last executing test programs: 1m49.249066924s ago: executing program 2 (id=474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000018000100000000240b55cb0002000000000000070000000008001680040001000600150001"], 0x2c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, r5) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x20) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x600, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x43) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1m46.849679756s ago: executing program 2 (id=477): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x5, 0x5}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x1, 0x0, 0x0, 0x80000}]}, 0x10) listen(r0, 0x0) shutdown(r0, 0x0) 1m46.680614883s ago: executing program 2 (id=479): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) io_submit(0x0, 0x0, &(0x7f0000000800)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000600)={"f34eea1395bcec63f0b182bccec9a0fd", 0x0, 0x0, {0x6, 0x3}, {0x6, 0x8}, 0x400000080000020, [0x0, 0x10000, 0x9, 0x6, 0x7, 0x3, 0x5, 0xffffffffffffffff, 0xa02e, 0x2fb, 0x829b, 0x8, 0x2, 0xffbfffffffffffff, 0x6635, 0x9]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%\xde({F\xfaA:', 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r7, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded724070800010002"], 0x150}}, 0x0) 1m45.459221139s ago: executing program 2 (id=480): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x10000000) (async) epoll_create(0x10000000) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd7, 0xcc, 0x73, 0x20, 0x856, 0xac30, 0x7e79, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe1, 0x0, 0x0, 0xde, 0xf5, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2042, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) 1m41.534310268s ago: executing program 2 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x33565348, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x4af}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x1fd, 0x17}], 0x7b, 0x2, 0x3, 0x2, 0x4}}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0x7c07e000) (rerun: 32) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000140)={0x400, 0x300, 0x0, 0x2000, 0x5, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0x11, 0x1, 0x0, 0x0, 0xffffffff, 0x761a, 0x0, 0x3, 0x0, 0x10, 0x1, 0x0, 0x1}) (async) getsockopt(r7, 0x5, 0x80000001, &(0x7f00000004c0)=""/241, &(0x7f0000000280)=0xf1) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) ftruncate(r10, 0xffffffffffffffff) (async, rerun: 32) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 1m40.301142726s ago: executing program 2 (id=494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r2 = dup3(r1, r0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x2010000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x9a, 0x0, &(0x7f0000000740)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) write$proc_mixer(r2, &(0x7f00000002c0)=[{'MIC', @void}, {'TREBLE', @void}, {'DIGITAL2', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'PHONEOUT', @val={' \'', 'Mic Capture Switch'}}, {'PHONEOUT', @void}, {'PHONEOUT', @void}, {'ALTPCM', @void}], 0x8b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f0000000080)=0x1) 1m25.184914604s ago: executing program 32 (id=494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r2 = dup3(r1, r0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x2010000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x9a, 0x0, &(0x7f0000000740)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) write$proc_mixer(r2, &(0x7f00000002c0)=[{'MIC', @void}, {'TREBLE', @void}, {'DIGITAL2', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'PHONEOUT', @val={' \'', 'Mic Capture Switch'}}, {'PHONEOUT', @void}, {'PHONEOUT', @void}, {'ALTPCM', @void}], 0x8b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f0000000080)=0x1) 3.59942834s ago: executing program 5 (id=1275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) (async) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) (async) preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) (async) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 3.529442503s ago: executing program 5 (id=1277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000200)) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x1) (async) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20440, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff08000000"]}, 0x138) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000001c0)=0xb279) (async) recvmmsg(r4, &(0x7f0000003040)=[{{&(0x7f0000000a40)=@sco={0x1f, @none}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000000b40)=""/209, 0xd1}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/48, 0x30}, {&(0x7f0000001c80)=""/39, 0x27}, {&(0x7f0000001cc0)=""/150, 0x96}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/22, 0x16}], 0x7}, 0xc}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002e40)=""/75, 0x4b}, {&(0x7f0000002ec0)=""/202, 0xca}], 0x2, &(0x7f0000003000)=""/42, 0x2a}, 0x4}, {{&(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/84, 0x54}, {&(0x7f0000003140)=""/129, 0x81}, {&(0x7f0000003200)=""/256, 0xf6}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000880)=""/47, 0x2f}, {&(0x7f00000008c0)=""/100, 0x64}], 0x7, &(0x7f00000009c0)=""/85, 0x55}, 0x25b}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/66, 0x42}], 0x1, &(0x7f0000000300)=""/182, 0xc8}, 0x81}], 0x4, 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r10, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000400)={0x8, r9}) 3.181010545s ago: executing program 0 (id=1287): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) close_range(r2, r4, 0x2) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2d69000584b319", @ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYRESHEX=r0, @ANYRES8=r0]) symlink(&(0x7f0000003040)='./file0\x00', &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 3.127168152s ago: executing program 0 (id=1290): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) semget$private(0x0, 0x4, 0x4c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x20, 0x8, 0xa0, {0xa0, 0xd, "3c5302a9aa97d63553b3affab63ca2b9aa69e7010d6b6d88f64ff392df7492b1a25b7cba33754b3a8ccf5b881e4e06dd5bee030131014267e7b88e42cd1e8c90a35dc3c51f28baeb5a52d7241df794f9418a72787b5078fdcd001b2c823ba39b28d193f45cc851578e6cd4f4006c6f89869946a71dadbcb5f51d7f1eca5c5177b4ca848b1cc83ce4e1177cf7be7bcaff7ed6e3d8af5cf9a27f7688af8007"}}, 0x0}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 2.628864939s ago: executing program 5 (id=1297): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x5, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @default]}) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000005c0)={0x0, 0xec25, 0x8, 0x1, 0x40000331}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000002000000000000110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b70200000000000085000000a0000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = memfd_create(&(0x7f0000000b80)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x01\x00C\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}\x94\xfd\x00T.\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfcC\x1ag\vP', 0xb) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x44000, 0x0) fchmod(r5, 0x188) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.562940505s ago: executing program 5 (id=1299): syz_io_uring_setup(0x5d2, &(0x7f0000000600)={0x0, 0x3597, 0x80, 0x1, 0x21e}, &(0x7f0000000400)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0xa0028000}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r5) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x129, 0x111500) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000140)=0x5) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1f4, 0x54}, 0x9c) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 2.297006892s ago: executing program 3 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) socket$netlink(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x30}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c729, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000180)=[{r1, 0x2}, {0xffffffffffffffff, 0x200}, {r1, 0x82}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="70cd26bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r3, @ANYBLOB="5ad10d6cf2278f2027171dce1554d77c754747ab9e4400000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x96, 0xb}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x1, 0x2dd, 0x1000000, 0x0, "e300"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143143, 0x80) ftruncate(r6, 0x2007ffb) 2.276829744s ago: executing program 4 (id=1303): timer_create(0x6, &(0x7f0000000040)={0x0, 0x2, 0x1}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000140)) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x0, 0x5}}]}}}]}}]}}, 0x0) syslog(0x2, &(0x7f0000000480)=""/19, 0x13) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "27e66ac9"}]}}, 0x0}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@random="37a454c624f7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x15, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x81}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.229227966s ago: executing program 0 (id=1304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x62040600) (async) unshare(0x62040600) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x305481, 0x183) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x140081, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x140081, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04f, 0x35e8b531, 0x1, 0x8001, 0x13, "53af0f0b63cff73e00000000e800"}) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04f, 0x35e8b531, 0x1, 0x8001, 0x13, "53af0f0b63cff73e00000000e800"}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) (async) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) setpriority(0x1, r3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x20000000001, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.996866821s ago: executing program 1 (id=1305): r0 = syz_io_uring_setup(0x27d1, &(0x7f00000000c0)={0x0, 0xe090, 0x80, 0x3, 0x8}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005900)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2}, 0x40000102) sendmmsg$inet(r2, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f000000c640)="4dea2e9fc630f1670cf70c207e43667038bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27981ce35b449f192aec94239f56e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xdc}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b0600000000000000407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f000000c5c0)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="25bbf953d9e63a86502326a91bcb452d049906b8663a98ffd6eb4a9471a6b34a725ae193d99db3d460f7bc4aed2217ef4f96211bcb85f3c5b29b0357cb5526a2bf026fce752e9453032fe77673f0bf89cd0d842e437d5d7c0a6af5493a6160e4019655e7ec27c1566b7e5c625149dc633e4c132a9118796e0dae4b094d7030d37e3b268c2da4c0716e9c9da8be9ad79d176059ed950c425404eee5c70a91acb3a80fa82c61d5637be14a66056edc33e8111e50e43eadc326d80dd63563cf75b7dc86f5aa26ac30bc812b0a4244625753", 0xd0}, {&(0x7f0000000600)="c88b24f13e46650376bd62b2a4a9e5529d9c1d28afea7a51dc9057907876a2b013890ed7000000000000000000", 0x2d}, {&(0x7f0000000640)="2d8535ae0c438abd0bc4f58c4e3b", 0xe}, {&(0x7f00000003c0)="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", 0x12b}, {&(0x7f0000000800)="dfda34e3ee7dda93a0aeed729cd5cabedf707118f5cf8acfe7747fccf72b6612754caddf60baf2dbe649d3fe02595d224cf75c98174effb4bb82011113ff74b68dc8a2c49e31b3f9576f654b87b67e4e1599c5f0eaa01acb7e6aaf2ad51cb7b0cb2463d665daddf0bd903aa0e78c0912a84c1b3ff60a75dff896f3e8ef5ac614a8223484e5662ab03b927cb375820928976f3f6c4aba8ff8c5cd4671e8f46d1670f45379e9a15d4e27ec2b0a1fd6fbe11c482169b34525f89ced9acc31f6d22df3914597f296aa7b01efcd849bc089e84da99e84b07f22e5f2a4d557f7a7eb86dee45a986a87ba29447a33f15f62be723a5b", 0xf2}, {&(0x7f0000000900)="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", 0xb0e}], 0x6}}], 0x2, 0x8058) r3 = syz_open_procfs(0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000380)={0x90000008}) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x80000000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0xf4, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r7 = gettid() sched_setscheduler(r7, 0x2, &(0x7f0000000400)=0xc29e) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="28400103000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) 1.707757208s ago: executing program 5 (id=1306): r0 = gettid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setresuid(0x0, 0xee01, 0x0) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) (async) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) (async) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x13, 0x7c5, 0x0, 0x0, 0x1, 0x4, 0xf, 0x6, 0x8, 0x5, 0x9, 0x7, 0x80000000, 0x7, 0x2b, 0xc, {0x6}, 0x3, 0xf1}}) (async) r5 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x5aa7, 0x10100, 0x1, 0x0, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)='0', 0x1}, {&(0x7f0000000180)="f3a83ac723e4c5e246f5b2e8b1edbde42194bf1e506e2341f5187be0b17fed8d493f64d6dd1a10598248f8c5f91143e8ddbc47485217", 0x36}, {&(0x7f0000000440)="37b177c27e1aa3cedfb9225131fb0d87d78ddf8e044e2504412cec7a7d7c2871b313085d9e38d5f157ee45a1581828caf7feaf4227dc5ae4dce29c40a683f31c418f1bcfc80024027996637bc7eff7549d26c254ba9cb2799494de9b8d64d4955a749389f0c3ef5f6ca402d359a05ced3c07d0bb32fd80f92fdc140e0310fba0487b319459451ffe5acc93e325b11ee0561819f3b9603c3d43bb6febb146f913e4a3f5091945d334a86dd7030cda4bc45a738d6d44a6152e53791c2b4f04e042c2a9a8bafb229c34aa858451dd79a15b6b94f48c177da7cd998d7d2012d28981dfdfd6ae86", 0xe5}, {&(0x7f00000001c0)="6134b1fade24e59a35abadd2fc24f4b94fd162c9fc67676b3809c2bb573cf2b2d91bc3286e8278678f882835a3a99effb8fc0d8c72557d2b0ab5324ec41e97ccf7f7bb1230eb0c947d837f6e279337958cf35c67c62b3f634443bbdc182a15f8dc1f4b", 0x63}, {&(0x7f0000000540)="a51844222fd4e66366a5f45618df8388e156ded50f21019cf571d96bc5f304876889596050ee1fd56cd1d6ed28a29cf585f259fb7a213bf22e5a70d1bc2108d72c150f2ba723240307e3b118aae8a0b782a78cf60f7d4cc7c259edc35f036dd3ea99f2435cb77776b3fb2ef911ca573c8aaf381115755babb919e829253ef2bd6088fde072069f1c2b47a3b2ab55854b9b7bddd7fc9ac8994b5005078c8e95ba44c88a8d4e5033f44153dcedc4ce409bd8a460678185620e5c808ef40f4d", 0xbe}], 0x5}) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="44030080"], 0x20}}, 0x0) io_uring_enter(r5, 0x5113, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) (async, rerun: 64) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async, rerun: 32) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3cc, 0x10c, 0x0, 0x0, 0x2ec, 0x2ec, 0x2ec, 0x4, 0x0, {[{{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0xffffff00, 0x4, 0xc, {@mac=@multicast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x7, 0xb, 0x4d, 0x0, 0x3f, 0x3, 'bond_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x0, 0x200}, 0xbc, 0x137}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast2, 0x8, 0xe160d06a8d2bae75}}}, {{@arp={@local, @empty, 0xffffff00, 0xff000000, 0x3, 0xa, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x1fe, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0x0, 0x0, 0x0, 0x1fe]}}, 0x800, 0x9, 0x3, 0x1, 0xfff, 0xb, 'vlan0\x00', 'gre0\x00', {}, {}, 0x0, 0x8}, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0xc2, {0x1}}}}, {{@arp={@broadcast, @local, 0xff, 0x0, 0x0, 0xe, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x6, 0x8, 0x400, 0x8, 0x0, 'bridge0\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x40}, 0xbc, 0xe4}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x6, 0x3}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x418) (async, rerun: 32) ioctl$TCSETS(r10, 0x8925, 0x0) (async, rerun: 32) r12 = syz_open_procfs(r0, &(0x7f0000000240)='clear_refs\x00') writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async, rerun: 32) ioctl$FIONREAD(r12, 0x541b, &(0x7f00000000c0)) (rerun: 32) 1.627184118s ago: executing program 5 (id=1307): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x700, @in6={0x1b, 0x0, 0x7, @loopback}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0x2}, 0x5, 0x4, &(0x7f0000000080)="50548bbeda971af38ce5256ceb22dacd643a8d6f5acadac95de85136d83671b12a72614a8269df1e8e1763449bcc739530435b0b1a310e01855b0379087b330014", 0x41, 0x2, 0x1ff, 0x4f, 0x7ff, 0x6, &(0x7f0000000140)="e367e3a6549496a73187d620ca10640fa9da95663cf6bcc2b3af7f138196aaa78ed690ae43f5795fa562f60f7b2de232e45ca4ff854752a07f1b3fa792f153b26b16736b4df7d7e99769fd2595dd0a68b4c42a7a325befeb750d8bc48f9222cfcf37299fff95a66398108003f61976c7d1ba82593b4c00eade326939d898638546b244a09c2af9e1de5ca9ebe86803aac474a659ca912e18daeb6a64856a375694ed6f9135de3a7c2dd13646983222705d130e98ee4d6d91039d75b9ee55e2f65c3f41dbda57d05960d6a38c0cbabf378f", [{0x6, 0x1, 0x3}, {0x8, 0x9, 0x4}, {0x1, 0x8, 0x3}, {0x6f, 0x3, 0xfa}, {0x7ff, 0x3, 0x401}, {0x5, 0x6, 0xf2}, {0x7f, 0x2, 0x4}, {0x24b, 0x6, 0x6}, {0x7, 0x6, 0x7}, {0x0, 0x2, 0x1}, {0x1, 0x8, 0xfffffff9}, {0x9, 0x7, 0x1}, {0x3000000, 0x2, 0x6}, {0x0, 0x40, 0x7}, {0x0, 0x0, 0xa}, {0x34, 0x1fe0, 0x200}, {0x1, 0x3, 0xa}, {0xed, 0x2, 0xe1}, {0x14559ba9, 0xffffffff, 0x3}, {0x2f9, 0x2, 0x2}, {0x8, 0xf, 0x4}, {0xa9, 0x1, 0x400}, {0x2, 0xfda5, 0xfffffffb}, {0x8, 0x7, 0x3}, {0x3c, 0xfb1, 0x401}, {0xbdd, 0xfffff021, 0x9}, {0x0, 0x3, 0x2}, {0xfffffff8, 0x7f, 0x4}, {0x17446403, 0x0, 0x4}, {0xfffffc01, 0x38000000, 0xf3}, {0x8, 0x7, 0xfff}, {0x8001, 0x5, 0x80000000}, {0x6, 0x1, 0x1}, {0x6, 0xfffffffc, 0x7}, {0x3ff, 0xe, 