 added [ 405.736726][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.743891][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.751396][ T5896] bridge_slave_0: entered allmulticast mode [ 405.758638][ T5896] bridge_slave_0: entered promiscuous mode [ 405.766283][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.773401][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.780604][ T5896] bridge_slave_1: entered allmulticast mode [ 405.787703][ T5896] bridge_slave_1: entered promiscuous mode [ 405.802751][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.810142][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.836071][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.849468][ T5892] team0: Port device team_slave_1 added [ 405.864602][ T5894] team0: Port device team_slave_1 added [ 405.872344][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.883310][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.901380][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.908521][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.934858][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.989202][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.998939][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.006275][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.032424][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.069010][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.089380][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.096470][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.122719][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.139212][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.146231][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.172935][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.185842][ T5908] team0: Port device team_slave_0 added [ 406.191992][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.199079][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.225111][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.254755][ T5896] team0: Port device team_slave_0 added [ 406.263763][ T5908] team0: Port device team_slave_1 added [ 406.287042][ T5893] hsr_slave_0: entered promiscuous mode [ 406.293131][ T5893] hsr_slave_1: entered promiscuous mode [ 406.302491][ T5896] team0: Port device team_slave_1 added [ 406.353216][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.360920][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.386857][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.412591][ T5892] hsr_slave_0: entered promiscuous mode [ 406.418730][ T5892] hsr_slave_1: entered promiscuous mode [ 406.424551][ T5892] debugfs: 'hsr0' already exists in 'hsr' [ 406.430382][ T5892] Cannot create hsr debugfs directory [ 406.445739][ T5901] Bluetooth: hci1: command tx timeout [ 406.447063][ T5903] Bluetooth: hci2: command tx timeout [ 406.467184][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.474147][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.500260][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.524514][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.531862][ T5903] Bluetooth: hci4: command tx timeout [ 406.537844][ T5901] Bluetooth: hci3: command tx timeout [ 406.537965][ T5169] Bluetooth: hci0: command tx timeout [ 406.543457][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.574672][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.609979][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.617184][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.643308][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.657983][ T5894] hsr_slave_0: entered promiscuous mode [ 406.664410][ T5894] hsr_slave_1: entered promiscuous mode [ 406.670525][ T5894] debugfs: 'hsr0' already exists in 'hsr' [ 406.676511][ T5894] Cannot create hsr debugfs directory [ 406.749178][ T5908] hsr_slave_0: entered promiscuous mode [ 406.755612][ T5908] hsr_slave_1: entered promiscuous mode [ 406.761719][ T5908] debugfs: 'hsr0' already exists in 'hsr' [ 406.767536][ T5908] Cannot create hsr debugfs directory [ 406.842170][ T5896] hsr_slave_0: entered promiscuous mode [ 406.848890][ T5896] hsr_slave_1: entered promiscuous mode [ 406.856637][ T5896] debugfs: 'hsr0' already exists in 'hsr' [ 406.862358][ T5896] Cannot create hsr debugfs directory [ 407.144015][ T5893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.158459][ T5893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.168727][ T5893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.187999][ T5893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.238539][ T5896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.251262][ T5896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.262401][ T5896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.272734][ T5896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.346298][ T5892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.359269][ T5892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.379264][ T5892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.389252][ T5892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.463652][ T5894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.492874][ T5894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.502922][ T5894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.512188][ T5894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 407.581131][ T5908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.593065][ T5908] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.602921][ T5908] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.623120][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.633160][ T5908] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.669961][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.681755][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.711270][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.718492][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.747832][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.754988][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.775648][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.823657][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.830772][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.842101][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.866527][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.873603][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.913861][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.938374][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.957904][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.965059][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.988486][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.995620][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.029293][ T5894] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.040984][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.061176][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 408.061191][ T30] audit: type=1400 audit(1758903408.875:86): avc: denied { sys_module } for pid=5893 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 408.112305][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.119487][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.149680][ T5908] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.173687][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.180879][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.249442][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.256625][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.288409][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.295554][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.339105][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.471096][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.504356][ T5893] veth0_vlan: entered promiscuous mode [ 408.525197][ T5169] Bluetooth: hci2: command tx timeout [ 408.530632][ T5169] Bluetooth: hci1: command tx timeout [ 408.552880][ T5893] veth1_vlan: entered promiscuous mode [ 408.608172][ T5169] Bluetooth: hci0: command tx timeout [ 408.608184][ T5903] Bluetooth: hci4: command tx timeout [ 408.608219][ T5903] Bluetooth: hci3: command tx timeout [ 408.660979][ T5893] veth0_macvtap: entered promiscuous mode [ 408.707025][ T5893] veth1_macvtap: entered promiscuous mode [ 408.718593][ T5896] veth0_vlan: entered promiscuous mode [ 408.774065][ T5896] veth1_vlan: entered promiscuous mode [ 408.803382][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.819199][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.870553][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.886423][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.912207][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.932010][ T5896] veth0_macvtap: entered promiscuous mode [ 408.947360][ T3541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.959709][ T3541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.977200][ T5896] veth1_macvtap: entered promiscuous mode [ 408.992902][ T3541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.008345][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.082742][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.122475][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.162059][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.172384][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.195827][ T5894] veth0_vlan: entered promiscuous mode [ 409.211781][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.221110][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.255239][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.263867][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.271387][ T5894] veth1_vlan: entered promiscuous mode [ 409.290991][ T5908] veth0_vlan: entered promiscuous mode [ 409.336883][ T5892] veth0_vlan: entered promiscuous mode [ 409.353587][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.360851][ T5908] veth1_vlan: entered promiscuous mode [ 409.368535][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.392033][ T5892] veth1_vlan: entered promiscuous mode [ 409.397893][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.410779][ T30] audit: type=1400 audit(1758903410.225:87): avc: denied { mounton } for pid=5893 comm="syz-executor" path="/root/syzkaller.wrIook/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 409.440562][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.452318][ T30] audit: type=1400 audit(1758903410.225:88): avc: denied { mount } for pid=5893 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 409.477650][ T5894] veth0_macvtap: entered promiscuous mode [ 409.491106][ T30] audit: type=1400 audit(1758903410.225:89): avc: denied { mounton } for pid=5893 comm="syz-executor" path="/root/syzkaller.wrIook/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 409.509769][ T5894] veth1_macvtap: entered promiscuous mode [ 409.524428][ T30] audit: type=1400 audit(1758903410.225:90): avc: denied { mount } for pid=5893 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 409.541493][ T5892] veth0_macvtap: entered promiscuous mode [ 409.554671][ T30] audit: type=1400 audit(1758903410.265:91): avc: denied { mounton } for pid=5893 comm="syz-executor" path="/root/syzkaller.wrIook/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 409.597541][ T30] audit: type=1400 audit(1758903410.265:92): avc: denied { mounton } for pid=5893 comm="syz-executor" path="/root/syzkaller.wrIook/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 409.598248][ T5893] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 409.635703][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.652638][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.655211][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.666589][ T5892] veth1_macvtap: entered promiscuous mode [ 409.670224][ T30] audit: type=1400 audit(1758903410.285:93): avc: denied { unmount } for pid=5893 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 409.704019][ T5908] veth0_macvtap: entered promiscuous mode [ 409.710452][ T30] audit: type=1400 audit(1758903410.305:94): avc: denied { mounton } for pid=5893 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 409.741393][ T30] audit: type=1400 audit(1758903410.305:95): avc: denied { mount } for pid=5893 comm="syz-executor" name="/" dev="gadgetfs" ino=6979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 409.763634][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.783015][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.808278][ T5908] veth1_macvtap: entered promiscuous mode [ 409.853651][ T6008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.871416][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.885283][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.894239][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.925883][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.974516][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.988148][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.035220][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.044732][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.084391][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.163915][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.190128][ T6027] syz.3.7: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 410.222380][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.232671][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.252311][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 410.252338][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.252348][ T6027] Call Trace: [ 410.252354][ T6027] [ 410.252362][ T6027] dump_stack_lvl+0x16c/0x1f0 [ 410.252393][ T6027] warn_alloc+0x248/0x3a0 [ 410.252416][ T6027] ? __pfx_warn_alloc+0x10/0x10 [ 410.252446][ T6027] ? __vcalloc_noprof+0x4d/0x80 [ 410.252466][ T6027] ? __vmalloc_node_noprof+0xad/0xf0 [ 410.252496][ T6027] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 410.252522][ T6027] ? __pfx___mutex_trylock_common+0x10/0x10 [ 410.252560][ T6027] ? __vcalloc_noprof+0x4d/0x80 [ 410.252586][ T6027] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 410.252613][ T6027] ? __pfx___mutex_lock+0x10/0x10 [ 410.252644][ T6027] ? __vcalloc_noprof+0x4d/0x80 [ 410.252664][ T6027] __vmalloc_node_noprof+0xad/0xf0 [ 410.252691][ T6027] ? __vcalloc_noprof+0x4d/0x80 [ 410.252715][ T6027] __vcalloc_noprof+0x4d/0x80 [ 410.252737][ T6027] kvm_set_memslot+0xee3/0x1380 [ 410.252766][ T6027] ? kasan_save_track+0x14/0x30 [ 410.252789][ T6027] kvm_set_memory_region+0xebc/0x1680 [ 410.252826][ T6027] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 410.252863][ T6027] kvm_vm_ioctl+0x151b/0x4000 [ 410.252895][ T6027] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 410.252934][ T6027] ? kasan_quarantine_put+0x10a/0x240 [ 410.252954][ T6027] ? lockdep_hardirqs_on+0x7c/0x110 [ 410.252983][ T6027] ? find_held_lock+0x2b/0x80 [ 410.253007][ T6027] ? tomoyo_path_number_perm+0x295/0x580 [ 410.253037][ T6027] ? tomoyo_path_number_perm+0x18d/0x580 [ 410.253062][ T6027] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 410.253085][ T6027] ? __handle_mm_fault+0x5a8/0x2a50 [ 410.253122][ T6027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 410.253165][ T6027] ? hook_file_ioctl_common+0x145/0x410 [ 410.253200][ T6027] ? selinux_file_ioctl+0x180/0x270 [ 410.253227][ T6027] ? selinux_file_ioctl+0xb4/0x270 [ 410.253255][ T6027] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 410.253275][ T6027] __x64_sys_ioctl+0x18b/0x210 [ 410.253307][ T6027] do_syscall_64+0xcd/0x4e0 [ 410.253334][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.253353][ T6027] RIP: 0033:0x7f454a98eec9 [ 410.253369][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.253384][ T6027] RSP: 002b:00007f454b803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.253400][ T6027] RAX: ffffffffffffffda RBX: 00007f454abe6180 RCX: 00007f454a98eec9 [ 410.253410][ T6027] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 410.253421][ T6027] RBP: 00007f454aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 410.253431][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.253442][ T6027] R13: 00007f454abe6218 R14: 00007f454abe6180 R15: 00007ffcc6b702d8 [ 410.253468][ T6027] [ 410.259561][ T6027] Mem-Info: [ 410.546934][ T6027] active_anon:6417 inactive_anon:0 isolated_anon:0 [ 410.546934][ T6027] active_file:1458 inactive_file:40580 isolated_file:0 [ 410.546934][ T6027] unevictable:768 dirty:1622 writeback:0 [ 410.546934][ T6027] slab_reclaimable:11436 slab_unreclaimable:94487 [ 410.546934][ T6027] mapped:29175 shmem:1356 pagetables:1000 [ 410.546934][ T6027] sec_pagetables:0 bounce:0 [ 410.546934][ T6027] kernel_misc_reclaimable:0 [ 410.546934][ T6027] free:1323786 free_pcp:18260 free_cma:0 [ 410.605062][ T5903] Bluetooth: hci1: command tx timeout [ 410.613105][ T3541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.614872][ T6027] Node 0 active_anon:25712kB inactive_anon:0kB active_file:5920kB inactive_file:162128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116648kB dirty:6500kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11600kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 410.622713][ T5901] Bluetooth: hci2: command tx timeout [ 410.665918][ T5987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.667594][ T6027] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 410.704737][ T5903] Bluetooth: hci3: command tx timeout [ 410.705118][ T5903] Bluetooth: hci0: command tx timeout [ 410.714011][ T5901] Bluetooth: hci4: command tx timeout [ 410.723622][ T3541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.738071][ T5987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.746162][ T3541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.755348][ T6027] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.790412][ T6027] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 410.796318][ T6027] Node 0 DMA32 free:1392276kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25596kB inactive_anon:0kB active_file:5920kB inactive_file:160804kB unevictable:1536kB writepending:6496kB present:3129332kB managed:2539304kB mlocked:0kB bounce:0kB free_pcp:53404kB local_pcp:21992kB free_cma:0kB [ 410.839151][ T6027] lowmem_reserve[]: 0 0 1 1 1 [ 410.850716][ T3541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.864880][ T6027] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 410.896940][ T6027] lowmem_reserve[]: 0 0 0 0 0 [ 410.905405][ T6027] Node 1 Normal free:3885128kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21044kB local_pcp:9152kB free_cma:0kB [ 410.937134][ T6027] lowmem_reserve[]: 0 0 0 0 0 [ 410.942401][ T6027] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 410.970894][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.998368][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.001127][ T6027] Node 0 DMA32: 3*4kB (ME) 2*8kB (ME) 5*16kB (UME) 2*32kB (M) 4*64kB (UME) 2*128kB (M) 4*256kB (ME) 3*512kB (M) 4*1024kB (UME) 1*2048kB (U) 337*4096kB (M) = 1389740kB [ 411.046707][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.053227][ T6027] Node 0 [ 411.054542][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.054545][ T6027] Normal: [ 411.128092][ T6027] 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 411.143341][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.164064][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.182538][ T6027] Node 1 Normal: 51*4kB (UE) 44*8kB (UME) 46*16kB (UME) 64*32kB (UME) 21*64kB (UME) 8*128kB (UME) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3884876kB [ 411.235056][ T6027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.241457][ T5987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.245555][ T6027] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 411.273807][ T6027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.280070][ T5987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.322322][ T6027] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 411.413277][ T6027] 43914 total pagecache pages [ 411.431618][ T6027] 0 pages in swap cache [ 411.441727][ T6027] Free swap = 124996kB [ 411.455341][ T5981] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 411.463052][ T6027] Total swap = 124996kB [ 411.712900][ T5981] usb 2-1: not running at top speed; connect to a high speed hub [ 411.717992][ T6027] 2097051 pages RAM [ 411.787387][ T6049] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.11'. [ 411.832003][ T5981] usb 2-1: config 1 has an invalid interface number: 117 but max is 3 [ 411.840593][ T6027] 0 pages HighMem/MovableOnly [ 411.850692][ T6027] 430263 pages reserved [ 411.870053][ T6027] 0 pages cma reserved [ 411.880158][ T5981] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 411.916154][ T5981] usb 2-1: config 1 has an invalid interface number: 93 but max is 3 [ 411.946710][ T5981] usb 2-1: config 1 has an invalid interface number: 4 but max is 3 [ 411.971264][ T5981] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 411.984457][ T5981] usb 2-1: config 1 has an invalid interface number: 104 but max is 3 [ 411.993624][ T5981] usb 2-1: config 1 has no interface number 0 [ 412.000514][ T5981] usb 2-1: config 1 has no interface number 1 [ 412.006921][ T5981] usb 2-1: config 1 has no interface number 2 [ 412.013039][ T5981] usb 2-1: config 1 has no interface number 3 [ 412.022314][ T5981] usb 2-1: config 1 interface 117 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 412.034710][ T5981] usb 2-1: config 1 interface 117 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 412.047243][ T5981] usb 2-1: config 1 interface 117 altsetting 3 endpoint 0x7 has invalid wMaxPacketSize 0 [ 412.066577][ T5981] usb 2-1: config 1 interface 117 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 412.079284][ T5981] usb 2-1: config 1 interface 117 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 412.084925][ T5961] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 412.095635][ T5981] usb 2-1: config 1 interface 93 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 412.114479][ T5981] usb 2-1: config 1 interface 93 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 412.130282][ T5981] usb 2-1: config 1 interface 93 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 412.141815][ T5981] usb 2-1: config 1 interface 93 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 412.153074][ T5981] usb 2-1: config 1 interface 93 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 412.164482][ T5981] usb 2-1: config 1 interface 93 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 412.175834][ T5981] usb 2-1: config 1 interface 4 altsetting 12 has a duplicate endpoint with address 0x6, skipping [ 412.186919][ T5981] usb 2-1: config 1 interface 4 altsetting 12 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 412.198389][ T5981] usb 2-1: config 1 interface 4 altsetting 12 has a duplicate endpoint with address 0xF, skipping [ 412.211462][ T5981] usb 2-1: config 1 interface 4 altsetting 12 has a duplicate endpoint with address 0xD, skipping [ 412.253023][ T5981] usb 2-1: config 1 interface 104 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 412.279547][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.296389][ T5981] usb 2-1: config 1 interface 104 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 412.313253][ T5961] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 412.323122][ T5981] usb 2-1: config 1 interface 104 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 412.336487][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.354987][ T5981] usb 2-1: config 1 interface 104 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 412.378235][ T5961] usb 3-1: config 0 descriptor?? [ 412.388847][ T5981] usb 2-1: config 1 interface 104 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 412.425448][ T5981] usb 2-1: config 1 interface 104 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 412.455250][ T5981] usb 2-1: config 1 interface 117 has no altsetting 0 [ 412.464983][ T5981] usb 2-1: config 1 interface 93 has no altsetting 0 [ 412.471733][ T5981] usb 2-1: config 1 interface 4 has no altsetting 0 [ 412.494852][ T5981] usb 2-1: config 1 interface 104 has no altsetting 0 [ 412.507089][ T5981] usb 2-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=84.98 [ 412.516770][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.524783][ T5981] usb 2-1: Product: ࠇ [ 412.536843][ T5981] usb 2-1: Manufacturer: 盀㫛턁败 [ 412.574872][ T5981] usb 2-1: SerialNumber: А [ 412.595154][ T6037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 412.693985][ T5901] Bluetooth: hci2: command tx timeout [ 412.699496][ T5903] Bluetooth: hci1: command tx timeout [ 412.765182][ T5901] Bluetooth: hci4: command tx timeout [ 412.777203][ T5903] Bluetooth: hci0: command tx timeout [ 412.782665][ T5903] Bluetooth: hci3: command tx timeout [ 412.836117][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 412.861543][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.897021][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.901294][ T6067] ubi31: attaching mtd0 [ 413.079727][ T5981] usb 2-1: USB disconnect, device number 2 [ 413.335696][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 413.335710][ T30] audit: type=1400 audit(1758903414.155:151): avc: denied { create } for pid=6074 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 413.414050][ T30] audit: type=1400 audit(1758903414.205:152): avc: denied { setopt } for pid=6074 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 413.435150][ T30] audit: type=1400 audit(1758903414.205:153): avc: denied { connect } for pid=6074 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 414.102856][ T5961] usbhid 3-1:0.0: can't add hid device: -71 [ 414.114558][ T30] audit: type=1400 audit(1758903414.875:154): avc: denied { create } for pid=6080 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.126128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 414.183158][ T5961] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 414.496873][ T30] audit: type=1400 audit(1758903414.875:155): avc: denied { ioctl } for pid=6080 comm="syz.1.19" path="socket:[9463]" dev="sockfs" ino=9463 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.574632][ T5961] usb 3-1: USB disconnect, device number 2 [ 414.594633][ T30] audit: type=1400 audit(1758903415.155:156): avc: denied { allowed } for pid=6082 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 414.620457][ T30] audit: type=1400 audit(1758903415.325:157): avc: denied { map } for pid=6082 comm="syz.4.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 414.644418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 414.652707][ T30] audit: type=1400 audit(1758903415.325:158): avc: denied { read write } for pid=6082 comm="syz.4.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 414.682445][ T30] audit: type=1400 audit(1758903415.395:159): avc: denied { create } for pid=6082 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 414.704255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 414.852517][ T6088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 414.864368][ T30] audit: type=1400 audit(1758903415.665:160): avc: denied { create } for pid=6085 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 414.955050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 414.967759][ T6087] netlink: 'syz.2.20': attribute type 14 has an invalid length. [ 415.039716][ T6091] Mount JFS Failure: -22 [ 415.044021][ T6091] jfs_mount failed w/return code = -22 [ 415.051828][ T6091] Zero length message leads to an empty skb [ 415.059405][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 415.077082][ T6092] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 415.093090][ T6092] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 415.245362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 415.876411][ T6113] netlink: 116 bytes leftover after parsing attributes in process `syz.2.27'. [ 416.114415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 416.247223][ T6010] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 416.355120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 416.363654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 416.373285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 416.421577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 416.541378][ T6010] usb 4-1: config 6 has an invalid interface number: 3 but max is 2 [ 416.552973][ T6010] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 416.582676][ T6010] usb 4-1: config 6 has an invalid interface number: 173 but max is 2 [ 416.711627][ T6010] usb 4-1: config 6 has an invalid interface number: 163 but max is 2 [ 416.738942][ T6010] usb 4-1: config 6 has an invalid interface number: 239 but max is 2 [ 416.769572][ T6010] usb 4-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 416.848644][ T6010] usb 4-1: config 6 has no interface number 0 [ 416.885369][ T6010] usb 4-1: config 6 has no interface number 1 [ 416.907714][ T6010] usb 4-1: config 6 has no interface number 2 [ 416.929656][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0x8 is Bulk; changing to Interrupt [ 416.946531][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0x3 has an invalid bInterval 196, changing to 4 [ 416.959095][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0x3 has invalid maxpacket 8, setting to 0 [ 416.971282][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0xC has an invalid bInterval 140, changing to 4 [ 416.985491][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0xC has invalid maxpacket 16, setting to 0 [ 416.999252][ T6010] usb 4-1: config 6 interface 3 altsetting 178 has a duplicate endpoint with address 0x3, skipping [ 417.010968][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 417.024002][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 417.038403][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0xE has invalid maxpacket 1024, setting to 0 [ 417.077385][ T6010] usb 4-1: config 6 interface 3 altsetting 178 has an invalid descriptor for endpoint zero, skipping [ 417.141477][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0x6 has invalid wMaxPacketSize 0 [ 417.195734][ T6010] usb 4-1: config 6 interface 3 altsetting 178 has a duplicate endpoint with address 0x4, skipping [ 417.214623][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0x7 has an invalid bInterval 64, changing to 4 [ 417.228881][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0x7 has invalid wMaxPacketSize 0 [ 417.282733][ T6010] usb 4-1: config 6 interface 3 altsetting 178 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 417.304112][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 417.315900][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 417.349026][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 417.360555][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 417.375003][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 417.389313][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 417.401040][ T6010] usb 4-1: config 6 interface 173 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 8 [ 417.412393][ T6010] usb 4-1: config 6 interface 173 altsetting 4 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 417.423576][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has an endpoint descriptor with address 0x4C, changing to 0xC [ 417.435531][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 417.449280][ T6140] Mount JFS Failure: -22 [ 417.450547][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 417.453540][ T6140] jfs_mount failed w/return code = -22 [ 417.470283][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 417.488076][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 417.500629][ T6010] usb 4-1: config 6 interface 173 altsetting 4 has 13 endpoint descriptors, different from the interface descriptor's value: 15 [ 417.514477][ T6010] usb 4-1: too many endpoints for config 6 interface 163 altsetting 26: 158, using maximum allowed: 30 [ 417.514636][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.33'. [ 417.526024][ T6010] usb 4-1: config 6 interface 163 altsetting 26 has a duplicate endpoint with address 0xC, skipping [ 417.545821][ T6010] usb 4-1: config 6 interface 163 altsetting 26 has a duplicate endpoint with address 0xC, skipping [ 417.562069][ T6010] usb 4-1: config 6 interface 163 altsetting 26 has 2 endpoint descriptors, different from the interface descriptor's value: 158 [ 417.628470][ T6010] usb 4-1: config 6 interface 239 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 417.864175][ T6010] usb 4-1: config 6 interface 3 has no altsetting 0 [ 417.876423][ T6010] usb 4-1: config 6 interface 173 has no altsetting 0 [ 417.894140][ T6010] usb 4-1: config 6 interface 163 has no altsetting 0 [ 418.060709][ T6010] usb 4-1: config 6 interface 239 has no altsetting 0 [ 418.336078][ T5981] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 418.515061][ T5981] usb 5-1: Using ep0 maxpacket: 8 [ 418.547396][ T5981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.713502][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 418.808204][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 418.827851][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 418.827868][ T30] audit: type=1400 audit(1758903419.645:248): avc: denied { read write } for pid=6154 comm="syz.1.38" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 418.831912][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 418.834559][ T30] audit: type=1400 audit(1758903419.645:249): avc: denied { open } for pid=6154 comm="syz.1.38" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 418.859642][ T6010] usb 4-1: Dual-Role OTG device on HNP port [ 418.896353][ T30] audit: type=1400 audit(1758903419.685:250): avc: denied { read } for pid=6154 comm="syz.1.38" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.896398][ T30] audit: type=1400 audit(1758903419.685:251): avc: denied { open } for pid=6154 comm="syz.1.38" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.896437][ T30] audit: type=1400 audit(1758903419.685:252): avc: denied { ioctl } for pid=6154 comm="syz.1.38" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64ae scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.896475][ T30] audit: type=1400 audit(1758903419.685:253): avc: denied { map } for pid=6154 comm="syz.1.38" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 418.896514][ T30] audit: type=1400 audit(1758903419.685:254): avc: denied { execute } for pid=6154 comm="syz.1.38" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 419.014080][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 419.050269][ T6159] warning: `syz.3.