0x9}, {0x0, 0x6, 0x2}, {0x4, 0xfffffff8, 0x200}, {0x4, 0x7fff, 0x40}, {0x0, 0x1dd, 0x7}, {0xecc0, 0x6, 0x3}, {0x9, 0x4, 0x7cf}, {0x9, 0x6, 0x7f}, {0x8, 0x0, 0x3}, {0x7f, 0xc4b, 0x6}, {0xc109, 0x3, 0x3}, {0x95b8, 0x6, 0x2}, {0x740, 0x7, 0x1}, {0x8, 0x2, 0x7}, {0x100, 0x8, 0x3}, {0x3e, 0xffff0000, 0x7fffffff}, {0x20f2, 0x1, 0x9}, {0x5, 0x7, 0xcb0}, {0x7, 0x8, 0x7}, {0x7fff, 0xc, 0x9}, {0x3, 0x2, 0x9}, {0xb7, 0x0, 0x3}, {0x5, 0x2, 0x6}, {0x0, 0x6, 0x7}, {0x7fffffff, 0x8, 0x3}, {0x68, 0x77b, 0x75}, {0x3, 0x6, 0x9}, {0x7, 0x9f0, 0x5}, {0x2, 0x1, 0x3}, {0x4, 0x9f4, 0x3}, {0x0, 0x8, 0x3}, {0x7f, 0x3, 0x7ff}, {0xd, 0xfffffffa, 0x6}, {0x0, 0xfff, 0x2}, {0x9, 0x2, 0x800}, {0x5, 0x9, 0x5}, {0x5, 0x6a96, 0x3}, {0xcbf8, 0x4424}, {0x5, 0x9f, 0x1}, {0xfffffa7f, 0x1d, 0x4}, {0x6, 0xf2, 0x2}, {0x5, 0x1, 0x6}, {0x2, 0x8, 0x10001}, {0x5, 0x3, 0xfffffffc}, {0xc58, 0x5, 0x6}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) move_mount(r2, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = memfd_create(&(0x7f00000006c0)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r9, &(0x7f00000003c0)=""/146) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) 1.484471175s ago: executing program 4 (id=1308): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000140)=0x2, 0x4) sendto$inet(r1, &(0x7f0000000000)="fa", 0x1, 0x20000000, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x1) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0xad57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 1.458705629s ago: executing program 3 (id=1309): close(0xffffffffffffffff) userfaultfd(0x80801) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000500), &(0x7f0000000600)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x1000, 0x1, 0x1}, 0x0, &(0x7f0000001540)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000000280)={{0x2, 0x200, 0x7, 0x8, 0x5, 0x6}, 0x2c8, [0xc3, 0x1, 0x800, 0x1, 0x2, 0x2, 0x8, 0xd7, 0x7, 0xfffffffd, 0x5, 0x5, 0x4, 0x1ff, 0x7, 0x1d88, 0x7f, 0x0, 0x800, 0x2, 0xfffffffe, 0xeab5, 0x3de, 0x7f, 0x5, 0x2, 0x3, 0x9, 0x6, 0x6, 0x8, 0x3, 0x3, 0x2, 0x1, 0x800, 0x3, 0xa, 0xe069, 0xabfc, 0x40, 0x9, 0x6, 0x2, 0x2, 0x7ff, 0x3, 0x3, 0x1, 0x1000, 0x0, 0x4, 0x1, 0x1, 0x2, 0xffffffff, 0x5, 0xffffff3b, 0xffffffff, 0x10, 0x2, 0x9, 0x4, 0x3, 0x7fff, 0xe, 0x100, 0x8, 0x0, 0x800, 0x101, 0x4, 0x40, 0x0, 0x40, 0x8f4, 0xfffffffb, 0x2, 0x5, 0x0, 0x1, 0x610, 0x0, 0x4cda00, 0x7f, 0x9, 0x8, 0x3, 0x7463fb26, 0xe, 0xed0, 0x8, 0x401, 0x401, 0x77, 0x4, 0x0, 0x9, 0x6, 0xd555, 0x1, 0x6, 0x814, 0x66, 0x1, 0x0, 0x1000, 0x7, 0x10, 0x3, 0x200, 0x9, 0x10001, 0xc, 0x3, 0x1, 0x652, 0x4, 0x8, 0xd, 0xcd9a, 0x8, 0xea, 0x9, 0xffffffff, 0x4, 0x5, 0x8001, 0x9, 0x1, 0x81, 0xc0000000, 0xfc9, 0x7f, 0x8, 0x3, 0x80, 0x10000, 0x6018, 0x4, 0x8, 0x1, 0x5, 0x51f9, 0x200, 0x80, 0x6, 0x0, 0x0, 0x8, 0x7, 0x2, 0x2, 0x1000, 0x8001, 0x4, 0xffffffff, 0xb, 0x1, 0x1, 0x6, 0xdb3, 0x7, 0x1, 0x1, 0x1, 0x2, 0x1, 0xd0b, 0x4, 0x9, 0x401, 0x2, 0xa7b7, 0x1, 0x2, 0xcb, 0x5, 0x8, 0x6, 0x6, 0x55a7, 0x7, 0x6, 0x100, 0x4, 0x0, 0xfffff9e1, 0x7971, 0x4, 0x10e, 0x7, 0x1, 0xa, 0x0, 0xb28, 0x1, 0x0, 0x2, 0x5e, 0xf, 0x3ff, 0x1ba, 0x2, 0x80000001, 0x7, 0x81, 0x7, 0x8, 0x401, 0x1, 0x8ed3, 0xfffffffd, 0x9c9, 0x400, 0xffffffff, 0x8000, 0xffffff7f, 0xfffffc00, 0x2, 0x3, 0x6, 0xffffff8f, 0x3, 0x6, 0x0, 0x9, 0xdd4, 0x3725, 0xffffffff, 0xffffffff, 0x9, 0x3, 0xfc, 0x3, 0x3, 0x4, 0xffffffd7, 0x4, 0x46b, 0x6, 0x2, 0xf, 0x9, 0x92f7, 0x5, 0x3, 0x1a, 0xf, 0x3, 0x3, 0x2ed, 0xe, 0x8, 0xdda97fa, 0xfdff, 0xd, 0x0, 0x10, 0xffffffc8, 0x7, 0x3, 0x7, 0x9, 0xfffffffa, 0x7ff, 0x4, 0x7, 0x0, 0x9, 0x6f14b72c, 0x3, 0xe2, 0x770, 0x7fff, 0x1, 0x1, 0x401, 0x3eb, 0x6, 0x0, 0x400, 0x6, 0x2f04, 0xff, 0x3443eef2, 0x92, 0x4, 0x6, 0x5, 0x2, 0x0, 0x8, 0x400, 0x6, 0x1, 0x9, 0x0, 0x1, 0x3, 0x4, 0x0, 0x3, 0x6, 0xcf, 0x0, 0x4, 0x0, 0x80000001, 0x4, 0x6, 0x7fffffff, 0x9, 0x6, 0xad0, 0x3, 0xffff31fe, 0x3, 0x8b7a, 0x7ff, 0x7ff, 0x0, 0x8001, 0x1, 0xfffffff7, 0x2, 0x40, 0x5, 0x800, 0x4000, 0x2, 0x7f, 0x400, 0x200, 0x4, 0xfffffffe, 0x5, 0x2f23, 0x10, 0x9, 0x4, 0xc, 0xe, 0xe108132e, 0x16, 0x80000001, 0x9, 0x6, 0x400, 0x145b, 0x9, 0x5, 0x80, 0x2, 0x63, 0x5, 0x6, 0x40, 0x6, 0x7, 0x2, 0x5, 0x9302, 0x38b, 0x3, 0xf, 0x99, 0xe75, 0x8, 0x1, 0x1, 0x4, 0x7, 0x4d, 0x9, 0x101, 0x9, 0x5, 0x7, 0x0, 0x7, 0x4, 0x7, 0xfffffff9, 0x1, 0x3, 0x3, 0x7, 0xd7, 0xb, 0xffffffff, 0xe, 0x1, 0x5, 0x10000000, 0x1ff, 0x0, 0xf, 0x40, 0xffffffff, 0xc, 0x1, 0xffff, 0x0, 0x552, 0x4, 0x2, 0xfffffcfc, 0x5, 0x81, 0xd, 0x2, 0xfffffffc, 0x6033, 0x3ff, 0xad29, 0x7, 0x10, 0x1000, 0x10001, 0x7, 0x6a6, 0x7f, 0x2, 0x7f, 0x9, 0x2, 0x7, 0x7fffffff, 0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0xfffffffa, 0x7ee, 0x101, 0x6f57a6b6, 0x4, 0x100, 0x1, 0x6e4, 0x7, 0x9, 0x1000, 0x8, 0x3ff, 0x8, 0x0, 0x9, 0x64af, 0xec5, 0x7, 0x0, 0x4, 0xffff, 0x1fb, 0x7, 0xd48, 0x2, 0x0, 0xde4, 0x7, 0x8, 0x5, 0x200, 0x7f, 0x187, 0x8, 0x2, 0xffffffe0, 0x7, 0xfff0000, 0x5, 0x0, 0x7, 0x9eb7, 0x2, 0x70, 0x8, 0xa, 0x80000001, 0x2000000, 0x7fffffff, 0x9, 0x3, 0x400, 0x0, 0xd, 0x0, 0x1, 0x5, 0x80000001, 0x0, 0x2, 0xe, 0x5a4d, 0xa, 0xffffff7f, 0x6, 0x2, 0xf, 0x6, 0x2, 0x0, 0x4, 0x6, 0x17b, 0x3, 0xf, 0xa2a, 0x2, 0x4, 0xf7, 0x1, 0x10, 0x400, 0xf, 0x7fffffff, 0xfffffff0, 0x3650, 0xd, 0x1, 0x8e, 0x4, 0x6, 0x3, 0x8, 0x3, 0x1, 0x7ff, 0x80000001, 0x7, 0xfff, 0x9, 0x80000001, 0x8, 0x7fffffff, 0xa, 0x4, 0x1, 0x1, 0xff, 0x1bb8, 0x5, 0x1, 0x200, 0x80, 0x15ce4190, 0x3e7, 0x6, 0x48c0607a, 0x2, 0x2, 0x2, 0xa, 0x2, 0x7, 0x6, 0x0, 0x9, 0x2, 0x7f, 0x4, 0x3, 0x8, 0x5, 0x7, 0x7, 0x7, 0x4, 0xfffffffd, 0x6, 0x9, 0x1, 0x3, 0xff, 0x7, 0x2, 0x1, 0x6, 0x9, 0x3, 0xdda, 0x51b0, 0x7a0, 0x2, 0x6, 0x3, 0x4, 0x0, 0x6, 0x80000000, 0x3, 0x6, 0x5, 0x1, 0xeab, 0x1, 0x0, 0x651, 0x100, 0x7fff, 0x399261d, 0xd, 0x6, 0x21b, 0x8, 0x5c407ba7, 0xffff0000, 0x0, 0x7f, 0xfffffff9, 0xaa, 0x6, 0x10, 0x8, 0x9, 0x5eef, 0x1, 0xd, 0x6e91, 0x5, 0xf57, 0x8, 0x8, 0x6, 0x8ce, 0x1, 0x3c, 0x7, 0xb33, 0x400, 0x1, 0x7f, 0x6, 0xfffffff8, 0x8, 0x5, 0x4, 0x40, 0x8000000, 0x3, 0x96, 0x2e, 0x6, 0x10, 0x0, 0x9b55, 0x80000000, 0x1, 0x3f5, 0x5, 0x5, 0x1b01, 0x7, 0x2, 0x9, 0xe, 0x3, 0x9, 0x0, 0x4, 0x0, 0x5, 0x8, 0x5, 0x0, 0xc6, 0x1, 0x2, 0x8001, 0x9, 0x1, 0x5, 0xdc5d, 0x5, 0x200, 0x100, 0x6, 0xfffffff8, 0x4, 0x7, 0x2, 0x2dff49b5, 0x0, 0x0, 0x800, 0xfff, 0x4, 0x7ab8e1a7, 0x9, 0x8, 0x0, 0x2, 0x80, 0x5, 0x8f, 0x7, 0x7, 0x2, 0x8, 0x3, 0x6084, 0x7f, 0x9, 0x8, 0x6, 0x0, 0xfffffffe, 0x5a9, 0xfffffff7, 0x5, 0x9, 0x6, 0x0, 0x2, 0x4a, 0x81, 0x8, 0x7, 0x2, 0x8001, 0x4, 0x8, 0x800, 0x5, 0xf91, 0x8, 0x4, 0x5cd, 0x5, 0xfffffffd, 0x6, 0x0, 0x7, 0x6, 0xb31, 0x77, 0x6, 0x2, 0x6, 0x1b0, 0x2ba551a7, 0x0, 0x5, 0x2, 0x200, 0x9, 0x6, 0x2, 0x401, 0x95e9, 0x40000, 0x8, 0x1, 0x3, 0x7, 0x401, 0x3, 0x0, 0x8, 0x3000000, 0x0, 0x0, 0xfffffff8, 0x2, 0xcc7e, 0x8, 0x1, 0x2, 0x101, 0x8, 0xfffffff9, 0x0, 0xffff, 0xe3c, 0x7f, 0x5, 0x8b8, 0x9, 0x5, 0xc5, 0x5, 0x5, 0x0, 0x524, 0x2, 0x6, 0x19e4cf1a, 0x7, 0x6d39, 0x4, 0xfff, 0xc, 0x2, 0x7ae1, 0xf6, 0xfffffffb, 0x0, 0x5b21, 0x0, 0x1, 0xb, 0x8, 0x9, 0x7, 0x400, 0xfff, 0x7, 0x2, 0x1, 0xfff, 0x0, 0x6, 0xc000, 0x8, 0xf7d4, 0x1, 0x0, 0x3, 0x7, 0x8, 0x8001, 0x1, 0x0, 0x5, 0xfd55, 0x7, 0x3, 0x8, 0x5, 0x2, 0x9, 0x0, 0x1, 0x993e, 0x401, 0x2, 0x7fff, 0x7, 0x1, 0x3ff, 0x800, 0x2, 0x1, 0x8, 0x9f2, 0x5, 0x200, 0x3ff, 0x400, 0x2, 0x0, 0x6, 0xd6c, 0x1, 0x1, 0x40, 0xffff0000, 0x81, 0x5, 0x800, 0x0, 0x5, 0x7fffffff, 0xe, 0x4df, 0x2, 0x25, 0x8, 0x3, 0x5d6, 0x80000000, 0x1, 0x3f6d, 0xfffffffc, 0x1, 0x1, 0x8, 0x8, 0x7fffffff, 0x2, 0x9, 0xffff, 0x100, 0x5, 0x10000, 0xc109, 0x1, 0xaf, 0x100, 0x4, 0x77, 0x9dc6, 0x9, 0x3, 0x4, 0x5, 0x7ff, 0x1, 0x95, 0xff, 0x6bb6, 0x7, 0x1, 0x7fff, 0x2c0000, 0x100, 0x0, 0xd, 0x0, 0xfffffffb, 0x4000, 0xe02, 0xae, 0x6, 0xb, 0x8, 0xa, 0x8, 0x9, 0xfffffffa, 0x7, 0x1, 0x7ff, 0xe, 0x524a010b, 0x6, 0x3, 0x7f, 0x8b6, 0x8, 0xae22, 0x2, 0x9, 0x1, 0x6, 0xcb, 0x9, 0x400, 0x59, 0x9, 0x104c, 0x2, 0x6fa4b840, 0x8, 0x200, 0x4e, 0x58c1c853, 0x10001, 0x6, 0x3ff, 0x10000, 0x10001, 0x594, 0x1000, 0x10000, 0xf, 0x0, 0x1, 0x45d8, 0x5, 0x14, 0x5, 0x7, 0xf, 0x1, 0x401, 0x9c6, 0xfffff5a6, 0x0, 0xffff, 0x2, 0x7ff, 0x8, 0x0, 0x6, 0x888d, 0x6, 0x8541, 0xf8a9, 0x4, 0x3, 0x9c5d, 0x6, 0x1, 0x10001, 0x24d, 0x5, 0x3, 0x4ed, 0x0, 0xdf, 0x1, 0x8, 0x0, 0x0, 0x1000, 0x8db, 0xb, 0x4, 0x4, 0xf, 0xfffff001, 0x5, 0x7, 0xfd00, 0x40, 0x4e, 0xc0, 0x3, 0x26, 0x4, 0x7, 0x9, 0xfffffa0e, 0x45e9, 0xdceb, 0x8, 0x0, 0x73e5, 0x7ff]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a480f0000060a090400000000000000000200ffff0900f80073797a32000000000900010073797a30000000010100048018000180080001406c6f67000c0002800800064000000002140000001100010000000000000000000000000ae36ac06c9e8ca06cfd2bddfda077b4b62a040047af2ff690c3a864bc8eed193bc6c4cad68bd697a00b244a43e65b3c5abfc093f6e58610ee5cf1acf0431e0c"], 0x70}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 1.399023684s ago: executing program 1 (id=1310): syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.293047567s ago: executing program 1 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.286498649s ago: executing program 0 (id=1312): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d00000001090224000100000000090400"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 1.093681973s ago: executing program 3 (id=1313): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/78, 0x4e}], 0x1}, 0x40020000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r5, 0x200000002, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 1.076970925s ago: executing program 4 (id=1314): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x3ff, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x7, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x4001c00) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)='r', 0x1}], 0x1}}], 0x1, 0x4c040) syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000300)) mknod(&(0x7f0000000040)='./file0\x00', 0xaa504579ad4e1bcd, 0xea) socket(0x10, 0x3, 0x0) 893.132539ms ago: executing program 3 (id=1315): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5785}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40) 887.511358ms ago: executing program 3 (id=1316): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f000000070000000c000000ff"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fanotify_init(0x4, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x71, 0x1038, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1) recvfrom(r1, 0x0, 0x0, 0xc0006020, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x799c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x799c, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="1121e5", 0x3}, 0x1, 0x0, 0x0, 0x48811}, 0xc0e4) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 836.828796ms ago: executing program 3 (id=1317): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003080)=""/4095, 0xfff}, {&(0x7f0000002040)=""/4098, 0x1002}, {&(0x7f0000000b00)=""/284, 0x11c}, {&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f0000000540)=""/222, 0xde}], 0x6}, 0x0) r6 = io_uring_setup(0x7bda, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x17, 0x20000000, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x1, "61060077223668cef4050004000000000000008ca4e586d84a500000000800", 0x3147504d}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000080)={0x1, r10, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c) listen(r11, 0x3) setsockopt$inet6_int(r11, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) r12 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000180)={r13, 0x0, 0x0, 0x9}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000088000000"], 0x0) 673.024783ms ago: executing program 0 (id=1318): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000300), &(0x7f0000000400)=""/154}, 0x20) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)=0x8) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x25dfdbfc, {{@in=@private=0xa010102, @in=@multicast2, 0xffff, 0x2, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private2, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0x959}, {0x40000, 0x2, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x10}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0xb1036b1ab2a305f9, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 663.048093ms ago: executing program 1 (id=1319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x0, 0x132a7d03, 0x8, 0x2, 0x0, [{0x40, 0x81, 0x3, '\x00', 0x5}, {0x5, 0x1, 0xb, '\x00', 0x7f}, {0x6, 0x81, 0x1, '\x00', 0x5}, {0x3, 0x4, 0xfc, '\x00', 0xb}, {0x1, 0x2, 0x81, '\x00', 0x4f}, {0x9, 0x3, 0x8c, '\x00', 0x8}, {0x0, 0x1, 0x81, '\x00', 0x6}, {0x8, 0x4, 0x6, '\x00', 0x2}, {0x7, 0x9, 0x7f, '\x00', 0xee}, {0x6, 0xa, 0x2, '\x00', 0x3}, {0x4, 0x3, 0x42, '\x00', 0xd5}, {0x6f, 0x1, 0x3a, '\x00', 0x7}, {0x49, 0x24, 0x3, '\x00', 0x10}, {0x4, 0x8, 0x4, '\x00', 0xd8}, {0x6, 0x7, 0xff, '\x00', 0xfc}, {0x0, 0x4, 0x1, '\x00', 0xe}, {0x10, 0x5, 0x9, '\x00', 0x1}, {0xd5, 0x3, 0x6, '\x00', 0x4}, {0x3, 0x9, 0x16, '\x00', 0x7}, {0x0, 0x6, 0x5f, '\x00', 0x10}, {0x80, 0x5, 0x1, '\x00', 0x3}, {0x30, 0xc, 0x3d, '\x00', 0xc0}, {0x0, 0x3, 0x9, '\x00', 0x1}, {0x3, 0x0, 0x1, '\x00', 0x5}]}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) fchown(r2, 0x0, 0x0) 608.376099ms ago: executing program 1 (id=1320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x40b5, &(0x7f0000000440)={0x0, 0x5f9, 0x0, 0x0, 0x37d}) syz_io_uring_setup(0x400110, &(0x7f00000003c0)={0x0, 0xfad6, 0x138, 0x3, 0x1, 0x0, r1}, 0x0, &(0x7f0000002a00)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) utime(0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') syz_open_dev$cec(0x0, 0x0, 0xa0000) 585.907449ms ago: executing program 0 (id=1321): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1f00c8b9}) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0xfffc, 0x4, 0x1, 0x8af6, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x1}) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000340)=0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x7f) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) (async, rerun: 64) sendmmsg$inet(r6, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="36941f147bd8af2bb06a20423d709d72de47b522aa5cd1c1", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)}}], 0x2, 0x0) (async, rerun: 64) shutdown(r6, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000340), 0x11000) (async) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) 447.987276ms ago: executing program 1 (id=1322): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaa04aaaabbbbc0bbbbbb86dd607f00ef00142c00fe84000000000005eb000000000000bbff000000000000000700000000000000d1a09b9844210c907801000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r2, 0x40045436, 0x3) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000010000000200000700e8", @ANYRES32=0x1, @ANYBLOB='\b\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000200"/28], 0x50) getsockopt$inet6_buf(r4, 0x29, 0x45, 0x0, &(0x7f0000000080)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r6 = getpid() syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(r5, r5, 0x0, 0xb) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 393.979935ms ago: executing program 4 (id=1323): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r2}, 0x14) (async) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) (async) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x1404c891) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYRES16=r4], 0x1000f) (async) sendto$inet6(r1, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x10aa93ab85b5c584}) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000300)=0x2) (async) read(r6, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x40) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="0200ffff", 0x4, 0x0, 0x0, 0x2}]) (async) socket$pppoe(0x18, 0x1, 0x0) 320.87149ms ago: executing program 4 (id=1324): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000240), 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x7c}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001540)) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async, rerun: 32) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x5) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0), 0xc) (async) write$cgroup_subtree(r3, 0x0, 0x5) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000d, 0x100016, r2, 0x13f8000) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={0x0, 0x6, 0x6, 0x0, 0x3, [0x0], [0x6, 0x1, 0x2, 0x20024], [0xffffffff, 0x9da1, 0x7ff, 0x57a], [0x97d, 0xffff, 0x5, 0xfffffffffffffffc]}) (async, rerun: 32) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000000640)={0x0, 0x4}) (async, rerun: 32) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYRES64=r8, @ANYRESHEX=r7]) (rerun: 64) 0s ago: executing program 4 (id=1325): keyctl$instantiate(0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x2d, 0xfffffffffffffff9) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x102, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_dev$video4linux(0x0, 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r5, 0x400, 0x0) (async) fcntl$setown(r5, 0x8, 0x0) (async, rerun: 64) fcntl$setlease(r5, 0x400, 0x2) (async, rerun: 64) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f00000000c0)={{0x95, 0x1}, 'port1\x00', 0x0, 0x11006c, 0x2, 0x22, 0x3, 0x0, 0x200, 0x0, 0x0, 0x3}) kernel console output (not intermixed with test programs): 7fce1798e929 code=0x7ffc0000 [ 189.371766][ T30] audit: type=1326 audit(1751982848.851:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 189.371803][ T30] audit: type=1326 audit(1751982848.851:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 189.371841][ T30] audit: type=1326 audit(1751982848.851:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 189.515847][ T5898] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.515874][ T5898] usb 1-1: config 0 has no interface number 0 [ 189.515912][ T5898] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 189.515933][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.530218][ T5898] usb 1-1: config 0 descriptor?? [ 189.532899][ T5898] usb 1-1: selecting invalid altsetting 1 [ 189.533520][ T5898] dvb_ttusb_budget: ttusb_init_controller: error [ 189.533533][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 189.676402][ T5898] DVB: Unable to find symbol cx22700_attach() [ 189.839175][ T7613] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 189.839246][ T7611] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 190.328854][ T5898] DVB: Unable to find symbol tda10046_attach() [ 190.328868][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 191.612992][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.398'. [ 191.656926][ T5884] usb 1-1: USB disconnect, device number 33 [ 192.819029][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.401'. [ 192.828163][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'. [ 193.314888][ T7644] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 193.773445][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 193.805502][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.816325][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.456881][ T7662] CUSE: unknown device info "" [ 194.466306][ T7662] CUSE: zero length info key specified [ 195.127056][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 195.214929][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 195.214946][ T30] audit: type=1400 audit(1751982854.831:492): avc: denied { ioctl } for pid=7672 comm="syz.3.412" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.390507][ T30] audit: type=1400 audit(1751982856.001:493): avc: denied { read } for pid=7689 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.548031][ T30] audit: type=1400 audit(1751982856.161:494): avc: denied { create } for pid=7693 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 196.620606][ T5884] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 196.802326][ T7700] sp0: Synchronizing with TNC [ 197.501819][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.515971][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.529513][ T5884] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.540493][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.548559][ T5884] usb 5-1: SerialNumber: syz [ 197.661494][ T30] audit: type=1400 audit(1751982857.271:495): avc: denied { bind } for pid=7701 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.680619][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.811129][ T5884] usb 5-1: 0:2 : does not exist [ 198.040748][ T5884] usb 5-1: USB disconnect, device number 22 [ 198.369862][ T7714] netlink: 'syz.4.426': attribute type 1 has an invalid length. [ 198.510851][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.426'. [ 198.535603][ T7714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.552892][ T7719] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.563337][ T7719] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.595172][ T7719] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.605040][ T7719] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.673600][ T7719] bond1: (slave geneve2): making interface the new active one [ 198.717723][ T7719] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 199.020691][ T5913] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 199.188569][ T7736] fuse: root generation should be zero [ 199.208686][ T30] audit: type=1400 audit(1751982858.821:496): avc: denied { append } for pid=7737 comm="syz.4.430" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.231854][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.270490][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 199.310653][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.321706][ T5913] usb 3-1: config 249 interface 0 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 199.349768][ T5913] usb 3-1: config 249 interface 0 has no altsetting 0 [ 199.374839][ T5913] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=92.b2 [ 199.407927][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.441081][ T5913] usb 3-1: Product: syz [ 199.445271][ T5913] usb 3-1: Manufacturer: syz [ 199.470153][ T5913] usb 3-1: SerialNumber: syz [ 199.550762][ T48] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 199.689140][ T30] audit: type=1400 audit(1751982859.301:497): avc: denied { lock } for pid=7730 comm="syz.2.427" path="socket:[16752]" dev="sockfs" ino=16752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.713234][ T5898] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 199.722465][ T5913] usb 3-1: ucan: probing device on interface #0 [ 199.724699][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'. [ 199.737807][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 199.757031][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 199.760303][ T7745] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 199.762363][ T5913] usb 3-1: ucan: invalid EP count (1) [ 199.777835][ T48] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.788564][ T5913] usb 3-1: ucan: probe failed; try to update the device firmware [ 199.798213][ T48] usb 4-1: config 4 has an invalid interface number: 143 but max is 0 [ 199.817414][ T48] usb 4-1: config 4 has no interface number 0 [ 199.823982][ T5913] usb 3-1: USB disconnect, device number 26 [ 199.831368][ T48] usb 4-1: config 4 interface 143 has no altsetting 0 [ 199.844320][ T48] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=c8.48 [ 199.854181][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.862703][ T48] usb 4-1: Product: syz [ 199.866984][ T48] usb 4-1: Manufacturer: syz [ 199.871975][ T48] usb 4-1: SerialNumber: syz [ 199.932235][ T5898] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 199.946959][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.983546][ T5898] usb 5-1: config 0 descriptor?? [ 200.117134][ T48] powermate 4-1:4.143: probe with driver powermate failed with error -5 [ 200.142382][ T48] usb 4-1: USB disconnect, device number 24 [ 201.359177][ T7759] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 201.720626][ T7761] overlay: Unknown parameter 'fowner>00000000000000000000' [ 202.234983][ T30] audit: type=1400 audit(1751982861.851:498): avc: denied { create } for pid=7764 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.309704][ T30] audit: type=1400 audit(1751982861.881:499): avc: denied { connect } for pid=7764 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.425182][ T5898] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 202.488481][ T30] audit: type=1326 audit(1751982862.091:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7770 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 202.522513][ T7772] syz.1.440 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 202.544266][ T5898] [drm:udl_init] *ERROR* Selecting channel failed [ 202.661553][ T5898] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 202.668275][ T5898] [drm] Initialized udl on minor 2 [ 202.764688][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 202.773667][ T7782] bridge_slave_1: left allmulticast mode [ 202.779336][ T7782] bridge_slave_1: left promiscuous mode [ 202.785483][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.805203][ T30] audit: type=1326 audit(1751982862.091:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7770 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 202.862455][ T5898] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 203.116995][ T7782] bridge_slave_0: left allmulticast mode [ 203.124016][ T7782] bridge_slave_0: left promiscuous mode [ 203.130514][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.218254][ T30] audit: type=1326 audit(1751982862.091:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7770 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 203.261082][ T5898] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 203.267942][ T5955] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 203.314329][ T5955] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 203.323982][ T5898] usb 5-1: USB disconnect, device number 23 [ 203.331521][ T30] audit: type=1326 audit(1751982862.091:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7770 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 203.378755][ T5955] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 203.431206][ T7777] lo speed is unknown, defaulting to 1000 [ 203.508483][ T7777] lo speed is unknown, defaulting to 1000 [ 203.610658][ T30] audit: type=1326 audit(1751982862.091:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7770 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 203.635363][ T30] audit: type=1326 audit(1751982862.091:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7770 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 203.659787][ T30] audit: type=1326 audit(1751982862.091:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7770 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 203.685345][ T30] audit: type=1326 audit(1751982862.091:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7770 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce1798e929 code=0x7ffc0000 [ 204.140503][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 204.398948][ T7804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.425589][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 204.513975][ T7804] team0 (unregistering): Port device team_slave_0 removed [ 204.526806][ T7804] team0 (unregistering): Port device team_slave_1 removed [ 204.539429][ T7804] team0 (unregistering): Port device batadv1 removed [ 204.667708][ T7805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.447'. [ 204.677169][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 204.688340][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.707430][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 204.749291][ T9] usb 4-1: config 0 descriptor?? [ 205.234118][ T7808] Bluetooth: MGMT ver 1.23 [ 205.850961][ T7805] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 207.376163][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.451'. [ 207.859952][ T7822] fuse: Bad value for 'fd' [ 208.228583][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 208.656644][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 208.717859][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 208.725520][ T9] [drm] Initialized udl on minor 2 [ 208.734425][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 208.752644][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 208.769047][ T976] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 208.782759][ T9] usb 4-1: USB disconnect, device number 25 [ 208.789167][ T976] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 208.918299][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.454'. [ 209.249370][ T7831] syz.0.456: attempt to access beyond end of device [ 209.249370][ T7831] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 209.262554][ T7831] SQUASHFS error: Failed to read block 0x0: -5 [ 209.322146][ T7833] netlink: 'syz.4.457': attribute type 39 has an invalid length. [ 209.467843][ T7837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.458'. [ 209.610532][ T5898] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 209.712119][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 209.712135][ T30] audit: type=1400 audit(1751982869.331:547): avc: denied { listen } for pid=7838 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.738724][ T30] audit: type=1400 audit(1751982869.351:548): avc: denied { ioctl } for pid=7838 comm="syz.4.459" path="socket:[16375]" dev="sockfs" ino=16375 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.850614][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 209.874473][ T5898] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 209.883514][ T7840] netlink: 164 bytes leftover after parsing attributes in process `syz.4.459'. [ 210.006486][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.062657][ T5898] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 210.107126][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.277775][ T7844] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.571925][ T30] audit: type=1400 audit(1751982869.891:549): avc: denied { setopt } for pid=7843 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 210.757105][ T30] audit: type=1400 audit(1751982870.171:550): avc: denied { bind } for pid=7843 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 210.999440][ T5898] usb 4-1: config 0 descriptor?? [ 211.032173][ T7855] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 211.135990][ T30] audit: type=1400 audit(1751982870.181:551): avc: denied { connect } for pid=7843 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 211.236337][ T7855] overlayfs: overlapping lowerdir path [ 211.277103][ T7854] syz.0.462: attempt to access beyond end of device [ 211.277103][ T7854] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 211.290123][ T7854] SQUASHFS error: Failed to read block 0x0: -5 [ 211.649911][ T30] audit: type=1400 audit(1751982871.261:552): avc: denied { ioctl } for pid=7867 comm="syz.0.467" path="socket:[16984]" dev="sockfs" ino=16984 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 211.683830][ T7869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.825512][ T7869] bond0: (slave rose0): Enslaving as an active interface with an up link [ 212.533029][ T30] audit: type=1400 audit(1751982872.151:553): avc: denied { ioctl } for pid=7880 comm="syz.4.470" path="socket:[17001]" dev="sockfs" ino=17001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.618191][ T30] audit: type=1400 audit(1751982872.181:554): avc: denied { getopt } for pid=7880 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.947166][ T976] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 214.843958][ T976] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.128778][ T976] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12335, setting to 1024 [ 215.162246][ T976] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 215.182651][ T976] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.184885][ T5913] usb 4-1: USB disconnect, device number 26 [ 215.260877][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.296095][ T7887] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 215.333047][ T976] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.596490][ T976] usb 5-1: USB disconnect, device number 24 [ 216.055257][ T7909] lo speed is unknown, defaulting to 1000 [ 216.982856][ T7909] lo speed is unknown, defaulting to 1000 [ 217.110477][ T5898] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 217.159315][ T7931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.215507][ T30] audit: type=1400 audit(1751982876.831:555): avc: denied { ioctl } for pid=7933 comm="syz.3.482" path="socket:[17216]" dev="sockfs" ino=17216 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.216041][ T7934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.290966][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 217.301224][ T5898] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 217.309434][ T5898] usb 3-1: config 0 has no interface number 0 [ 217.320264][ T30] audit: type=1400 audit(1751982876.941:556): avc: denied { create } for pid=7933 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.332349][ T5898] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 217.352567][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.369982][ T5898] usb 3-1: Product: syz [ 217.383339][ T5898] usb 3-1: Manufacturer: syz [ 217.387965][ T5898] usb 3-1: SerialNumber: syz [ 217.399049][ T5898] usb 3-1: config 0 descriptor?? [ 217.560492][ T5955] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 217.720609][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 217.760475][ T5955] usb 4-1: config 1 interface 0 altsetting 140 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.819198][ T5898] mos7840 3-1:0.225: required endpoints missing [ 217.851430][ T5955] usb 4-1: config 1 interface 0 has no altsetting 0 [ 217.918491][ T5955] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.40 [ 217.955545][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.976470][ T5955] usb 4-1: Product: 倅✰ƛK㲋ê¿éž˜ä¥«ë™³è¬•íƒ– [ 217.990532][ T5955] usb 4-1: Manufacturer: à°Š [ 217.998070][ T5955] usb 4-1: SerialNumber: 熑⋂葘ï€é±´â‘²ã¨ì¯¢ï¥Ÿï–駶莀ïœã¼â“¿ã±ë††ê¿›ä®³ä±í”¹â”Œæ–ˆç–µå™¹á…žï¬€à§¹ã¨¦è“¨ë›ë…¦áŠ·ãƒ¤è„ í›ä‰»ï”æ Ÿy勱詇쥾⛗鶃⵴윰천᮶ቻ傔蒴냻⿨å¯ç£•é” ëœ¥á¦‰è˜¯è•¢ì½¸ä©³ê‰žâ±Šæ»«í™®é¾µí„™ [ 218.118429][ T5955] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 218.134374][ T5955] usb 4-1: no configuration chosen from 1 choice [ 218.650512][ T5955] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 218.740518][ T5913] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 218.758094][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.488'. [ 218.767129][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.488'. [ 218.788631][ T7954] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 218.815557][ T5955] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 218.826736][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.845496][ T5955] usb 5-1: config 0 descriptor?? [ 