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 419.107333][ T30] audit: type=1400 audit(1758903419.895:255): avc: denied { create } for pid=6152 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 419.172122][ T6010] usb 4-1: can't set HNP mode: -71 [ 419.172180][ T5961] IPVS: starting estimator thread 0... [ 419.178230][ T5981] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 419.189173][ T6160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.193106][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 419.216342][ T5981] usb 5-1: Product: syz [ 419.221639][ T5981] usb 5-1: Manufacturer: syz [ 419.228534][ T5981] usb 5-1: SerialNumber: syz [ 419.235082][ T30] audit: type=1400 audit(1758903419.905:256): avc: denied { getopt } for pid=6152 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 419.266791][ T5981] usb 5-1: config 0 descriptor?? [ 419.355008][ T6162] IPVS: using max 37 ests per chain, 88800 per kthread [ 419.476857][ T5981] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 419.498479][ T5981] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 419.757473][ T5981] usb 5-1: USB disconnect, device number 2 [ 421.697137][ T30] audit: type=1400 audit(1758903422.515:257): avc: denied { sqpoll } for pid=6181 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 421.753951][ T6187] Mount JFS Failure: -22 [ 421.761849][ T6187] jfs_mount failed w/return code = -22 [ 421.772214][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.44'. [ 423.427442][ T6201] loop6: detected capacity change from 0 to 2560 [ 423.547018][ T5895] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.575330][ T5895] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.596018][ T5895] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.653215][ T5895] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.678925][ T5895] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.815409][ T6215] netlink: 'syz.0.46': attribute type 2 has an invalid length. [ 424.526307][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 424.526346][ T30] audit: type=1400 audit(1758903425.335:286): avc: denied { mount } for pid=6220 comm="syz.3.54" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 425.031130][ T6232] overlayfs: failed to resolve './bus/file0': -2 [ 425.264643][ T30] audit: type=1400 audit(1758903426.075:287): avc: denied { name_bind } for pid=6234 comm="syz.2.57" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 425.420230][ T30] audit: type=1400 audit(1758903426.075:288): avc: denied { node_bind } for pid=6234 comm="syz.2.57" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 425.904967][ T30] audit: type=1400 audit(1758903426.235:289): avc: denied { unmount } for pid=5896 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 426.069420][ T6241] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 426.076039][ T6241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 426.129894][ T6241] vhci_hcd vhci_hcd.0: Device attached [ 426.174008][ T6241] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 426.180607][ T6241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 426.195015][ T6241] vhci_hcd vhci_hcd.0: Device attached [ 426.234519][ T6242] vhci_hcd: connection closed [ 426.235379][ T6244] vhci_hcd: connection closed [ 426.241936][ T6247] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET) [ 426.255711][ T5926] vhci_hcd: stop threads [ 426.260753][ T5926] vhci_hcd: release socket [ 426.267538][ T5926] vhci_hcd: disconnect device [ 426.281218][ T30] audit: type=1400 audit(1758903427.095:290): avc: denied { ioctl } for pid=6246 comm="syz.2.59" path="socket:[10494]" dev="sockfs" ino=10494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 426.308000][ T6247] vxcan1: tx address claim with different name [ 426.315587][ T5926] vhci_hcd: stop threads [ 426.319968][ T5926] vhci_hcd: release socket [ 426.320047][ T5926] vhci_hcd: disconnect device [ 426.362952][ T30] audit: type=1400 audit(1758903427.125:291): avc: denied { bind } for pid=6246 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 426.391304][ T30] audit: type=1400 audit(1758903427.125:292): avc: denied { write } for pid=6246 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 426.518470][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6253 comm=syz.2.61 [ 427.931301][ T30] audit: type=1400 audit(1758903428.305:293): avc: denied { unlink } for pid=6260 comm="syz.1.63" name="#1" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 428.051177][ T30] audit: type=1400 audit(1758903428.305:294): avc: denied { mount } for pid=6260 comm="syz.1.63" name="/" dev="overlay" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 428.379242][ T6273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.415313][ T6276] Mount JFS Failure: -22 [ 428.419581][ T6276] jfs_mount failed w/return code = -22 [ 428.425362][ T30] audit: type=1400 audit(1758903429.225:295): avc: denied { mounton } for pid=6274 comm="syz.0.66" path="/12/bus" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 428.460351][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.66'. [ 428.544936][ T6279] block nbd4: Attempted send on invalid socket [ 428.551398][ T6279] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 428.562831][ T6279] EXT4-fs (nbd4): unable to read superblock [ 429.203807][ T6286] overlayfs: failed to resolve './file0': -2 [ 429.257591][ T6284] netlink: 156 bytes leftover after parsing attributes in process `syz.1.68'. [ 429.287540][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 429.975459][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 429.975474][ T30] audit: type=1400 audit(1758903430.785:302): avc: denied { write } for pid=6293 comm="syz.4.71" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 430.004467][ T5867] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 430.186801][ T5867] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 430.197083][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.211969][ T5867] usb 2-1: config 0 descriptor?? [ 430.225035][ T5954] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 430.317641][ T30] audit: type=1400 audit(1758903431.135:303): avc: denied { ioctl } for pid=6302 comm="syz.3.74" path="socket:[9697]" dev="sockfs" ino=9697 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.379565][ T6306] bond0: Removing last ns target with arp_interval on [ 430.379779][ T5926] bond0: (slave bond_slave_0): interface is now down [ 430.394033][ T5926] bond0: (slave bond_slave_1): interface is now down [ 430.415433][ T30] audit: type=1400 audit(1758903431.215:304): avc: denied { write } for pid=6298 comm="syz.0.73" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 430.437989][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 430.460409][ T5954] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 430.478037][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.509733][ T5954] usb 3-1: config 0 descriptor?? [ 430.531236][ T30] audit: type=1400 audit(1758903431.345:305): avc: denied { name_bind } for pid=6309 comm="syz.3.76" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 430.532788][ T5954] gspca_main: sunplus-2.14.0 probing 041e:400b [ 430.646900][ T5867] usb 2-1: Cannot set MAC address [ 430.656907][ T5867] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 430.677849][ T5867] usb 2-1: USB disconnect, device number 3 [ 430.766292][ T5961] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 430.830077][ T30] audit: type=1400 audit(1758903431.645:306): avc: denied { mounton } for pid=6312 comm="syz.4.77" path="/20/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 430.866357][ T30] audit: type=1400 audit(1758903431.655:307): avc: denied { mounton } for pid=6312 comm="syz.4.77" path="/20/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 430.889495][ T30] audit: type=1400 audit(1758903431.665:308): avc: denied { read write } for pid=6312 comm="syz.4.77" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 430.912600][ T30] audit: type=1400 audit(1758903431.665:309): avc: denied { open } for pid=6312 comm="syz.4.77" path="/20/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 430.935072][ T30] audit: type=1800 audit(1758903431.675:310): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.77" name="/" dev="9p" ino=65538 res=0 errno=0 [ 430.955950][ T5961] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 430.965259][ T5961] usb 4-1: config 1 has no interface number 0 [ 430.971338][ T5961] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 431.032397][ T5961] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 431.114938][ T5961] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 247, changing to 11 [ 431.136541][ T5961] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 431.148830][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.156875][ T5961] usb 4-1: Product: syz [ 431.161028][ T5961] usb 4-1: Manufacturer: syz [ 431.171463][ T879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 431.179993][ T5961] usb 4-1: SerialNumber: syz [ 431.197020][ T6311] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 431.304113][ T30] audit: type=1400 audit(1758903432.115:311): avc: denied { accept } for pid=6315 comm="syz.1.78" lport=58684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 431.335836][ T879] usb 5-1: Using ep0 maxpacket: 8 [ 431.343030][ T879] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 431.353771][ T879] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 431.366614][ T879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 431.377756][ T879] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 431.388861][ T879] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.405490][ T879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 431.417882][ T6311] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 431.438004][ T5961] usb 4-1: No status endpoint found [ 431.443286][ T879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 431.458863][ T879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 431.482493][ T879] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 431.497695][ T879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.531347][ T879] usb 5-1: Product: syz [ 431.548822][ T879] usb 5-1: Manufacturer: syz [ 431.560084][ T879] usb 5-1: SerialNumber: syz [ 431.575682][ T5954] gspca_sunplus: reg_r err -110 [ 431.582207][ T5954] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 431.612112][ T879] usb 5-1: config 0 descriptor?? [ 431.618271][ T6313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 431.651267][ T879] hub 5-1:0.0: bad descriptor, ignoring hub [ 431.657647][ T879] hub 5-1:0.0: probe with driver hub failed with error -5 [ 431.679791][ T879] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 431.759138][ T5954] usb 4-1: USB disconnect, device number 4 [ 432.618423][ T5954] usb 3-1: USB disconnect, device number 3 [ 432.913443][ T6336] loop2: detected capacity change from 0 to 7 [ 432.922107][ T5954] usb 5-1: USB disconnect, device number 3 [ 432.945849][ T5895] Dev loop2: unable to read RDB block 7 [ 432.956072][ T5895] loop2: AHDI p1 p2 p3 [ 432.964723][ T5895] loop2: partition table partially beyond EOD, truncated [ 432.973462][ T5895] loop2: p1 start 1601398130 is beyond EOD, truncated [ 432.980475][ T5895] loop2: p2 start 1702059890 is beyond EOD, truncated [ 432.991408][ T6337] capability: warning: `syz.1.82' uses deprecated v2 capabilities in a way that may be insecure [ 433.010790][ T6336] Dev loop2: unable to read RDB block 7 [ 433.022623][ T6336] loop2: AHDI p1 p2 p3 [ 433.033334][ T6336] loop2: partition table partially beyond EOD, truncated [ 433.059662][ T6336] loop2: p1 start 1601398130 is beyond EOD, truncated [ 433.066786][ T6336] loop2: p2 start 1702059890 is beyond EOD, truncated [ 433.258590][ T5219] Dev loop2: unable to read RDB block 7 [ 433.264212][ T5219] loop2: AHDI p1 p2 p3 [ 433.305563][ T5219] loop2: partition table partially beyond EOD, truncated [ 433.345069][ T5867] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 433.379155][ T5219] loop2: p1 start 1601398130 is beyond EOD, truncated [ 433.503866][ T5219] loop2: p2 start 1702059890 is beyond EOD, truncated [ 433.550055][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 433.819441][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16452, setting to 1024 [ 433.831384][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.844335][ T5867] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.853408][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.863434][ T5867] usb 2-1: config 0 descriptor?? [ 434.179750][ T6350] netlink: 9 bytes leftover after parsing attributes in process `syz.3.86'. [ 434.194023][ T6350] gretap0: entered promiscuous mode [ 434.333846][ T5867] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 434.428666][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 434.731863][ T5219] Dev loop2: unable to read RDB block 7 [ 434.748320][ T5219] loop2: AHDI p1 p2 p3 [ 434.771113][ T5219] loop2: partition table partially beyond EOD, truncated [ 434.780438][ T6367] Mount JFS Failure: -22 [ 434.785661][ T6367] jfs_mount failed w/return code = -22 [ 434.793620][ T5219] loop2: p1 start 1601398130 is beyond EOD, truncated [ 434.806789][ T5219] loop2: p2 start 1702059890 is beyond EOD, truncated [ 434.816049][ T6367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 435.166817][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (kworker/1:1) [ 435.399739][ T5867] usb 2-1: USB disconnect, device number 4 [ 435.475954][ T6374] netlink: 'syz.4.91': attribute type 13 has an invalid length. [ 435.944241][ T6378] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 435.950841][ T6378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 436.060701][ T6378] vhci_hcd vhci_hcd.0: Device attached [ 436.089217][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.099275][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.110673][ T6381] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 