218.902279][ T5913] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 218.912790][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.937070][ T5913] usb 1-1: config 0 descriptor?? [ 220.340120][ T9] usb 3-1: USB disconnect, device number 27 [ 220.537338][ T5910] usb 4-1: USB disconnect, device number 27 [ 220.874521][ T7966] JFS: discard option not supported on device [ 220.881293][ T7966] Mount JFS Failure: -22 [ 220.885608][ T7966] jfs_mount failed w/return code = -22 [ 221.517463][ T5955] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 221.530770][ T5955] [drm:udl_init] *ERROR* Selecting channel failed [ 221.559042][ T5955] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 221.604873][ T30] audit: type=1400 audit(1751982881.211:557): avc: denied { getopt } for pid=7968 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 221.681509][ T5913] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 221.690790][ T5955] [drm] Initialized udl on minor 2 [ 221.696410][ T5913] [drm:udl_init] *ERROR* Selecting channel failed [ 221.704337][ T5955] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.753444][ T5955] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 221.761216][ T5910] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.917152][ T5913] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 222.364687][ T5910] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.376508][ T5955] usb 5-1: USB disconnect, device number 25 [ 222.392277][ T5913] [drm] Initialized udl on minor 3 [ 222.400108][ T5910] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 222.416276][ T5913] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.477440][ T5913] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 222.670813][ T7983] binder: 7976:7983 ioctl c0306201 2000000001c0 returned -22 [ 222.805021][ T5910] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.814042][ T5913] usb 1-1: USB disconnect, device number 34 [ 222.851706][ T5910] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 222.984458][ T7974] "syz.3.493" (7974) uses obsolete ecb(arc4) skcipher [ 223.060688][ T976] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 223.152625][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.166559][ T30] audit: type=1400 audit(1751982882.781:558): avc: denied { append } for pid=7987 comm="syz.1.495" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 223.197420][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.240477][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 223.246852][ T976] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 223.255527][ T976] usb 4-1: config 179 has no interface number 0 [ 223.265114][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 223.276503][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 223.288083][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 223.299308][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 223.310872][ T976] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 223.325105][ T976] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 223.334577][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.345097][ T7981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.400843][ T5884] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 223.804061][ T5884] usb 5-1: device descriptor read/64, error -71 [ 223.922458][ T976] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 224.040642][ T5884] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 224.067337][ T30] audit: type=1400 audit(1751982883.681:559): avc: denied { read } for pid=8000 comm="syz.0.499" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.248315][ T30] audit: type=1400 audit(1751982883.681:560): avc: denied { open } for pid=8000 comm="syz.0.499" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.300926][ T5884] usb 5-1: device descriptor read/64, error -71 [ 224.329393][ T976] usb 4-1: USB disconnect, device number 28 [ 224.335399][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 224.335468][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 224.431392][ T5884] usb usb5-port1: attempt power cycle [ 224.773573][ T5884] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 224.813847][ T5884] usb 5-1: device descriptor read/8, error -71 [ 224.959052][ T8015] syz.3.502: attempt to access beyond end of device [ 224.959052][ T8015] loop7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 224.972375][ T8015] SQUASHFS error: Failed to read block 0x0: -5 [ 225.699953][ T5884] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 225.721615][ T5884] usb 5-1: device descriptor read/8, error -71 [ 225.900684][ T5884] usb usb5-port1: unable to enumerate USB device [ 225.928207][ T30] audit: type=1400 audit(1751982885.541:561): avc: denied { accept } for pid=8021 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 226.050509][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 226.067500][ T8025] netlink: 68 bytes leftover after parsing attributes in process `syz.1.506'. [ 226.078610][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 226.088942][ T8025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.506'. [ 226.131526][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 226.143276][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'. [ 226.239417][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.274329][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.324582][ T8028] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 226.335648][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.344726][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.352849][ T9] usb 4-1: Product: syz [ 226.357871][ T9] usb 4-1: Manufacturer: syz [ 226.362821][ T9] usb 4-1: SerialNumber: syz [ 226.599759][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.507'. [ 226.613392][ T8042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.628150][ T8042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.240207][ T8044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.397873][ T8042] lo speed is unknown, defaulting to 1000 [ 227.629683][ T8050] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.511'. [ 228.249390][ T9] usb 4-1: 0:2 : does not exist [ 228.286640][ T9] usb 4-1: USB disconnect, device number 29 [ 228.292080][ T8042] lo speed is unknown, defaulting to 1000 [ 228.327915][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.377570][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 229.026014][ T30] audit: type=1400 audit(1751982888.641:562): avc: denied { mount } for pid=8066 comm="syz.3.515" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 229.047922][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.110621][ T30] audit: type=1400 audit(1751982888.641:563): avc: denied { remount } for pid=8066 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 229.130262][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.339638][ T30] audit: type=1400 audit(1751982888.951:564): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 229.438918][ T8074] SELinux: ebitmap: truncated map [ 229.448769][ T8074] SELinux: failed to load policy [ 229.572515][ T30] audit: type=1400 audit(1751982889.191:565): avc: denied { ioctl } for pid=8081 comm="syz.0.519" path="socket:[18658]" dev="sockfs" ino=18658 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.597025][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.667073][ T30] audit: type=1400 audit(1751982889.271:566): avc: denied { checkpoint_restore } for pid=8087 comm="syz.0.521" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.712100][ T5913] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 229.987548][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.520'. [ 230.000589][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'. [ 231.407009][ T8092] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 232.575620][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.523'. [ 232.620799][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.523'. [ 232.635856][ T30] audit: type=1400 audit(1751982892.241:567): avc: denied { setopt } for pid=8106 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 232.647605][ T8115] overlay: filesystem on ./bus not supported as upperdir [ 232.708334][ T8116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.745981][ T8107] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 233.048546][ T30] audit: type=1400 audit(1751982892.251:568): avc: denied { map } for pid=8114 comm="syz.0.527" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.078539][ T30] audit: type=1400 audit(1751982892.251:569): avc: denied { call } for pid=8114 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 233.240610][ T5826] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 233.410618][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 233.442960][ T5826] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 233.476065][ T5826] usb 1-1: config 2 has an invalid descriptor of length 129, skipping remainder of the config [ 233.517909][ T5826] usb 1-1: config 2 has no interface number 0 [ 233.525874][ T5826] usb 1-1: config 2 interface 31 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.546123][ T5826] usb 1-1: config 2 interface 31 has no altsetting 0 [ 233.566795][ T5826] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 233.576312][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.588161][ T5826] usb 1-1: Product: syz [ 233.608370][ T5826] usb 1-1: Manufacturer: syz [ 233.623834][ T5826] usb 1-1: SerialNumber: syz [ 233.670825][ T5826] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 234.933034][ T8143] No source specified [ 235.281127][ T5826] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 235.441791][ T5826] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 235.450361][ T5826] usb 5-1: config 150 has an invalid descriptor of length 133, skipping remainder of the config [ 235.464139][ T5826] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 235.477881][ T5826] usb 5-1: config 150 has no interface number 0 [ 235.485714][ T5826] usb 5-1: config 150 interface 204 has no altsetting 0 [ 235.494690][ T5826] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 235.503998][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.512145][ T5826] usb 5-1: Product: syz [ 235.516345][ T5826] usb 5-1: Manufacturer: syz [ 235.521111][ T5826] usb 5-1: SerialNumber: syz [ 236.031152][ T5826] usb 1-1: USB disconnect, device number 35 [ 236.058813][ T9] usb 5-1: USB disconnect, device number 30 [ 236.304100][ T30] audit: type=1400 audit(1751982895.911:570): avc: denied { execute } for pid=8160 comm="syz.3.542" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.353122][ T5955] IPVS: starting estimator thread 0... [ 236.450573][ T8174] IPVS: using max 45 ests per chain, 108000 per kthread [ 236.705736][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'. [ 236.754732][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.546'. [ 236.779940][ T8179] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 236.801625][ T5826] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 236.928859][ T30] audit: type=1400 audit(1751982896.541:571): avc: denied { execmem } for pid=8181 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.974334][ T8183] ipt_ECN: cannot use operation on non-tcp rule [ 236.998063][ T5826] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 237.038460][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.086786][ T5826] usb 5-1: config 0 descriptor?? [ 237.375588][ T8195] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 238.391593][ T30] audit: type=1400 audit(1751982898.001:572): avc: denied { bind } for pid=8197 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.395792][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.422439][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.432242][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.442345][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.450198][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.528519][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.537457][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.545289][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.553424][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.563648][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.564036][ T30] audit: type=1400 audit(1751982898.031:573): avc: denied { write } for pid=8197 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.683303][ T8201] lo speed is unknown, defaulting to 1000 [ 238.689246][ T30] audit: type=1400 audit(1751982898.051:574): avc: denied { map } for pid=8200 comm="syz.1.552" path="socket:[18422]" dev="sockfs" ino=18422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.712309][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.719296][ T30] audit: type=1400 audit(1751982898.051:575): avc: denied { write } for pid=8197 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.738681][ T30] audit: type=1400 audit(1751982898.241:576): avc: denied { mounton } for pid=8201 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 238.875934][ T8201] lo speed is unknown, defaulting to 1000 [ 238.900594][ T5947] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 238.994343][ T8201] chnl_net:caif_netlink_parms(): no params data found [ 239.059738][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.065785][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.066997][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.077621][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 239.084938][ T8201] bridge_slave_0: entered allmulticast mode [ 239.103468][ T8201] bridge_slave_0: entered promiscuous mode [ 239.104845][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.112548][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.120041][ T5947] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 239.126207][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.144071][ T5947] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.146355][ T8201] bridge_slave_1: entered allmulticast mode [ 239.159367][ T5947] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.162578][ T8201] bridge_slave_1: entered promiscuous mode [ 239.173841][ T5947] usb 1-1: Manufacturer: syz [ 239.185347][ T5947] usb 1-1: config 0 descriptor?? [ 239.212078][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.224183][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.259944][ T8201] team0: Port device team_slave_0 added [ 239.269619][ T8201] team0: Port device team_slave_1 added [ 239.297107][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.304232][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.330138][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.336705][ T8201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.349263][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.356684][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.382625][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.388922][ T8201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.476791][ T8201] hsr_slave_0: entered promiscuous mode [ 239.483899][ T8201] hsr_slave_1: entered promiscuous mode [ 239.490351][ T8201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.500927][ T5947] rc_core: IR keymap rc-hauppauge not found [ 239.504626][ T8201] Cannot create hsr debugfs directory [ 239.512244][ T5947] Registered IR keymap rc-empty [ 239.513149][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.622609][ T5826] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 239.631189][ T5826] [drm:udl_init] *ERROR* Selecting channel failed [ 239.645231][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 239.680350][ T5826] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 239.681365][ T5947] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 239.716074][ T5826] [drm] Initialized udl on minor 2 [ 239.734035][ T5826] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 239.753940][ T5826] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 239.775423][ T5947] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 239.793501][ T976] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 239.805227][ T976] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 239.817092][ T5826] usb 5-1: USB disconnect, device number 31 [ 239.846953][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 240.018353][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 240.050565][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 240.210582][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 240.235504][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 240.287605][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 240.320658][ T976] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 242.194869][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.290804][ T5832] Bluetooth: hci5: command tx timeout [ 242.299597][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.315701][ T8201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.380768][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.387322][ T8201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.400649][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.415517][ T8201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.426044][ T5947] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 242.439350][ T976] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.449680][ T976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.452322][ T8201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.458969][ T5947] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 242.474752][ T976] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.484180][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.504365][ T5947] usb 1-1: USB disconnect, device number 36 [ 242.514877][ T976] usb 4-1: SerialNumber: syz [ 242.645724][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.681672][ T8201] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.704446][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.711649][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.757061][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.764307][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.225342][ T8252] netlink: 76 bytes leftover after parsing attributes in process `syz.1.558'. [ 243.234782][ T30] audit: type=1400 audit(1751982902.841:577): avc: denied { name_bind } for pid=8231 comm="syz.1.558" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 243.268585][ T30] audit: type=1400 audit(1751982902.841:578): avc: denied { node_bind } for pid=8231 comm="syz.1.558" saddr=fe80::f src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 243.416355][ T30] audit: type=1400 audit(1751982903.001:579): avc: denied { accept } for pid=8231 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 243.503419][ T8201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.866396][ T976] usb 4-1: 0:2 : does not exist [ 243.895068][ T976] usb 4-1: unit 5 not found! [ 243.940304][ T976] usb 4-1: USB disconnect, device number 31 [ 244.007405][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.303682][ T976] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 244.390520][ T5832] Bluetooth: hci5: command tx timeout [ 244.460488][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 244.510839][ T976] usb 4-1: device descriptor read/64, error -71 [ 244.660878][ T8288] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 245.501211][ T30] audit: type=1400 audit(1751982904.611:580): avc: denied { create } for pid=8285 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.502758][ T880] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 245.521441][ T976] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 245.545116][ T880] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 245.557469][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 245.593850][ T880] usb 2-1: USB disconnect, device number 16 [ 245.641672][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.650095][ T30] audit: type=1400 audit(1751982904.611:581): avc: denied { bind } for pid=8285 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.679470][ T8201] veth0_vlan: entered promiscuous mode [ 245.768840][ T8201] veth1_vlan: entered promiscuous mode [ 245.776464][ T9] usb 5-1: config 0 descriptor?? [ 245.844124][ T8296] xt_hashlimit: max too large, truncated to 1048576 [ 245.866350][ T8201] veth0_macvtap: entered promiscuous mode [ 245.890502][ T976] usb 4-1: device descriptor read/64, error -71 [ 245.897419][ T8201] veth1_macvtap: entered promiscuous mode [ 245.923909][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.938069][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.976640][ T8201] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.987937][ T8201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.000809][ T976] usb usb4-port1: attempt power cycle [ 246.006397][ T8201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.016226][ T8201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.040594][ T5826] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 246.121456][ T5947] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 246.210735][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 246.342946][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.410749][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.520487][ T5832] Bluetooth: hci5: command tx timeout [ 246.669751][ T5826] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 246.689153][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.701374][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.711945][ T5826] usb 1-1: Product: syz [ 246.716149][ T5826] usb 1-1: Manufacturer: syz [ 246.718216][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.721180][ T976] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 246.736556][ T5826] usb 1-1: SerialNumber: syz [ 246.751321][ T5826] usb 1-1: config 0 descriptor?? [ 246.760697][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 246.767183][ T976] usb 4-1: device descriptor read/8, error -71 [ 246.773894][ T5947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.786030][ T30] audit: type=1400 audit(1751982906.401:582): avc: denied { mounton } for pid=8201 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 246.793924][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.830464][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.840176][ T5947] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 246.874678][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.890089][ T5947] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.900357][ T5947] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.909380][ T5947] usb 2-1: Manufacturer: syz [ 246.916304][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.548'. [ 246.963236][ T5826] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 246.979203][ T5947] usb 2-1: config 0 descriptor?? [ 247.030808][ T976] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 247.126819][ T8309] netlink: 56 bytes leftover after parsing attributes in process `syz.5.573'. [ 247.268743][ T976] usb 4-1: device not accepting address 35, error -71 [ 247.350674][ T976] usb usb4-port1: unable to enumerate USB device [ 247.582444][ T5947] rc_core: IR keymap rc-hauppauge not found [ 247.588606][ T5947] Registered IR keymap rc-empty [ 247.594220][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.627505][ T8318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.575'. [ 247.636743][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.644318][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.575'. [ 247.671673][ T5947] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 247.767091][ T9] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 247.830523][ T976] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 247.831199][ T8320] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 247.839019][ T8318] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 247.860489][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 247.871921][ T5947] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 247.907948][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 247.924868][ T8320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.927100][ T9] [drm] Initialized udl on minor 2 [ 247.943960][ T8323] smc: net device bond0 applied user defined pnetid SYZ2 [ 247.955442][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.017874][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 248.031775][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.044134][ T5899] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 248.054055][ T976] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.073569][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 248.080906][ T976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.088525][ T8320] 9pnet_fd: Insufficient options for proto=fd [ 248.090695][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.111283][ T5899] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 248.122725][ T9] usb 5-1: USB disconnect, device number 32 [ 248.135247][ T976] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 248.150764][ T5899] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 248.159050][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 248.167660][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.178074][ T976] usb 4-1: SerialNumber: syz [ 248.201007][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.231225][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.270899][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.301034][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.320608][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.341498][ T5947] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.363321][ T5947] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 248.374064][ T5947] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 248.430920][ T5947] usb 2-1: USB disconnect, device number 17 [ 248.517041][ T5826] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 248.559134][ T5826] usb 1-1: USB disconnect, device number 37 [ 248.591602][ T5832] Bluetooth: hci5: command tx timeout [ 248.680552][ T880] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 248.876782][ T30] audit: type=1400 audit(1751982908.481:583): avc: denied { read write } for pid=8329 comm="syz.1.578" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 248.932278][ T30] audit: type=1400 audit(1751982908.481:584): avc: denied { open } for pid=8329 comm="syz.1.578" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 248.932400][ T880] usb 5-1: not running at top speed; connect to a high speed hub [ 249.034985][ T880] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 249.078994][ T880] usb 5-1: config 1 interface 0 has no altsetting 0 [ 249.112607][ T880] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 249.146505][ T880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.180540][ T880] usb 5-1: Product: Ð [ 249.196119][ T880] usb 5-1: Manufacturer: ㊠[ 249.209030][ T880] usb 5-1: SerialNumber: У [ 249.231938][ T8328] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.662801][ T8348] x_tables: ip_tables: osf match: only valid for protocol 6 [ 249.683765][ T8348] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 250.442963][ T976] usb 4-1: 0:2 : does not exist [ 250.447964][ T976] usb 4-1: unit 5 not found! [ 250.450020][ T8356] netlink: 72 bytes leftover after parsing attributes in process `syz.1.585'. [ 250.480472][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.585'. [ 250.512227][ T976] usb 4-1: USB disconnect, device number 36 [ 250.524432][ T8356] vlan0: entered promiscuous mode [ 250.600651][ T30] audit: type=1400 audit(1751982910.181:585): avc: denied { mounton } for pid=8360 comm="syz.3.588" path="/119/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 250.650719][ T8367] ubi31: attaching mtd0 [ 250.659058][ T8367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.666618][ T8367] IPv6: NLM_F_CREATE should be set when creating new route [ 250.735902][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.286717][ T8374] netlink: 11 bytes leftover after parsing attributes in process `syz.1.591'. [ 251.367676][ T8375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8375 comm=syz.1.591 [ 251.976030][ T30] audit: type=1400 audit(1751982910.971:586): avc: denied { name_bind } for pid=8373 comm="syz.1.591" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 252.080236][ T8377] overlayfs: failed to resolve './file1': -2 [ 252.255600][ T880] usbhid 5-1:1.0: can't add hid device: -71 [ 252.277349][ T8380] lo speed is unknown, defaulting to 1000 [ 252.283322][ T880] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 252.303575][ T880] usb 5-1: USB disconnect, device number 33 [ 252.477306][ T8392] netlink: 76 bytes leftover after parsing attributes in process `syz.4.597'. [ 252.527794][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 252.630477][ T8395] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 252.656550][ T8395] netlink: 'syz.0.598': attribute type 2 has an invalid length. [ 252.704102][ T8396] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 252.750471][ T30] audit: type=1400 audit(1751982912.341:587): avc: denied { write } for pid=8400 comm="syz.4.599" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 252.827515][ T30] audit: type=1400 audit(1751982912.361:588): avc: denied { write } for pid=8400 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 252.919917][ T8396] bond1: entered promiscuous mode [ 252.926772][ T8396] bond1: entered allmulticast mode [ 252.948730][ T30] audit: type=1326 audit(1751982912.561:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.1.595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce1798e929 code=0x0 [ 252.961439][ T8396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.028511][ T8399] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 253.091675][ T8399] bond2: entered promiscuous mode [ 253.096784][ T8399] bond2: entered allmulticast mode [ 253.102738][ T8399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.260460][ T976] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 253.264171][ T8380] lo speed is unknown, defaulting to 1000 [ 253.274026][ T8418] lo speed is unknown, defaulting to 1000 [ 253.476415][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.603'. [ 253.524907][ T976] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 253.536609][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.736604][ T976] usb 4-1: config 0 descriptor?? [ 253.968589][ T30] audit: type=1400 audit(1751982913.581:590): avc: denied { lock } for pid=8417 comm="syz.5.603" path="socket:[20552]" dev="sockfs" ino=20552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 254.036596][ T8419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8419 comm=syz.5.603 [ 254.097472][ T8418] lo speed is unknown, defaulting to 1000 [ 254.651025][ T5826] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 254.880788][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 254.888192][ T5826] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 254.896906][ T5826] usb 1-1: config 0 has no interface number 0 [ 254.904566][ T5826] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 37, changing to 9 [ 254.916091][ T5826] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 10008, setting to 1024 [ 254.930721][ T5826] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 254.940176][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 254.954958][ T5826] usb 1-1: Product: syz [ 254.964413][ T5826] usb 1-1: SerialNumber: syz [ 254.986082][ T5826] usb 1-1: config 0 descriptor?? [ 255.007876][ T8439] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 255.028782][ T5826] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 255.067738][ T5826] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input18 [ 255.235372][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.242114][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.245622][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 256.285600][ T976] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 257.375361][ T976] [drm:udl_init] *ERROR* Selecting channel failed [ 257.393158][ T976] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 257.399965][ T976] [drm] Initialized udl on minor 2 [ 257.407227][ T976] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 257.415562][ T976] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 257.422808][ T5826] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 257.432156][ T976] usb 4-1: USB disconnect, device number 37 [ 257.438186][ T5826] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 257.521683][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.529099][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.536448][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.543700][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.551869][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.560459][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.568923][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.576378][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.583852][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.591058][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 257.611327][ T5826] usb 1-1: USB disconnect, device number 38 [ 257.617296][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 257.695057][ T5826] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 257.716450][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.616'. [ 257.726534][ T30] audit: type=1400 audit(1751982917.331:591): avc: denied { write } for pid=8478 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 257.804955][ T30] audit: type=1400 audit(1751982917.381:592): avc: denied { read write } for pid=8482 comm="syz.3.618" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.859826][ T30] audit: type=1400 audit(1751982917.381:593): avc: denied { open } for pid=8482 comm="syz.3.618" path="/124/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 258.101356][ T5826] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 258.650913][ T30] audit: type=1400 audit(1751982918.201:594): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 258.671143][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.923777][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 258.931991][ T5826] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 258.941222][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.949199][ T5826] usb 1-1: Product: syz [ 258.954594][ T5826] usb 1-1: Manufacturer: syz [ 258.959581][ T30] audit: type=1400 audit(1751982918.581:595): avc: denied { shutdown } for pid=8495 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.979799][ T5826] usb 1-1: SerialNumber: syz [ 258.995215][ T5826] usb 1-1: config 0 descriptor?? [ 259.006993][ T5826] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 259.826007][ T5826] gp8psk: usb in 128 operation failed. [ 260.053515][ T30] audit: type=1404 audit(1751982919.571:596): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 260.633883][ T5826] gp8psk: usb in 137 operation failed. [ 261.478771][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.715756][ T30] audit: type=1400 audit(1751982919.711:597): avc: denied { create } for pid=8479 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 261.735163][ T30] audit: type=1400 audit(1751982919.711:598): avc: denied { create } for pid=8479 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 261.754513][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.761269][ T5826] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 261.822160][ T5826] usb 1-1: media controller created [ 261.836184][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.850665][ T5826] gp8psk_fe: Frontend revision 1 attached [ 261.856442][ T5826] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 261.864780][ T5826] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 261.895847][ T30] audit: type=1400 audit(1751982921.511:599): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.920210][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.089282][ T30] audit: type=1400 audit(1751982921.571:600): avc: denied { create } for pid=8507 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 262.149316][ T5826] gp8psk: usb in 138 operation failed. [ 262.179437][ T5826] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 262.261628][ T5826] gp8psk: found Genpix USB device pID = 201 (hex) [ 262.268940][ T30] audit: type=1400 audit(1751982921.581:601): avc: denied { execmem } for pid=8507 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 262.315740][ T5826] usb 1-1: USB disconnect, device number 39 [ 262.388262][ T30] audit: type=1400 audit(1751982921.581:602): avc: denied { read write } for pid=8507 comm="syz.5.623" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 262.497352][ T30] audit: type=1400 audit(1751982921.601:603): avc: denied { read write } for pid=8507 comm="syz.5.623" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 262.521402][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.594311][ T5826] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 262.606065][ T30] audit: type=1400 audit(1751982921.731:604): avc: denied { read write } for pid=5839 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.715483][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.722852][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.737330][ T30] audit: type=1400 audit(1751982921.811:605): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.892292][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.948027][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.142035][ T8522] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.153011][ T8522] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.171403][ T8522] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.180495][ T8522] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.219064][ T8522] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.228854][ T8522] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.238080][ T8522] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.246980][ T8522] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.804153][ T8549] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 265.075180][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 265.075264][ T30] audit: type=1400 audit(1751982924.691:760): avc: denied { create } for pid=8583 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=0 [ 265.102814][ T30] audit: type=1400 audit(1751982924.691:761): avc: denied { allowed } for pid=8583 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 265.129359][ T30] audit: type=1400 audit(1751982924.741:762): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 265.162611][ T30] audit: type=1400 audit(1751982924.781:763): avc: denied { read } for pid=8588 comm="syz.3.652" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 265.199483][ T30] audit: type=1400 audit(1751982924.811:764): avc: denied { create } for pid=8588 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 265.221645][ T30] audit: type=1400 audit(1751982924.811:765): avc: denied { create } for pid=8588 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 265.237441][ T8593] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.248944][ T8593] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 265.264666][ T8593] audit: backlog limit exceeded [ 265.276622][ T8593] audit: audit_backlog=65 > audit_backlog_limit=64 [ 266.501959][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.659'. [ 266.511148][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.659'. [ 266.523588][ T8608] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 266.641859][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 267.985120][ T8660] netlink: 'syz.1.677': attribute type 6 has an invalid length. [ 268.108584][ T8669] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 268.545836][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 269.113497][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 269.656113][ T8720] netlink: 'syz.5.700': attribute type 39 has an invalid length. [ 270.377656][ T30] kauditd_printk_skb: 627 callbacks suppressed [ 270.377667][ T30] audit: type=1400 audit(1751983185.996:1343): avc: denied { read write } for pid=8201 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 270.424889][ T30] audit: type=1400 audit(1751983186.046:1344): avc: denied { read } for pid=8726 comm="syz.5.703" dev="nsfs" ino=4026533955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 270.449055][ T30] audit: type=1400 audit(1751983186.066:1345): avc: denied { create } for pid=8726 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 270.469480][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.476535][ T30] audit: type=1400 audit(1751983186.096:1346): avc: denied { create } for pid=8726 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 270.509685][ T30] audit: type=1400 audit(1751983186.126:1347): avc: denied { read write } for pid=8201 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 270.539892][ T30] audit: type=1400 audit(1751983186.156:1348): avc: denied { create } for pid=8728 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 270.547060][ T8730] audit: audit_backlog=65 > audit_backlog_limit=64 [ 270.560728][ T30] audit: type=1400 audit(1751983186.156:1349): avc: denied { prog_load } for pid=8728 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.571171][ T8730] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 [ 270.585737][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.587039][ T30] audit: type=1400 audit(1751983186.156:1350): avc: denied { map_create } for pid=8728 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.618729][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.745575][ T8723] ALSA: mixer_oss: invalid index 40000 [ 270.817297][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 270.829064][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.709'. [ 270.877789][ T8742] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 271.647115][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 272.094822][ T8804] netlink: 'syz.4.731': attribute type 9 has an invalid length. [ 272.102579][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.731'. [ 272.122869][ T8804] Process accounting resumed [ 272.219966][ T8811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8811 comm=syz.5.734 [ 272.440578][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 272.468001][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 272.527753][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 272.544046][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 272.822308][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 272.828486][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 272.916433][ T8840] ceph: No mds server is up or the cluster is laggy [ 273.350658][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 273.356759][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 273.390177][ T8821] ceph: No mds server is up or the cluster is laggy [ 273.470159][ T8859] Cannot find set identified by id 0 to match [ 273.504652][ T8860] lo speed is unknown, defaulting to 1000 [ 273.564084][ T8859] Cannot find set identified by id 0 to match [ 273.874728][ T8860] lo speed is unknown, defaulting to 1000 [ 274.586855][ T8888] lo speed is unknown, defaulting to 1000 [ 274.690684][ T8888] lo speed is unknown, defaulting to 1000 [ 275.406705][ T30] kauditd_printk_skb: 426 callbacks suppressed [ 275.406722][ T30] audit: type=1400 audit(1751983191.016:1776): avc: denied { read } for pid=8914 comm="syz.0.767" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 275.450286][ T30] audit: type=1400 audit(1751983191.026:1777): avc: denied { mac_admin } for pid=8914 comm="syz.0.767" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 275.473695][ T30] audit: type=1401 audit(1751983191.026:1778): op=fscreate invalid_context=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 275.474347][ T30] audit: type=1400 audit(1751983191.026:1779): avc: denied { read write } for pid=8914 comm="syz.0.767" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 275.474388][ T30] audit: type=1400 audit(1751983191.026:1780): avc: denied { read } for pid=8914 comm="syz.0.767" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 275.474424][ T30] audit: type=1400 audit(1751983191.026:1781): avc: denied { mac_admin } for pid=8914 comm="syz.0.767" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 275.474463][ T30] audit: type=1401 audit(1751983191.026:1782): op=fscreate invalid_context=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 275.474878][ T30] audit: type=1400 audit(1751983191.066:1783): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.581948][ T30] audit: type=1400 audit(1751983191.206:1784): avc: denied { read write } for pid=8919 comm="syz.0.768" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 275.583878][ T30] audit: type=1400 audit(1751983191.206:1785): avc: denied { mounton } for pid=8919 comm="syz.0.768" path="/164/file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 275.902430][ T8926] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 275.955916][ T8926] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.955962][ T8929] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 275.955983][ T8929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.965978][ T8936] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 275.966003][ T8936] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.971766][ T8936] vhci_hcd vhci_hcd.0: Device attached [ 276.003250][ T8938] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 276.003267][ T8938] syzkaller0: ignored: set checksum disabled [ 276.008379][ T8926] vhci_hcd vhci_hcd.0: Device attached [ 276.021532][ T8942] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 276.021564][ T8942] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.021756][ T8942] vhci_hcd vhci_hcd.0: Device attached [ 276.061113][ T8926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.069105][ T8929] vhci_hcd vhci_hcd.0: Device attached [ 276.113617][ T8926] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 276.113644][ T8926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 276.115565][ T8926] vhci_hcd vhci_hcd.0: Device attached [ 276.140510][ T5955] vhci_hcd: vhci_device speed not set [ 276.157419][ T8929] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 276.233412][ T8929] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.251658][ T5955] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 276.261968][ T5913] vhci_hcd: vhci_device speed not set [ 276.269948][ T8939] vhci_hcd: connection closed [ 276.276022][ T8929] vhci_hcd vhci_hcd.0: Device attached [ 276.286634][ T6138] vhci_hcd: stop threads [ 276.287313][ T8926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.304258][ T6138] vhci_hcd: release socket [ 276.307506][ T8926] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(22) [ 276.315303][ T8926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 276.323047][ T5913] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 276.324339][ T6138] vhci_hcd: disconnect device [ 276.340577][ T8926] vhci_hcd vhci_hcd.0: Device attached [ 276.359498][ T8926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.382657][ T8926] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(29) [ 276.389290][ T8926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 276.399873][ T8926] vhci_hcd vhci_hcd.0: Device attached [ 276.424773][ T8949] vhci_hcd: connection closed [ 276.427463][ T36] vhci_hcd: stop threads [ 276.431320][ T8956] vhci_hcd: connection closed [ 276.435534][ T8947] vhci_hcd: connection closed [ 276.444608][ T8944] vhci_hcd: connection closed [ 276.449523][ T36] vhci_hcd: release socket [ 276.463531][ T8934] vhci_hcd: connection closed [ 276.463597][ T8932] vhci_hcd: connection reset by peer [ 276.478195][ T36] vhci_hcd: disconnect device [ 276.488672][ T36] vhci_hcd: stop threads [ 276.495840][ T8958] vhci_hcd: connection closed [ 276.498090][ T36] vhci_hcd: release socket [ 276.510969][ T36] vhci_hcd: disconnect device [ 276.516001][ T36] vhci_hcd: stop threads [ 276.524816][ T36] vhci_hcd: release socket [ 276.533885][ T36] vhci_hcd: disconnect device [ 276.544773][ T36] vhci_hcd: stop threads [ 276.556567][ T36] vhci_hcd: release socket [ 276.570640][ T36] vhci_hcd: disconnect device [ 276.575884][ T36] vhci_hcd: stop threads [ 276.580144][ T36] vhci_hcd: release socket [ 276.595751][ T36] vhci_hcd: disconnect device [ 276.605935][ T36] vhci_hcd: stop threads [ 276.615896][ T36] vhci_hcd: release socket [ 276.625999][ T36] vhci_hcd: disconnect device [ 276.636116][ T36] vhci_hcd: stop threads [ 276.643653][ T36] vhci_hcd: release socket [ 276.658367][ T36] vhci_hcd: disconnect device [ 277.325391][ T8993] ALSA: mixer_oss: invalid OSS volume '' [ 278.038207][ T9033] netlink: 'syz.0.800': attribute type 27 has an invalid length. [ 278.769776][ T9064] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.343227][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 280.349349][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 280.374413][ T9101] ceph: No mds server is up or the cluster is laggy [ 280.450191][ T30] kauditd_printk_skb: 421 callbacks suppressed [ 280.450207][ T30] audit: type=1400 audit(1751983196.066:2207): avc: denied { read write } for pid=5830 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.519205][ T30] audit: type=1400 audit(1751983196.066:2208): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.544860][ T9113] FAULT_INJECTION: forcing a failure. [ 280.544860][ T9113] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 280.554208][ T9117] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 280.562490][ T9113] CPU: 0 UID: 0 PID: 9113 Comm: syz.1.825 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 280.562514][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.562524][ T9113] Call Trace: [ 280.562529][ T9113] [ 280.562535][ T9113] dump_stack_lvl+0x16c/0x1f0 [ 280.562561][ T9113] should_fail_ex+0x512/0x640 [ 280.562585][ T9113] _copy_to_user+0x32/0xd0 [ 280.562609][ T9113] simple_read_from_buffer+0xcb/0x170 [ 280.562631][ T9113] proc_fail_nth_read+0x197/0x270 [ 280.562651][ T9113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.562672][ T9113] ? rw_verify_area+0xcf/0x680 [ 280.562689][ T9113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.562707][ T9113] vfs_read+0x1e1/0xc60 [ 280.562729][ T9113] ? __pfx___mutex_lock+0x10/0x10 [ 280.562751][ T9113] ? __pfx_vfs_read+0x10/0x10 [ 280.562776][ T9113] ? __fget_files+0x20e/0x3c0 [ 280.562803][ T9113] ksys_read+0x12a/0x250 [ 280.562820][ T9113] ? __pfx_ksys_read+0x10/0x10 [ 280.562840][ T9113] ? fdget+0x187/0x210 [ 280.562863][ T9113] do_syscall_64+0xcd/0x4c0 [ 280.562886][ T9113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.562902][ T9113] RIP: 0033:0x7fce1798d33c [ 280.562915][ T9113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 280.562930][ T9113] RSP: 002b:00007fce18712030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.562945][ T9113] RAX: ffffffffffffffda RBX: 00007fce17bb5fa0 RCX: 00007fce1798d33c [ 280.562956][ T9113] RDX: 000000000000000f RSI: 00007fce187120a0 RDI: 0000000000000003 [ 280.562965][ T9113] RBP: 00007fce18712090 R08: 0000000000000000 R09: 0000000000000000 [ 280.562974][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.562983][ T9113] R13: 0000000000000000 R14: 00007fce17bb5fa0 R15: 00007fff0e24ad78 [ 280.563004][ T9113] [ 280.585124][ T30] audit: type=1400 audit(1751983196.116:2209): avc: denied { create } for pid=9108 comm="syz.0.