436.117627][ T6381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 436.136571][ T6381] vhci_hcd vhci_hcd.0: Device attached [ 436.165839][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 436.189075][ T6382] vhci_hcd: connection closed [ 436.190689][ T6183] vhci_hcd: stop threads [ 436.191776][ T6379] vhci_hcd: connection closed [ 436.198296][ T6183] vhci_hcd: release socket [ 436.227903][ T6183] vhci_hcd: disconnect device [ 436.245668][ T6183] vhci_hcd: stop threads [ 436.250002][ T6183] vhci_hcd: release socket [ 436.263191][ T6183] vhci_hcd: disconnect device [ 436.418079][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.434666][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.667546][ T68] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.689365][ T68] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.797123][ T68] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.967563][ T68] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.115558][ T5954] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 437.722047][ T5954] usb 1-1: config 7 interface 0 has no altsetting 0 [ 437.880326][ T5954] usb 1-1: string descriptor 0 read error: -22 [ 437.915833][ T5954] usb 1-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 438.165230][ T6402] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20001 [ 438.174524][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.197450][ T5954] usb 1-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 438.268731][ T5954] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 438.322744][ T5954] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 438.336812][ T5954] usb 1-1: media controller created [ 438.382516][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.407246][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 438.575817][ T879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 438.586831][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 438.586845][ T30] audit: type=1400 audit(1758903439.405:326): avc: denied { read append } for pid=6410 comm="syz.4.102" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 438.597032][ T6416] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 438.631293][ T30] audit: type=1400 audit(1758903439.405:327): avc: denied { open } for pid=6410 comm="syz.4.102" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 438.889935][ T6421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'. [ 438.897777][ T879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.141865][ T6423] netlink: 256 bytes leftover after parsing attributes in process `syz.4.102'. [ 439.394976][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 439.403891][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 439.722223][ T879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.732107][ T879] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.755595][ T30] audit: type=1400 audit(1758903439.405:328): avc: denied { ioctl } for pid=6410 comm="syz.4.102" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 439.781345][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.787809][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.796711][ T879] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.806639][ T879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.820948][ T6416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.838150][ T5954] usb 1-1: USB disconnect, device number 2 [ 439.847712][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.861963][ T6416] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 439.868718][ T879] usb 2-1: config 0 descriptor?? [ 439.950610][ T30] audit: type=1400 audit(1758903440.765:329): avc: denied { search } for pid=5514 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.994402][ T30] audit: type=1400 audit(1758903440.765:330): avc: denied { search } for pid=5514 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.031675][ T30] audit: type=1400 audit(1758903440.765:331): avc: denied { search } for pid=5514 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.090666][ T30] audit: type=1400 audit(1758903440.765:332): avc: denied { read } for pid=5514 comm="dhcpcd" name="n100" dev="tmpfs" ino=2479 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 440.118856][ T30] audit: type=1400 audit(1758903440.765:333): avc: denied { open } for pid=5514 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2479 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 440.158919][ T30] audit: type=1400 audit(1758903440.765:334): avc: denied { getattr } for pid=5514 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2479 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 440.191030][ T6432] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 440.197580][ T6432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 440.214595][ T6432] vhci_hcd vhci_hcd.0: Device attached [ 440.223901][ T6432] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 440.230435][ T6432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 440.239538][ T6432] vhci_hcd vhci_hcd.0: Device attached [ 440.250010][ T6436] vhci_hcd: connection closed [ 440.251072][ T6433] vhci_hcd: connection closed [ 440.271787][ T5926] vhci_hcd: stop threads [ 440.283760][ T5926] vhci_hcd: release socket [ 440.287478][ T30] audit: type=1400 audit(1758903441.095:335): avc: denied { write } for pid=6435 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 440.318710][ T5926] vhci_hcd: disconnect device [ 440.325005][ T5926] vhci_hcd: stop threads [ 440.329799][ T5926] vhci_hcd: release socket [ 440.335738][ T5926] vhci_hcd: disconnect device [ 440.386192][ T5954] vhci_hcd: vhci_device speed not set [ 440.752625][ T879] usbhid 2-1:0.0: can't add hid device: -71 [ 440.772088][ T879] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 440.788571][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 440.813700][ T879] usb 2-1: USB disconnect, device number 5 [ 440.973143][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.996420][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.050214][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 441.080502][ T6456] input: syz1 as /devices/virtual/input/input7 [ 441.195021][ T5961] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 441.214776][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 441.231402][ T10] usb 3-1: SerialNumber: syz [ 441.442134][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 441.455204][ T5961] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 441.529134][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.671538][ T5961] usb 4-1: config 0 descriptor?? [ 441.699382][ T5961] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 441.754190][ T6468] capability: warning: `syz.0.113' uses 32-bit capabilities (legacy support in use) [ 442.988313][ T6493] Mount JFS Failure: -22 [ 442.995048][ T6493] jfs_mount failed w/return code = -22 [ 443.006224][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 443.129451][ T10] usb 3-1: invalid UAC_HEADER (v1) [ 443.608708][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 443.608726][ T30] audit: type=1400 audit(1758903444.425:365): avc: denied { create } for pid=6497 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 443.714996][ T5961] gspca_vc032x: reg_w err -110 [ 443.720321][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.735408][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 443.755391][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.760873][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.772976][ T10] usb 3-1: USB disconnect, device number 4 [ 443.779552][ T30] audit: type=1400 audit(1758903444.425:366): avc: denied { shutdown } for pid=6497 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 443.799373][ T6503] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 443.805952][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.815899][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.824690][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.830451][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.836168][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 443.842625][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.849262][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.849742][ T6501] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 443.861051][ T6501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.861662][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.882959][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.903692][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.905960][ T5895] udevd[5895]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.912380][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.931282][ T6501] vhci_hcd vhci_hcd.0: Device attached [ 443.947143][ T6502] vhci_hcd: connection closed [ 443.952089][ T36] vhci_hcd: stop threads [ 443.961668][ T6505] vhci_hcd: connection closed [ 443.971222][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 443.986169][ T36] vhci_hcd: release socket [ 443.990653][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.002233][ T36] vhci_hcd: disconnect device [ 444.008366][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.029704][ T36] vhci_hcd: stop threads [ 444.039501][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.045725][ T36] vhci_hcd: release socket [ 444.060127][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.068340][ T36] vhci_hcd: disconnect device [ 444.074955][ T879] usb 35-2: new low-speed USB device number 2 using vhci_hcd [ 444.110361][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 444.120468][ T879] usb 35-2: enqueue for inactive port 1 [ 444.130783][ T5961] gspca_vc032x: Unknown sensor... [ 444.145702][ T5961] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 444.204937][ T879] vhci_hcd: vhci_device speed not set [ 444.331292][ T5981] usb 4-1: USB disconnect, device number 5 [ 444.347989][ T30] audit: type=1400 audit(1758903445.165:367): avc: denied { read write } for pid=6509 comm="syz.4.122" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.407091][ T30] audit: type=1400 audit(1758903445.185:368): avc: denied { open } for pid=6509 comm="syz.4.122" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.475955][ T30] audit: type=1400 audit(1758903445.285:369): avc: denied { name_connect } for pid=6512 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 444.554896][ T30] audit: type=1400 audit(1758903445.355:370): avc: denied { read } for pid=6512 comm="syz.0.123" lport=38004 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 444.578124][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.606961][ T5961] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 444.614274][ T30] audit: type=1400 audit(1758903445.415:371): avc: denied { setopt } for pid=6520 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 444.905584][ T5961] usb 5-1: too many configurations: 177, using maximum allowed: 8 [ 444.946070][ T5961] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 444.953674][ T5961] usb 5-1: can't read configurations, error -61 [ 444.982836][ T6541] block nbd2: Attempted send on invalid socket [ 445.022858][ T6541] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 445.120106][ T30] audit: type=1400 audit(1758903445.935:372): avc: denied { setopt } for pid=6545 comm="syz.0.131" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 445.126218][ T6548] binder: BINDER_SET_CONTEXT_MGR already set [ 445.147465][ T5961] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 445.155875][ T6548] binder: 6545:6548 ioctl 4018620d 200000000040 returned -16 [ 445.187106][ T30] audit: type=1400 audit(1758903445.935:373): avc: denied { set_context_mgr } for pid=6545 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 445.224432][ T30] audit: type=1400 audit(1758903445.945:374): avc: denied { map } for pid=6545 comm="syz.0.131" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 445.326554][ T5961] usb 5-1: too many configurations: 177, using maximum allowed: 8 [ 445.360644][ T5961] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 445.384911][ T5961] usb 5-1: can't read configurations, error -61 [ 445.494696][ T6556] netlink: 'syz.0.133': attribute type 10 