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 280.594255][ T9117] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 280.602186][ T9115] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.610018][ T9117] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 280.626313][ T30] audit: type=1400 audit(1751983196.116:2210): avc: denied { read write } for pid=9108 comm="syz.0.826" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 280.631974][ T9117] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 280.636571][ T9111] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.639183][ T9117] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 280.644177][ T9119] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.651423][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 280.652830][ T9111] audit: audit_lost=20 audit_rate_limit=0 audit_backlog_limit=64 [ 280.657161][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 280.662437][ T30] audit: type=1400 audit(1751983196.116:2211): avc: denied { read } for pid=9108 comm="syz.0.826" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 280.669658][ T9115] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 [ 280.690917][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 280.932114][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 280.960239][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 280.976549][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 280.992894][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 281.009262][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 281.022020][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 281.038234][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9117 comm=syz.4.827 [ 281.381208][ T5955] vhci_hcd: vhci_device speed not set [ 281.470556][ T5913] vhci_hcd: vhci_device speed not set [ 282.648131][ T9182] ceph: No mds server is up or the cluster is laggy [ 282.746924][ T5898] usb usb42-port1: attempt power cycle [ 283.311685][ T5898] usb usb42-port1: unable to enumerate USB device [ 283.542311][ T9212] xt_TCPMSS: Only works on TCP SYN packets [ 284.414365][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 284.830002][ T9253] lo speed is unknown, defaulting to 1000 [ 284.988896][ T9253] lo speed is unknown, defaulting to 1000 [ 285.156747][ T9265] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 285.454445][ T30] kauditd_printk_skb: 767 callbacks suppressed [ 285.454462][ T30] audit: type=1400 audit(1751983201.076:2825): avc: denied { read write } for pid=9273 comm="syz.3.885" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 285.500298][ T30] audit: type=1400 audit(1751983201.116:2826): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.542482][ T30] audit: type=1400 audit(1751983201.166:2827): avc: denied { read write } for pid=9275 comm="syz.3.886" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 285.565405][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.597497][ T30] audit: type=1400 audit(1751983201.166:2828): avc: denied { read } for pid=9275 comm="syz.3.886" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 285.620017][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.633149][ T30] audit: type=1400 audit(1751983201.206:2829): avc: denied { read } for pid=9269 comm="syz.0.883" dev="nsfs" ino=4026533086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 285.656414][ T30] audit: type=1400 audit(1751983201.206:2830): avc: denied { read write } for pid=9269 comm="syz.0.883" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 285.681508][ T30] audit: type=1400 audit(1751983201.296:2831): avc: denied { prog_load } for pid=9275 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.700618][ T30] audit: type=1400 audit(1751983201.296:2832): avc: denied { read write } for pid=9275 comm="syz.3.886" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 285.734096][ T30] audit: type=1400 audit(1751983201.356:2833): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.764910][ T30] audit: type=1400 audit(1751983201.386:2834): avc: denied { prog_load } for pid=9278 comm="syz.3.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.812590][ T9260] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 285.820294][ T9260] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 286.437588][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.897'. [ 286.446776][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 286.493199][ T9307] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 287.964693][ T9387] ipvlan0: entered promiscuous mode [ 287.980641][ T9387] bridge0: port 1(ipvlan0) entered blocking state [ 287.987453][ T9387] bridge0: port 1(ipvlan0) entered disabled state [ 287.999286][ T9387] ipvlan0: entered allmulticast mode [ 288.007516][ T9387] bridge0: entered allmulticast mode [ 288.106515][ T9387] ipvlan0: left allmulticast mode [ 288.131047][ T9387] bridge0: left allmulticast mode [ 288.171162][ T9400] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 288.231018][ T9400] CIFS: Unable to determine destination address [ 288.444681][ T9414] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 288.560889][ T9414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.931'. [ 288.696029][ T9423] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 288.786262][ T9425] bond1: left allmulticast mode [ 288.826739][ T9425] bond2: left allmulticast mode [ 288.841473][ T880] lo speed is unknown, defaulting to 1000 [ 289.376422][ T9447] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 289.690259][ T9467] netlink: 'syz.3.948': attribute type 1 has an invalid length. [ 289.766398][ T9467] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 289.778393][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.948'. [ 289.844948][ T9467] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 289.865707][ T9467] bond4 (unregistering): Released all slaves [ 290.245224][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 290.471234][ T30] kauditd_printk_skb: 478 callbacks suppressed [ 290.471252][ T30] audit: type=1400 audit(1751983206.096:3313): avc: denied { read write } for pid=9501 comm="syz.0.959" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=0 [ 290.564413][ T30] audit: type=1400 audit(1751983206.096:3314): avc: denied { map_create } for pid=9501 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 290.640332][ T30] audit: type=1400 audit(1751983206.096:3315): avc: denied { prog_load } for pid=9501 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 290.683338][ T9519] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 290.691352][ T9519] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 290.724207][ T30] audit: type=1400 audit(1751983206.096:3316): avc: denied { allowed } for pid=9501 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 290.749758][ T30] audit: type=1400 audit(1751983206.096:3317): avc: denied { allowed } for pid=9501 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 290.805124][ T30] audit: type=1400 audit(1751983206.096:3318): avc: denied { create } for pid=9501 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 290.847954][ T30] audit: type=1400 audit(1751983206.096:3319): avc: denied { create } for pid=9501 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 [ 290.895969][ T30] audit: type=1400 audit(1751983206.096:3320): avc: denied { prog_load } for pid=9501 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 291.040998][ T9532] audit: audit_backlog=65 > audit_backlog_limit=64 [ 291.061673][ T30] audit: type=1400 audit(1751983206.096:3321): avc: denied { read } for pid=9501 comm="syz.0.959" dev="nsfs" ino=4026533086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 291.385343][ T9550] x_tables: duplicate underflow at hook 2 [ 292.000087][ T9564] could not allocate digest TFM handle sha256-ce [ 292.069490][ T9569] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.035852][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.985'. [ 293.056175][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.985'. [ 293.101924][ T9597] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 293.553851][ T9617] ALSA: mixer_oss: invalid OSS volume '' [ 294.225891][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.998'. [ 294.246167][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.998'. [ 294.291656][ T9641] ALSA: mixer_oss: invalid OSS volume '' [ 294.300109][ T9635] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 295.084884][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1014'. [ 295.136169][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1014'. [ 295.192077][ T9695] netlink: 'syz.1.1016': attribute type 3 has an invalid length. [ 295.422043][ T9686] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 295.528238][ T30] kauditd_printk_skb: 607 callbacks suppressed [ 295.528256][ T30] audit: type=1400 audit(1751983211.146:3906): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 295.572563][ T30] audit: type=1400 audit(1751983211.166:3907): avc: denied { create } for pid=9699 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 295.594591][ T30] audit: type=1400 audit(1751983211.166:3908): avc: denied { create } for pid=9699 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 295.649903][ T30] audit: type=1400 audit(1751983211.266:3909): avc: denied { create } for pid=9699 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 295.706898][ T30] audit: type=1400 audit(1751983211.266:3910): avc: denied { name_bind } for pid=9699 comm="syz.0.1018" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 295.776283][ T30] audit: type=1400 audit(1751983211.266:3911): avc: denied { prog_load } for pid=9699 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 295.820510][ T30] audit: type=1400 audit(1751983211.296:3912): avc: denied { write } for pid=9699 comm="syz.0.1018" name="pfkey" dev="proc" ino=4026533190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 295.842120][ T9706] lo speed is unknown, defaulting to 1000 [ 295.856955][ T30] audit: type=1400 audit(1751983211.356:3913): avc: denied { read } for pid=9702 comm="syz.3.1019" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 295.903437][ T30] audit: type=1400 audit(1751983211.356:3914): avc: denied { create } for pid=9702 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 295.932649][ T30] audit: type=1400 audit(1751983211.356:3915): avc: denied { create } for pid=9702 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 296.090917][ T9706] lo speed is unknown, defaulting to 1000 [ 296.114505][ T9713] netlink: 'syz.1.1022': attribute type 12 has an invalid length. [ 296.434088][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1029'. [ 296.453096][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1029'. [ 296.504166][ T9728] can0: slcan on ptm0. [ 296.511006][ T9726] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 296.654444][ T9728] can0 (unregistered): slcan off ptm0. [ 297.125367][ T9752] futex_wake_op: syz.1.1035 tries to shift op by 36; fix this program [ 297.508933][ T9763] can0: slcan on ttyS3. [ 297.791869][ T9762] can0 (unregistered): slcan off ttyS3. [ 297.939181][ T9774] macvlan0: entered promiscuous mode [ 297.946301][ T9774] bridge0: entered promiscuous mode [ 298.255309][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1044'. [ 298.582951][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 298.828802][ T9811] netlink: 'syz.0.1056': attribute type 1 has an invalid length. [ 298.866897][ T9811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.905719][ T9811] bond3: (slave veth7): Enslaving as an active interface with a down link [ 298.931748][ T9811] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 298.940175][ T9811] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 300.533705][ T30] kauditd_printk_skb: 323 callbacks suppressed [ 300.533722][ T30] audit: type=1400 audit(1751983216.156:4239): avc: denied { read } for pid=9876 comm="syz.1.1079" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 300.591959][ T30] audit: type=1400 audit(1751983216.156:4240): avc: denied { read write } for pid=9878 comm="syz.0.1080" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 300.768191][ T30] audit: type=1400 audit(1751983216.156:4241): avc: denied { read write } for pid=9878 comm="syz.0.1080" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 300.991057][ T30] audit: type=1400 audit(1751983216.156:4242): avc: denied { create } for pid=9878 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 301.036990][ T30] audit: type=1400 audit(1751983216.156:4243): avc: denied { write } for pid=9878 comm="syz.0.1080" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 301.102329][ T30] audit: type=1400 audit(1751983216.156:4244): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.167859][ T30] audit: type=1400 audit(1751983216.186:4245): avc: denied { create } for pid=9876 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 301.196373][ T30] audit: type=1400 audit(1751983216.186:4246): avc: denied { read } for pid=9876 comm="syz.1.1079" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 301.225157][ T30] audit: type=1400 audit(1751983216.196:4247): avc: denied { create } for pid=9876 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 301.245724][ T30] audit: type=1400 audit(1751983216.196:4248): avc: denied { prog_load } for pid=9876 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 301.624262][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1088'. [ 301.633631][ T9912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1088'. [ 301.646227][ T9912] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 302.935988][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1102'. [ 302.946930][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1102'. [ 302.970114][ T9952] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 303.669848][ T9972] lo speed is unknown, defaulting to 1000 [ 303.906853][ T9977] bridge_slave_0: left allmulticast mode [ 303.914064][ T9977] bridge_slave_0: left promiscuous mode [ 303.919999][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.957259][ T9977] bridge_slave_1: left allmulticast mode [ 303.963511][ T9977] bridge_slave_1: left promiscuous mode [ 303.969927][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.988508][ T9977] bond0: (slave bond_slave_0): Releasing backup interface [ 304.006574][ T9977] bond0: (slave bond_slave_1): Releasing backup interface [ 304.038609][ T9977] team0: Port device team_slave_0 removed [ 304.086762][ T9977] team0: Port device team_slave_1 removed [ 304.097745][ T9977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.116809][ T9977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.136640][ T9977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.144486][ T9977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.203695][ T9972] lo speed is unknown, defaulting to 1000 [ 304.515504][ T9995] netlink: 'syz.3.1116': attribute type 10 has an invalid length. [ 304.578457][ T9995] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 305.542165][ T30] kauditd_printk_skb: 274 callbacks suppressed [ 305.542181][ T30] audit: type=1400 audit(1751983221.166:4523): avc: denied { create } for pid=10012 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 305.636907][ T30] audit: type=1400 audit(1751983221.196:4524): avc: denied { create } for pid=10012 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 305.653702][T10017] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 305.735601][ T30] audit: type=1400 audit(1751983221.196:4525): avc: denied { read } for pid=10012 comm="syz.1.1121" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 305.779999][ T30] audit: type=1400 audit(1751983221.196:4526): avc: denied { prog_load } for pid=10012 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 305.806801][ T30] audit: type=1400 audit(1751983221.216:4527): avc: denied { read write } for pid=5830 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 305.838272][ T30] audit: type=1400 audit(1751983221.216:4528): avc: denied { read write } for pid=8201 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 305.866659][ T30] audit: type=1400 audit(1751983221.236:4529): avc: denied { write } for pid=10014 comm="syz.1.1122" name="igmp6" dev="proc" ino=4026532941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 305.892229][ T30] audit: type=1400 audit(1751983221.236:4530): avc: denied { prog_load } for pid=10014 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 305.914743][ T30] audit: type=1400 audit(1751983221.236:4531): avc: denied { map_create } for pid=10014 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 305.936517][ T30] audit: type=1400 audit(1751983221.246:4532): avc: denied { read write } for pid=5830 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.569746][T10043] lo speed is unknown, defaulting to 1000 [ 306.670666][T10043] lo speed is unknown, defaulting to 1000 [ 306.699904][T10049] netlink: 'syz.1.1134': attribute type 10 has an invalid length. [ 306.743059][T10049] batman_adv: batadv0: Adding interface: team0 [ 306.749330][T10049] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.778317][T10049] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 307.146182][T10064] netlink: 'syz.3.1141': attribute type 1 has an invalid length. [ 307.245896][T10064] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.450089][T10079] netlink: 'syz.3.1145': attribute type 4 has an invalid length. [ 309.914238][T10173] vlan2: entered allmulticast mode [ 309.919465][T10173] bond0: entered allmulticast mode [ 309.924998][T10173] bond_slave_0: entered allmulticast mode [ 309.931720][T10173] bond_slave_1: entered allmulticast mode [ 310.551263][ T30] kauditd_printk_skb: 358 callbacks suppressed [ 310.551275][ T30] audit: type=1400 audit(1751983226.176:4891): avc: denied { read write } for pid=8201 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.687552][ T30] audit: type=1400 audit(1751983226.266:4892): avc: denied { execmem } for pid=10199 comm="syz.5.