has an invalid length. [ 445.515449][ T5961] usb usb5-port1: attempt power cycle [ 445.535897][ T6526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.565267][ T6557] netlink: 'syz.0.133': attribute type 10 has an invalid length. [ 445.583774][ T6556] team0: Port device dummy0 added [ 445.655063][ T6557] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 445.715682][ T6557] team0: Failed to send options change via netlink (err -105) [ 445.723302][ T6557] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 445.753518][ T6557] team0: Port device dummy0 removed [ 445.795067][ T6557] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 445.895020][ T5961] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 445.940889][ T5961] usb 5-1: too many configurations: 177, using maximum allowed: 8 [ 445.963354][ T5961] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 445.971305][ T5961] usb 5-1: can't read configurations, error -61 [ 446.108752][ T6561] tmpfs: Unknown parameter 'uslqu' [ 446.324949][ T5961] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 446.368652][ T5961] usb 5-1: too many configurations: 177, using maximum allowed: 8 [ 446.384277][ T6562] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 446.390807][ T6562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.427444][ T5961] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 446.436231][ T5961] usb 5-1: can't read configurations, error -61 [ 446.452108][ T6562] vhci_hcd vhci_hcd.0: Device attached [ 446.460463][ T5961] usb usb5-port1: unable to enumerate USB device [ 446.467081][ T6566] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 446.473671][ T6566] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.509361][ T6569] binder: 6565:6569 ioctl c0306201 200000000540 returned -22 [ 446.525246][ T6566] vhci_hcd vhci_hcd.0: Device attached [ 446.539795][ T6569] bridge_slave_0: left allmulticast mode [ 446.547783][ T6569] bridge_slave_0: left promiscuous mode [ 446.553519][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.576826][ T6569] bridge_slave_1: left allmulticast mode [ 446.597645][ T6567] vhci_hcd: connection closed [ 446.599753][ T6570] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 446.613456][ T6563] vhci_hcd: connection closed [ 446.616867][ T36] vhci_hcd: stop threads [ 446.630917][ T36] vhci_hcd: release socket [ 446.635544][ T36] vhci_hcd: disconnect device [ 446.641495][ T6569] bridge_slave_1: left promiscuous mode [ 446.645596][ T36] vhci_hcd: stop threads [ 446.662248][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.674004][ T36] vhci_hcd: release socket [ 446.691697][ T36] vhci_hcd: disconnect device [ 446.704969][ T879] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 446.713327][ T879] usb 33-1: enqueue for inactive port 0 [ 446.720796][ T6569] bond0: (slave bond_slave_0): Releasing backup interface [ 446.732866][ T6569] bond0: (slave bond_slave_1): Releasing backup interface [ 446.748415][ T6569] team0: Port device team_slave_0 removed [ 446.757142][ T6569] team0: Port device team_slave_1 removed [ 446.763332][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.778234][ T6569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.796164][ T879] vhci_hcd: vhci_device speed not set [ 446.821811][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.838088][ T6569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.899037][ T6570] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 447.081288][ T6578] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 447.089129][ T6578] netlink: 'syz.1.139': attribute type 6 has an invalid length. [ 447.104956][ T6578] netlink: 52 bytes leftover after parsing attributes in process `syz.1.139'. [ 447.294944][ T5981] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 447.645429][ T5981] usb 3-1: Using ep0 maxpacket: 8 [ 447.653668][ T5981] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 447.663761][ T5981] usb 3-1: config 0 has no interface number 0 [ 447.884097][ T6597] loop6: detected capacity change from 0 to 63 [ 448.026830][ T6599] Buffer I/O error on dev loop6, logical block 0, async page read [ 448.035105][ T6599] Buffer I/O error on dev loop6, logical block 0, async page read [ 448.043167][ T6599] Buffer I/O error on dev loop6, logical block 0, async page read [ 448.087509][ T5961] IPVS: starting estimator thread 0... [ 448.215874][ T6600] IPVS: using max 38 ests per chain, 91200 per kthread [ 448.230335][ T5981] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 448.250425][ T5911] Buffer I/O error on dev loop6, logical block 0, async page read [ 448.256154][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.285814][ T5911] Buffer I/O error on dev loop6, logical block 0, async page read [ 448.303130][ T5911] Buffer I/O error on dev loop6, logical block 0, async page read [ 448.307193][ T5981] usb 3-1: config 0 descriptor?? [ 448.312286][ T5911] Buffer I/O error on dev loop6, logical block 0, async page read [ 448.331755][ T5911] Buffer I/O error on dev loop6, logical block 0, async page read [ 448.435456][ T5981] viperboard 3-1:0.143: version 0.00 found at bus 003 address 005 [ 448.534262][ T5981] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 448.545414][ T5981] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 448.626527][ T6010] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 448.636986][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.673746][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.714128][ T6608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.986311][ T6010] usb 4-1: Using ep0 maxpacket: 16 [ 449.007728][ T6010] usb 4-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 449.019618][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.045279][ T6010] usb 4-1: Product: syz [ 449.050487][ T6010] usb 4-1: Manufacturer: syz [ 449.057700][ T6010] usb 4-1: SerialNumber: syz [ 449.075505][ T6010] usb 4-1: config 0 descriptor?? [ 449.096091][ T6010] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 449.321439][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 449.321454][ T30] audit: type=1400 audit(1758903450.135:390): avc: denied { getopt } for pid=6611 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 449.381688][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.147'. [ 449.412822][ T6615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.147'. [ 449.498410][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.504988][ T5899] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 449.507492][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.528064][ T6010] gspca_sn9c20x: Write register 1001 failed -71 [ 449.534455][ T6010] gspca_sn9c20x: Device initialization failed [ 449.542401][ T6010] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 449.572044][ T6010] usb 4-1: USB disconnect, device number 6 [ 449.645467][ T5899] usb 2-1: device descriptor read/64, error -71 [ 449.664978][ T879] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 449.814906][ T879] usb 1-1: Using ep0 maxpacket: 8 [ 449.822318][ T879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 449.833316][ T879] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 449.841775][ T879] usb 1-1: config 7 has no interface number 0 [ 449.848119][ T5961] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 449.855687][ T879] usb 1-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 111, changing to 7 [ 449.867192][ T879] usb 1-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid maxpacket 25702, setting to 1024 [ 449.879400][ T879] usb 1-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.892527][ T879] usb 1-1: config 7 interface 58 has no altsetting 0 [ 449.897238][ T5899] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 449.907723][ T879] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 449.917373][ T879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.925570][ T879] usb 1-1: Product: syz [ 449.929784][ T879] usb 1-1: Manufacturer: Ь [ 449.934285][ T879] usb 1-1: SerialNumber: syz [ 450.013805][ T6010] usb 3-1: USB disconnect, device number 5 [ 450.025038][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 450.042664][ T5961] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 450.056839][ T5899] usb 2-1: device descriptor read/64, error -71 [ 450.076473][ T5961] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.095392][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 450.123044][ T5961] usb 5-1: SerialNumber: syz [ 450.131897][ T6617] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 450.171189][ T6625] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 450.177750][ T6625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.198243][ T5899] usb usb2-port1: attempt power cycle [ 450.204057][ T6625] vhci_hcd vhci_hcd.0: Device attached [ 450.216301][ T6625] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 450.222833][ T6625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.244690][ T6625] vhci_hcd vhci_hcd.0: Device attached [ 450.402634][ T6626] vhci_hcd: connection closed [ 450.408331][ T36] vhci_hcd: stop threads [ 450.418359][ T6628] vhci_hcd: connection closed [ 450.420595][ T36] vhci_hcd: release socket [ 450.431455][ T5961] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 450.453251][ T5961] usb 5-1: USB disconnect, device number 9 [ 450.461013][ T36] vhci_hcd: disconnect device [ 450.478405][ T36] vhci_hcd: stop threads [ 450.493629][ T36] vhci_hcd: release socket [ 450.505231][ T5981] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 450.519709][ T36] vhci_hcd: disconnect device [ 450.523137][ T5981] usb 39-1: enqueue for inactive port 0 [ 450.555051][ T5899] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 450.585941][ T5899] usb 2-1: device descriptor read/8, error -71 [ 450.605228][ T5981] vhci_hcd: vhci_device speed not set [ 450.789450][ T30] audit: type=1400 audit(1758903451.605:391): avc: denied { mounton } for pid=6634 comm="syz.2.154" path="/proc/115/task" dev="proc" ino=11350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 450.845046][ T5899] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 450.865590][ T5899] usb 2-1: device descriptor read/8, error -71 [ 451.056225][ T5899] usb usb2-port1: unable to enumerate USB device [ 451.174489][ T6641] Bluetooth: MGMT ver 1.23 [ 451.281408][ T30] audit: type=1400 audit(1758903451.985:392): avc: denied { write } for pid=6638 comm="syz.3.155" path="socket:[12424]" dev="sockfs" ino=12424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.327641][ T30] audit: type=1400 audit(1758903451.995:393): avc: denied { shutdown } for pid=6638 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.604865][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 451.754952][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 451.770619][ T5899] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.869877][ T5899] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.902825][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.980136][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 452.008056][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.036698][ T5899] usb 5-1: config 0 descriptor?? [ 452.301186][ T879] usb 1-1: USB disconnect, device number 3 [ 452.525757][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 452.532692][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 452.605092][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 452.625552][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 452.642852][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 452.706172][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 452.737326][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 452.759420][ T6645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6645 comm=syz.4.156 [ 452.768077][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 452.784388][ T5981] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 452.807861][ T6645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6645 comm=syz.4.156 [ 452.817221][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 452.941769][ T30] audit: type=1400 audit(1758903453.665:394): avc: denied { write } for pid=6663 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 452.974931][ T5899] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 453.143955][ T5981] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 453.179561][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.263323][ T5169] Bluetooth: hci2: command 0x0401 tx timeout [ 453.269416][ T5903] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 453.370426][ T5899] apple 0003:05AC:0247.0002: collection stack underflow [ 453.377126][ T30] audit: type=1400 audit(1758903453.715:395): avc: denied { read } for pid=6663 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 453.407455][ T30] audit: type=1400 audit(1758903453.745:396): avc: denied { connect } for pid=6670 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 453.426935][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.433275][ T30] audit: type=1400 audit(1758903454.115:397): avc: denied { ioctl } for pid=6663 comm="syz.2.161" path="socket:[12454]" dev="sockfs" ino=12454 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 453.458442][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.466622][ T5981] usb 2-1: Product: syz [ 453.470771][ T5981] usb 2-1: Manufacturer: syz [ 453.487904][ T5899] apple 0003:05AC:0247.0002: item 0 0 0 12 parsing failed [ 453.538287][ T5981] usb 2-1: SerialNumber: syz [ 453.543268][ T5899] apple 0003:05AC:0247.0002: parse failed [ 453.563270][ T5899] apple 0003:05AC:0247.0002: probe with driver apple failed with error -22 [ 453.637894][ T30] audit: type=1400 audit(1758903454.345:398): avc: denied { sys_module } for pid=6663 comm="syz.2.161" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 453.658764][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.667155][ T5899] usb 5-1: USB disconnect, device number 10 [ 455.202569][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 455.214965][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 455.226506][ T5981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 455.269463][ T5981] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 455.349083][ T6692] netlink: 'syz.0.167': attribute type 33 has an invalid length. [ 455.368016][ T6692] netlink: 51 bytes leftover after parsing attributes in process `syz.0.167'. [ 455.409809][ T30] audit: type=1400 audit(1758903456.205:399): avc: denied { create } for pid=6689 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 455.468165][ T5981] usb 2-1: USB disconnect, device number 10 [ 455.529429][ T30] audit: type=1400 audit(1758903456.215:400): avc: denied { write } for pid=6689 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 455.817420][ T6708] mmap: syz.4.169 (6708) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 455.841482][ T6708] netlink: 68 bytes leftover after parsing attributes in process `syz.4.169'. [ 455.863017][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 456.565610][ T6713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46880 sclass=netlink_route_socket pid=6713 comm=syz.0.170 [ 456.985754][ T30] audit: type=1400 audit(1758903457.425:401): avc: denied { read write } for pid=6710 comm="syz.0.170" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 457.009030][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.079119][ T30] audit: type=1400 audit(1758903457.425:402): avc: denied { open } for pid=6710 comm="syz.0.170" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 457.296578][ T879] libceph: connect (1)[c::]:6789 error -101 [ 457.314441][ T879] libceph: mon0 (1)[c::]:6789 connect error [ 457.465328][ T30] audit: type=1400 audit(1758903457.435:403): avc: denied { ioctl } for pid=6710 comm="syz.0.170" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xaea4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 457.490590][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.647141][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 457.675781][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 457.761101][ T30] audit: type=1326 audit(1758903458.135:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.2.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bf958eec9 code=0x0 [ 457.789227][ T30] audit: type=1400 audit(1758903458.315:405): avc: denied { override_creds } for pid=6716 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 457.913363][ T30] audit: type=1400 audit(1758903458.725:406): avc: denied { create } for pid=6731 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 457.934914][ T6717] ceph: No mds server is up or the cluster is laggy [ 458.865703][ T5981] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 458.917665][ T6753] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 458.924199][ T6753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 458.936405][ T6753] vhci_hcd vhci_hcd.0: Device attached [ 459.004952][ T6753] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 459.011499][ T6753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.030182][ T6753] vhci_hcd vhci_hcd.0: Device attached [ 459.045204][ T5981] usb 5-1: device descriptor read/64, error -71 [ 459.623955][ T6758] vhci_hcd: connection closed [ 459.623975][ T6755] vhci_hcd: connection closed [ 459.628822][ T6183] vhci_hcd: stop threads [ 459.650802][ T6762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.669061][ T6183] vhci_hcd: release socket [ 459.827766][ T6183] vhci_hcd: disconnect device [ 459.847960][ T6183] vhci_hcd: stop threads [ 459.853330][ T6183] vhci_hcd: release socket [ 459.865709][ T24] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 459.881058][ T30] audit: type=1400 audit(1758903460.645:407): avc: denied { read open } for pid=6765 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.913240][ T6183] vhci_hcd: disconnect device [ 459.934935][ T5981] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 459.952497][ T30] audit: type=1400 audit(1758903460.645:408): avc: denied { getattr } for pid=6765 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.125945][ T5981] usb 5-1: device descriptor read/64, error -71 [ 460.235627][ T5981] usb usb5-port1: attempt power cycle [ 460.325266][ T6780] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 460.477990][ T6780] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 460.575038][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 460.575076][ T30] audit: type=1400 audit(1758903461.345:410): avc: denied { add_name } for pid=6763 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.630364][ T5981] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 460.987383][ T30] audit: type=1400 audit(1758903461.695:411): avc: denied { create } for pid=6763 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 461.009740][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.017968][ T6787] loop6: detected capacity change from 0 to 63 [ 461.033588][ T30] audit: type=1400 audit(1758903461.695:412): avc: denied { write } for pid=6763 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 461.059691][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.077828][ T5867] IPVS: starting estimator thread 0... [ 461.090183][ T6010] IPVS: starting estimator thread 0... [ 461.120733][ T5981] usb 5-1: device descriptor read/8, error -71 [ 461.144224][ T30] audit: type=1400 audit(1758903461.695:413): avc: denied { append } for pid=6763 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 461.264984][ T6793] IPVS: using max 47 ests per chain, 112800 per kthread [ 461.281706][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.297095][ T6790] IPVS: using max 39 ests per chain, 93600 per kthread [ 461.316674][ T30] audit: type=1326 audit(1758903462.085:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e478eec9 code=0x7ffc0000 [ 461.345545][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.353866][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.390127][ T6010] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 461.404253][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.422916][ T30] audit: type=1326 audit(1758903462.085:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e478eec9 code=0x7ffc0000 [ 461.446124][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.459378][ T6665] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.525871][ T30] audit: type=1326 audit(1758903462.085:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f83e478eec9 code=0x7ffc0000 [ 461.579054][ T5904] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.586102][ T30] audit: type=1326 audit(1758903462.085:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e478eec9 code=0x7ffc0000 [ 461.610050][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.613250][ T5904] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.624493][ T92] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 461.632470][ T6010] usb 1-1: Using ep0 maxpacket: 32 [ 461.646004][ T6010] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 461.664540][ T6010] usb 1-1: config 0 has no interface number 0 [ 461.672570][ T5904] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.685145][ T6010] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 461.705687][ T5904] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.714071][ T5904] Buffer I/O error on dev loop6, logical block 0, async page read [ 461.732907][ T5981] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 461.742660][ T6010] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 461.761589][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.774415][ T5981] usb 5-1: device descriptor read/8, error -71 [ 461.781517][ T92] usb 2-1: device descriptor read/64, error -71 [ 461.790474][ T30] audit: type=1326 audit(1758903462.085:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e478eec9 code=0x7ffc0000 [ 461.814652][ T30] audit: type=1326 audit(1758903462.085:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83e478eec9 code=0x7ffc0000 [ 461.826012][ T6010] usb 1-1: Product: syz [ 461.867535][ T6010] usb 1-1: Manufacturer: syz [ 461.872414][ T6010] usb 1-1: SerialNumber: syz [ 461.881520][ T6010] usb 1-1: config 0 descriptor?? [ 461.902007][ T6010] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 461.905179][ T5947] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 461.913964][ T6010] em28xx 1-1:0.132: Video interface 132 found: [ 461.930116][ T5981] usb usb5-port1: unable to enumerate USB device [ 462.057747][ T92] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 462.078202][ T5947] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 462.088569][ T5947] usb 3-1: config 0 has no interface number 0 [ 462.094703][ T5947] usb 3-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 462.112905][ T5947] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.122993][ T5947] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 462.132275][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.145606][ T5947] usb 3-1: config 0 descriptor?? [ 462.163297][ T5947] cxacru 3-1:0.109: cxacru_bind: interface has incorrect endpoints [ 462.174952][ T5947] cxacru 3-1:0.109: usbatm_usb_probe: bind failed: -19! [ 462.205007][ T92] usb 2-1: device descriptor read/64, error -71 [ 462.313711][ T6010] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 462.325187][ T92] usb usb2-port1: attempt power cycle [ 462.383190][ T6815] ======================================================= [ 462.383190][ T6815] WARNING: The mand mount option has been deprecated and [ 462.383190][ T6815] and is ignored by this kernel. Remove the mand [ 462.383190][ T6815] option from the mount to silence this warning. [ 462.383190][ T6815] ======================================================= [ 462.428630][ T6815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 462.453268][ T6815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 462.475941][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.495789][ T6841] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 462.507480][ T6841] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 462.518308][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.529382][ T5947] usb 3-1: USB disconnect, device number 6 [ 462.628180][ T6843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.046058][ T92] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 463.087158][ T92] usb 2-1: device descriptor read/8, error -71 [ 463.475818][ T92] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 463.573122][ T92] usb 2-1: device descriptor read/8, error -71 [ 463.745839][ T6010] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 463.771923][ T6010] em28xx 1-1:0.132: board has no eeprom [ 463.798264][ T92] usb usb2-port1: unable to enumerate USB device [ 463.846198][ T6010] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 463.864339][ T6010] em28xx 1-1:0.132: analog set to bulk mode. [ 463.879873][ T92] em28xx 1-1:0.132: Registering V4L2 extension [ 463.978913][ T92] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 463.993021][ T92] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 464.083376][ T92] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 464.098496][ T92] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 464.165966][ T879] usb 1-1: USB disconnect, device number 4 [ 464.172683][ T879] em28xx 1-1:0.132: Disconnecting em28xx [ 464.285281][ T92] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 464.304843][ T92] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 464.328268][ T92] em28xx 1-1:0.132: No AC97 audio processor [ 464.367142][ T92] usb 1-1: Decoder not found [ 464.410329][ T92] em28xx 1-1:0.132: failed to create media graph [ 464.454211][ T92] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 464.998770][ T6879] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 465.005328][ T6879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 465.013857][ T24] vhci_hcd: vhci_device speed not set [ 465.046031][ T6879] vhci_hcd vhci_hcd.0: Device attached [ 465.046780][ T92] em28xx 1-1:0.132: Remote control support is not available for this card. [ 465.065220][ T6877] ================================================================== [ 465.073309][ T6877] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 465.080787][ T6877] Read of size 8 at addr ffff888033a50740 by task v4l_id/6877 [ 465.088241][ T6877] [ 465.090565][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 465.090588][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.090599][ T6877] Call Trace: [ 465.090604][ T6877] [ 465.090611][ T6877] dump_stack_lvl+0x116/0x1f0 [ 465.090637][ T6877] print_report+0xcd/0x630 [ 465.090656][ T6877] ? __virt_addr_valid+0x81/0x610 [ 465.090678][ T6877] ? __phys_addr+0xe8/0x180 [ 465.090700][ T6877] ? v4l2_fh_init+0x27d/0x2c0 [ 465.090721][ T6877] kasan_report+0xe0/0x110 [ 465.090741][ T6877] ? v4l2_fh_init+0x27d/0x2c0 [ 465.090763][ T6877] v4l2_fh_init+0x27d/0x2c0 [ 465.090785][ T6877] v4l2_fh_open+0x83/0xc0 [ 465.090803][ T6877] em28xx_v4l2_open+0x24e/0x7e0 [ 465.090825][ T6877] v4l2_open+0x225/0x490 [ 465.090844][ T6877] ? __pfx_v4l2_open+0x10/0x10 [ 465.090862][ T6877] chrdev_open+0x234/0x6a0 [ 465.090884][ T6877] ? __pfx_chrdev_open+0x10/0x10 [ 465.090905][ T6877] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 465.090927][ T6877] do_dentry_open+0x97f/0x1530 [ 465.090945][ T6877] ? __pfx_chrdev_open+0x10/0x10 [ 465.090968][ T6877] vfs_open+0x82/0x3f0 [ 465.090991][ T6877] path_openat+0x1de4/0x2cb0 [ 465.091013][ T6877] ? __pfx_path_openat+0x10/0x10 [ 465.091035][ T6877] do_filp_open+0x20b/0x470 [ 465.091055][ T6877] ? __pfx_do_filp_open+0x10/0x10 [ 465.091073][ T6877] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.091101][ T6877] ? alloc_fd+0x471/0x7d0 [ 465.091122][ T6877] do_sys_openat2+0x11b/0x1d0 [ 465.091142][ T6877] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.091164][ T6877] ? rcu_is_watching+0x12/0xc0 [ 465.091184][ T6877] __x64_sys_openat+0x174/0x210 [ 465.091203][ T6877] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.091227][ T6877] do_syscall_64+0xcd/0x4e0 [ 465.091246][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.091262][ T6877] RIP: 0033:0x7fd0466a7407 [ 465.091274][ T6877] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 465.091288][ T6877] RSP: 002b:00007ffff78c76c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 465.091302][ T6877] RAX: ffffffffffffffda RBX: 00007fd046d6f880 RCX: 00007fd0466a7407 [ 465.091311][ T6877] RDX: 0000000000000000 RSI: 00007ffff78c7f1b RDI: ffffffffffffff9c [ 465.091320][ T6877] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 465.091329][ T6877] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 465.091337][ T6877] R13: 00007ffff78c7910 R14: 00007fd046ed6000 R15: 0000564aa0dd04d8 [ 465.091351][ T6877] [ 465.091356][ T6877] [ 465.341445][ T6877] Allocated by task 92: [ 465.345578][ T6877] kasan_save_stack+0x33/0x60 [ 465.350241][ T6877] kasan_save_track+0x14/0x30 [ 465.354891][ T6877] __kasan_kmalloc+0xaa/0xb0 [ 465.359457][ T6877] em28xx_v4l2_init+0x114/0x4080 [ 465.364376][ T6877] em28xx_init_extension+0x13a/0x200 [ 465.369644][ T6877] request_module_async+0x61/0x70 [ 465.374643][ T6877] process_one_work+0x9cc/0x1b70 [ 465.379561][ T6877] worker_thread+0x6c8/0xf10 [ 465.384133][ T6877] kthread+0x3c2/0x780 [ 465.388179][ T6877] ret_from_fork+0x56a/0x730 [ 465.392745][ T6877] ret_from_fork_asm+0x1a/0x30 [ 465.397491][ T6877] [ 465.399792][ T6877] Freed by task 92: [ 465.403570][ T6877] kasan_save_stack+0x33/0x60 [ 465.408226][ T6877] kasan_save_track+0x14/0x30 [ 465.412882][ T6877] kasan_save_free_info+0x3b/0x60 [ 465.417888][ T6877] __kasan_slab_free+0x60/0x70 [ 465.422628][ T6877] kfree+0x2b4/0x4d0 [ 465.426507][ T6877] em28xx_v4l2_init+0x22b5/0x4080 [ 465.431511][ T6877] em28xx_init_extension+0x13a/0x200 [ 465.436779][ T6877] request_module_async+0x61/0x70 [ 465.441778][ T6877] process_one_work+0x9cc/0x1b70 [ 465.446694][ T6877] worker_thread+0x6c8/0xf10 [ 465.451262][ T6877] kthread+0x3c2/0x780 [ 465.455307][ T6877] ret_from_fork+0x56a/0x730 [ 465.459873][ T6877] ret_from_fork_asm+0x1a/0x30 [ 465.464619][ T6877] [ 465.466919][ T6877] The buggy address belongs to the object at ffff888033a50000 [ 465.466919][ T6877] which belongs to the cache kmalloc-8k of size 8192 [ 465.480956][ T6877] The buggy address is located 1856 bytes inside of [ 465.480956][ T6877] freed 8192-byte region [ffff888033a50000, ffff888033a52000) [ 465.494913][ T6877] [ 465.497217][ T6877] The buggy address belongs to the physical page: [ 465.503608][ T6877] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33a50 [ 465.512345][ T6877] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 465.520819][ T6877] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 465.528774][ T6877] page_type: f5(slab) [ 465.532741][ T6877] raw: 00fff00000000040 ffff88801b842280 0000000000000000 dead000000000001 [ 465.541324][ T6877] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 465.549898][ T6877] head: 00fff00000000040 ffff88801b842280 0000000000000000 dead000000000001 [ 465.558555][ T6877] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 465.567205][ T6877] head: 00fff00000000003 ffffea0000ce9401 00000000ffffffff 00000000ffffffff [ 465.575857][ T6877] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 465.584500][ T6877] page dumped because: kasan: bad access detected [ 465.590886][ T6877] page_owner tracks the page as allocated [ 465.596575][ T6877] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6197, tgid 6196 (syz.4.48), ts 423345793129, free_ts 423311191472 [ 465.617743][ T6877] post_alloc_hook+0x1c0/0x230 [ 465.622495][ T6877] get_page_from_freelist+0x132b/0x38e0 [ 465.628019][ T6877] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 465.633887][ T6877] alloc_pages_mpol+0x1fb/0x550 [ 465.638724][ T6877] new_slab+0x247/0x330 [ 465.642882][ T6877] ___slab_alloc+0xcf2/0x1750 [ 465.647551][ T6877] __slab_alloc.constprop.0+0x56/0xb0 [ 465.652915][ T6877] __kmalloc_cache_noprof+0xfb/0x3e0 [ 465.658188][ T6877] audit_log_d_path+0xe7/0x200 [ 465.662934][ T6877] audit_log_d_path_exe+0x46/0x70 [ 465.667933][ T6877] audit_log_task+0x31d/0x3f0 [ 465.672591][ T6877] audit_seccomp+0x79/0x290 [ 465.677083][ T6877] __seccomp_filter+0x7b6/0xea0 [ 465.681915][ T6877] __secure_computing+0x287/0x3b0 [ 465.686942][ T6877] syscall_trace_enter+0x89/0x240 [ 465.691946][ T6877] do_syscall_64+0x36d/0x4e0 [ 465.696518][ T6877] page last free pid 5219 tgid 5219 stack trace: [ 465.702819][ T6877] __free_frozen_pages+0x7d5/0x10f0 [ 465.708001][ T6877] __put_partials+0x165/0x1c0 [ 465.712661][ T6877] qlist_free_all+0x4d/0x120 [ 465.717243][ T6877] kasan_quarantine_reduce+0x195/0x1e0 [ 465.722700][ T6877] __kasan_slab_alloc+0x69/0x90 [ 465.727550][ T6877] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 465.732987][ T6877] getname_flags.part.0+0x4c/0x550 [ 465.738085][ T6877] getname_flags+0x93/0xf0 [ 465.742482][ T6877] do_sys_openat2+0xb8/0x1d0 [ 465.747054][ T6877] __x64_sys_openat+0x174/0x210 [ 465.751889][ T6877] do_syscall_64+0xcd/0x4e0 [ 465.756376][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.762265][ T6877] [ 465.764565][ T6877] Memory state around the buggy address: [ 465.770169][ T6877] ffff888033a50600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.778207][ T6877] ffff888033a50680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.786249][ T6877] >ffff888033a50700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.794296][ T6877] ^ [ 465.800426][ T6877] ffff888033a50780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.808462][ T6877] ffff888033a50800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.816497][ T6877] ================================================================== [ 465.922141][ T6877] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 465.929385][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 465.938331][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.948391][ T6877] Call Trace: [ 465.951664][ T6877] [ 465.954578][ T6877] dump_stack_lvl+0x3d/0x1f0 [ 465.959168][ T6877] vpanic+0x6e8/0x7a0 [ 465.963163][ T6877] ? __pfx_vpanic+0x10/0x10 [ 465.967668][ T6877] ? v4l2_fh_init+0x27d/0x2c0 [ 465.972329][ T6877] panic+0xca/0xd0 [ 465.976026][ T6877] ? __pfx_panic+0x10/0x10 [ 465.980429][ T6877] ? v4l2_fh_init+0x27d/0x2c0 [ 465.985089][ T6877] ? preempt_schedule_common+0x44/0xc0 [ 465.990548][ T6877] ? preempt_schedule_thunk+0x16/0x30 [ 465.995906][ T6877] ? check_panic_on_warn+0x1f/0xb0 [ 466.000998][ T6877] check_panic_on_warn+0xab/0xb0 [ 466.005914][ T6877] end_report+0x107/0x170 [ 466.010223][ T6877] kasan_report+0xee/0x110 [ 466.014629][ T6877] ? v4l2_fh_init+0x27d/0x2c0 [ 466.019290][ T6877] v4l2_fh_init+0x27d/0x2c0 [ 466.023774][ T6877] v4l2_fh_open+0x83/0xc0 [ 466.028087][ T6877] em28xx_v4l2_open+0x24e/0x7e0 [ 466.032920][ T6877] v4l2_open+0x225/0x490 [ 466.037140][ T6877] ? __pfx_v4l2_open+0x10/0x10 [ 466.041882][ T6877] chrdev_open+0x234/0x6a0 [ 466.046281][ T6877] ? __pfx_chrdev_open+0x10/0x10 [ 466.051200][ T6877] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 466.057509][ T6877] do_dentry_open+0x97f/0x1530 [ 466.062276][ T6877] ? __pfx_chrdev_open+0x10/0x10 [ 466.067202][ T6877] vfs_open+0x82/0x3f0 [ 466.071265][ T6877] path_openat+0x1de4/0x2cb0 [ 466.075844][ T6877] ? __pfx_path_openat+0x10/0x10 [ 466.080770][ T6877] do_filp_open+0x20b/0x470 [ 466.085264][ T6877] ? __pfx_do_filp_open+0x10/0x10 [ 466.090270][ T6877] ? lockdep_hardirqs_on+0x7c/0x110 [ 466.095459][ T6877] ? alloc_fd+0x471/0x7d0 [ 466.099772][ T6877] do_sys_openat2+0x11b/0x1d0 [ 466.104431][ T6877] ? __pfx_do_sys_openat2+0x10/0x10 [ 466.109619][ T6877] ? rcu_is_watching+0x12/0xc0 [ 466.114369][ T6877] __x64_sys_openat+0x174/0x210 [ 466.119204][ T6877] ? __pfx___x64_sys_openat+0x10/0x10 [ 466.124563][ T6877] do_syscall_64+0xcd/0x4e0 [ 466.129065][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.134938][ T6877] RIP: 0033:0x7fd0466a7407 [ 466.139336][ T6877] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 466.158926][ T6877] RSP: 002b:00007ffff78c76c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 466.167319][ T6877] RAX: ffffffffffffffda RBX: 00007fd046d6f880 RCX: 00007fd0466a7407 [ 466.175277][ T6877] RDX: 0000000000000000 RSI: 00007ffff78c7f1b RDI: ffffffffffffff9c [ 466.183226][ T6877] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 466.191176][ T6877] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 466.199126][ T6877] R13: 00007ffff78c7910 R14: 00007fd046ed6000 R15: 0000564aa0dd04d8 [ 466.207082][ T6877] [ 466.210318][ T6877] Kernel Offset: disabled [ 466.214628][ T6877] Rebooting in 86400 seconds..