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 310.777320][ T30] audit: type=1400 audit(1751983226.276:4893): avc: denied { read write } for pid=5839 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.816644][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1194'. [ 310.825653][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1194'. [ 310.848256][T10210] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 311.164406][ T30] audit: type=1400 audit(1751983226.346:4894): avc: denied { read write } for pid=8201 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.192934][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1193'. [ 311.204764][ T30] audit: type=1400 audit(1751983226.356:4895): avc: denied { create } for pid=10205 comm="syz.4.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 311.244965][T10214] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1193'. [ 311.267972][ T30] audit: type=1400 audit(1751983226.356:4896): avc: denied { create } for pid=10205 comm="syz.4.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 311.349748][ T30] audit: type=1400 audit(1751983226.376:4897): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.463906][ T30] audit: type=1400 audit(1751983226.386:4898): avc: denied { execmem } for pid=10205 comm="syz.4.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 311.529946][ T30] audit: type=1400 audit(1751983226.386:4899): avc: denied { execmem } for pid=10205 comm="syz.4.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 311.529977][ T30] audit: type=1400 audit(1751983226.436:4900): avc: denied { read } for pid=10209 comm="syz.3.1194" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 311.990709][T10214] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 312.000831][T10219] lo speed is unknown, defaulting to 1000 [ 312.132172][T10219] lo speed is unknown, defaulting to 1000 [ 312.518160][T10246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1205'. [ 312.529190][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1205'. [ 312.552460][T10246] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 313.348532][T10279] lo speed is unknown, defaulting to 1000 [ 313.678466][T10279] lo speed is unknown, defaulting to 1000 [ 314.117258][T10300] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1222'. [ 314.398970][T10300] bond0 (unregistering): Released all slaves [ 314.855850][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1232'. [ 315.106552][T10342] mkiss: ax0: crc mode is auto. [ 315.283405][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 315.295155][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 315.561445][ T30] kauditd_printk_skb: 260 callbacks suppressed [ 315.561462][ T30] audit: type=1400 audit(1751983231.186:5161): avc: denied { execmem } for pid=10352 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 315.589435][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 315.605105][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 315.630310][ T30] audit: type=1400 audit(1751983231.226:5162): avc: denied { read write } for pid=5830 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 315.695650][ T30] audit: type=1400 audit(1751983231.226:5163): avc: denied { map_create } for pid=10352 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.003085][ T30] audit: type=1400 audit(1751983231.236:5164): avc: denied { prog_load } for pid=10352 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.042546][ T30] audit: type=1400 audit(1751983231.236:5165): avc: denied { prog_load } for pid=10352 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.077672][ T30] audit: type=1400 audit(1751983231.236:5166): avc: denied { prog_load } for pid=10352 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.096912][T10344] ceph: No mds server is up or the cluster is laggy [ 316.149548][ T30] audit: type=1400 audit(1751983231.236:5167): avc: denied { mount } for pid=10352 comm="syz.3.1241" name="/" dev="ramfs" ino=25465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 316.248519][ T30] audit: type=1400 audit(1751983231.296:5168): avc: denied { read write } for pid=5839 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.313647][ T30] audit: type=1400 audit(1751983231.376:5169): avc: denied { create } for pid=10354 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 316.406262][ T30] audit: type=1400 audit(1751983231.376:5170): avc: denied { map_create } for pid=10354 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.617773][T10376] netlink: 'syz.4.1250': attribute type 10 has an invalid length. [ 316.629978][T10376] bridge0: entered allmulticast mode [ 316.636056][T10376] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 316.677206][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.683569][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.725426][T10385] netlink: 'syz.3.1252': attribute type 26 has an invalid length. [ 316.749604][T10385] block device autoloading is deprecated and will be removed. [ 316.763233][T10385] syz.3.1252: attempt to access beyond end of device [ 316.763233][T10385] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 317.066576][T10391] bridge0: left promiscuous mode [ 317.363692][T10401] FAULT_INJECTION: forcing a failure. [ 317.363692][T10401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.378019][T10401] CPU: 1 UID: 0 PID: 10401 Comm: syz.4.1260 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 317.378041][T10401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.378048][T10401] Call Trace: [ 317.378052][T10401] [ 317.378057][T10401] dump_stack_lvl+0x16c/0x1f0 [ 317.378078][T10401] should_fail_ex+0x512/0x640 [ 317.378095][T10401] _copy_from_user+0x2e/0xd0 [ 317.378111][T10401] kstrtouint_from_user+0xd6/0x1d0 [ 317.378122][T10401] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 317.378134][T10401] ? __lock_acquire+0xb8a/0x1c90 [ 317.378151][T10401] proc_fail_nth_write+0x83/0x250 [ 317.378165][T10401] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.378182][T10401] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.378195][T10401] vfs_write+0x2a0/0x1150 [ 317.378211][T10401] ? __pfx___mutex_lock+0x10/0x10 [ 317.378227][T10401] ? __pfx_vfs_write+0x10/0x10 [ 317.378244][T10401] ? __fget_files+0x20e/0x3c0 [ 317.378263][T10401] ksys_write+0x12a/0x250 [ 317.378276][T10401] ? __pfx_ksys_write+0x10/0x10 [ 317.378290][T10401] ? fdget+0x187/0x210 [ 317.378306][T10401] do_syscall_64+0xcd/0x4c0 [ 317.378323][T10401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.378334][T10401] RIP: 0033:0x7f05c638d3df [ 317.378366][T10401] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 317.378376][T10401] RSP: 002b:00007f05c7144030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 317.378388][T10401] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05c638d3df [ 317.378394][T10401] RDX: 0000000000000001 RSI: 00007f05c71440a0 RDI: 0000000000000004 [ 317.378400][T10401] RBP: 00007f05c7144090 R08: 0000000000000000 R09: 0000000000000000 [ 317.378406][T10401] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 317.378412][T10401] R13: 0000000000000000 R14: 00007f05c65b5fa0 R15: 00007ffda53c5ca8 [ 317.378425][T10401] [ 317.956028][T10429] syz.1.1270 (10429): /proc/10428/oom_adj is deprecated, please use /proc/10428/oom_score_adj instead. [ 318.826690][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.833983][T10471] IPv6: NLM_F_CREATE should be set when creating new route [ 318.841336][T10471] IPv6: NLM_F_CREATE should be set when creating new route [ 318.848595][T10471] IPv6: NLM_F_CREATE should be set when creating new route [ 318.874663][T10469] ALSA: mixer_oss: invalid OSS volume '”' [ 319.087097][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 319.893536][T10526] lo speed is unknown, defaulting to 1000 [ 319.992318][T10525] lo speed is unknown, defaulting to 1000 [ 319.992607][T10526] lo speed is unknown, defaulting to 1000 [ 320.187625][T10525] lo speed is unknown, defaulting to 1000 [ 320.574368][ T30] kauditd_printk_skb: 501 callbacks suppressed [ 320.574386][ T30] audit: type=1400 audit(1751983236.196:5672): avc: denied { create } for pid=10543 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 320.574911][T10544] netlink: 'syz.4.1308': attribute type 17 has an invalid length. [ 320.633494][ T30] audit: type=1400 audit(1751983236.256:5673): avc: denied { read write } for pid=5833 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 320.665354][T10544] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1308'. [ 320.688417][T10544] macvtap0: entered allmulticast mode [ 320.694292][ T30] audit: type=1400 audit(1751983236.286:5674): avc: denied { read write } for pid=5830 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 320.718455][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.725792][T10544] veth0_macvtap: entered allmulticast mode [ 320.752860][ T30] audit: type=1400 audit(1751983236.316:5675): avc: denied { write } for pid=10546 comm="syz.1.1310" name="vlan0" dev="proc" ino=4026533822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 320.757521][T10544] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 320.776230][ T30] audit: type=1400 audit(1751983236.316:5676): avc: denied { create } for pid=10546 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 320.835821][ T30] audit: type=1400 audit(1751983236.316:5677): avc: denied { create } for pid=10546 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 320.844042][T10549] sit0: entered promiscuous mode [ 320.860250][ T30] audit: type=1400 audit(1751983236.316:5678): avc: denied { create } for pid=10546 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 320.890787][T10549] netlink: 'syz.3.1309': attribute type 1 has an invalid length. [ 320.898690][T10549] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1309'. [ 320.909937][ T30] audit: type=1400 audit(1751983236.316:5679): avc: denied { create } for pid=10546 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 320.940258][ T30] audit: type=1400 audit(1751983236.316:5680): avc: denied { create } for pid=10546 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 321.010535][ T30] audit: type=1400 audit(1751983236.316:5681): avc: denied { create } for pid=10546 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 322.339554][T10618] selinux_netlink_send: 50 callbacks suppressed [ 322.339571][T10618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10618 comm=syz.1.1330 [ 322.497594][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1333'. [ 322.506837][T10625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1333'. [ 322.528949][T10625] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 322.683768][T10605] ALSA: mixer_oss: invalid OSS volume '' [ 322.689723][T10605] ALSA: mixer_oss: invalid OSS volume '' [ 326.172398][ T30] kauditd_printk_skb: 347 callbacks suppressed [ 326.172414][ T30] audit: type=1400 audit(1751983241.796:6029): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 368.510671][ T31] INFO: task syz.2.494:7983 blocked for more than 144 seconds. [ 368.518409][ T31] Not tainted 6.16.0-rc5-syzkaller #0 [ 368.529622][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.539229][ T31] task:syz.2.494 state:D stack:28808 pid:7983 tgid:7976 ppid:5829 task_flags:0x400640 flags:0x00004004 [ 368.551236][ T31] Call Trace: [ 368.554527][ T31] [ 368.557473][ T31] __schedule+0x116a/0x5de0 [ 368.562108][ T31] ? psi_task_switch+0x140/0x8e0 [ 368.567088][ T31] ? __pfx___schedule+0x10/0x10 [ 368.572182][ T30] audit: type=1400 audit(1751983284.186:6030): avc: denied { write } for pid=5814 comm="syz-executor" path="pipe:[4534]" dev="pipefs" ino=4534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 368.595447][ T31] ? find_held_lock+0x2b/0x80 [ 368.600165][ T31] ? schedule+0x2d7/0x3a0 [ 368.604847][ T31] schedule+0xe7/0x3a0 [ 368.608941][ T31] schedule_timeout+0x257/0x290 [ 368.613904][ T30] audit: type=1400 audit(1751983284.186:6031): avc: denied { write } for pid=5814 comm="syz-executor" path="pipe:[4534]" dev="pipefs" ino=4534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 368.637106][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 368.642646][ T31] ? rcu_is_watching+0x12/0xc0 [ 368.647426][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.700360][ T31] __wait_for_common+0x2ff/0x4e0 [ 368.705365][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 368.721493][ T30] audit: type=1400 audit(1751983284.186:6032): avc: denied { write } for pid=5814 comm="syz-executor" path="pipe:[4534]" dev="pipefs" ino=4534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 368.780367][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 368.785902][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 368.820549][ T31] wait_for_completion_state+0x1c/0x40 [ 368.826075][ T31] do_coredump+0x8fa/0x4f10 [ 368.842376][ T31] ? lock_acquire+0x160/0x350 [ 368.847107][ T31] ? __pfx_do_coredump+0x10/0x10 [ 368.858763][ T31] ? find_held_lock+0x2b/0x80 [ 368.863694][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 368.868926][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.875343][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 368.880721][ T31] ? kernel_text_address+0x8d/0x100 [ 368.885933][ T31] ? __kernel_text_address+0xd/0x40 [ 368.891362][ T31] ? unwind_get_return_address+0x59/0xa0 [ 368.897014][ T31] ? arch_stack_walk+0xa6/0x100 [ 368.902105][ T31] ? stack_depot_save_flags+0x28/0xa40 [ 368.907586][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 368.912807][ T31] ? kasan_save_stack+0x42/0x60 [ 368.917704][ T31] ? kasan_save_stack+0x33/0x60 [ 368.922630][ T31] ? kasan_save_track+0x14/0x30 [ 368.927484][ T31] ? kasan_save_free_info+0x3b/0x60 [ 368.932864][ T31] ? __kasan_slab_free+0x51/0x70 [ 368.937807][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 368.943150][ T31] ? __sigqueue_free+0xba/0x2a0 [ 368.948009][ T31] ? get_signal+0xcba/0x26d0 [ 368.952696][ T31] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 368.958434][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 368.964201][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 368.970183][ T31] ? rcu_is_watching+0x12/0xc0 [ 368.974959][ T31] get_signal+0x22e3/0x26d0 [ 368.979469][ T31] ? __pfx_get_signal+0x10/0x10 [ 368.984389][ T31] ? trace_signal_generate+0x18b/0x200 [ 368.989853][ T31] ? find_held_lock+0x2b/0x80 [ 368.994844][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 369.000621][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 369.006443][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.012623][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 369.018435][ T31] ? syscall_user_dispatch+0x10c/0x140 [ 369.024086][ T31] exit_to_user_mode_loop+0x84/0x110 [ 369.029390][ T31] do_syscall_64+0x3f6/0x4c0 [ 369.034052][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.039947][ T31] RIP: 0033:0x7ff726b8e929 [ 369.044431][ T31] RSP: 002b:00007ff727a6c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 369.052874][ T31] RAX: 00000000000000ca RBX: 00007ff726db6088 RCX: 00007ff726b8e929 [ 369.060906][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff726db608c [ 369.068873][ T31] RBP: 00007ff726db6080 R08: 00007ff727a8e000 R09: 0000000000000000 [ 369.076922][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff726db608c [ 369.084951][ T31] R13: 0000000000000000 R14: 00007fff46c76bf0 R15: 00007fff46c76cd8 [ 369.092958][ T31] [ 369.096035][ T31] [ 369.096035][ T31] Showing all locks held in the system: [ 369.104694][ T31] 1 lock held by khungtaskd/31: [ 369.109547][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 369.119530][ T31] 2 locks held by getty/5596: [ 369.124244][ T31] #0: ffff88814c8160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 369.134070][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 369.144293][ T31] 1 lock held by syz.1.815/9082: [ 369.149228][ T31] #0: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 369.200522][ T31] [ 369.202887][ T31] ============================================= [ 369.202887][ T31] [ 369.245592][ T31] NMI backtrace for cpu 0 [ 369.245612][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 369.245633][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.245644][ T31] Call Trace: [ 369.245649][ T31] [ 369.245656][ T31] dump_stack_lvl+0x116/0x1f0 [ 369.245687][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 369.245703][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 369.245727][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 369.245753][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 369.245774][ T31] watchdog+0xf70/0x12c0 [ 369.245798][ T31] ? __pfx_watchdog+0x10/0x10 [ 369.245815][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.245839][ T31] ? __kthread_parkme+0x19e/0x250 [ 369.245866][ T31] ? __pfx_watchdog+0x10/0x10 [ 369.245884][ T31] kthread+0x3c5/0x780 [ 369.245901][ T31] ? __pfx_kthread+0x10/0x10 [ 369.245920][ T31] ? rcu_is_watching+0x12/0xc0 [ 369.245942][ T31] ? __pfx_kthread+0x10/0x10 [ 369.245960][ T31] ret_from_fork+0x5d4/0x6f0 [ 369.245983][ T31] ? __pfx_kthread+0x10/0x10 [ 369.246000][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.246032][ T31] [ 369.246038][ T31] Sending NMI from CPU 0 to CPUs 1: [ 369.372730][ C1] NMI backtrace for cpu 1 [ 369.372744][ C1] CPU: 1 UID: 0 PID: 9082 Comm: syz.1.815 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 369.372761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.372769][ C1] RIP: 0010:kasan_check_range+0x15c/0x1b0 [ 369.372788][ C1] Code: c2 48 85 c0 75 ad 48 89 da 4c 89 d8 4c 29 da e9 46 ff ff ff 48 85 d2 74 18 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 0a 80 38 00 <74> f2 e9 75 ff ff ff 5b b8 01 00 00 00 5d 41 5c c3 cc cc cc cc b8 [ 369.372800][ C1] RSP: 0018:ffffc90005b9f7f8 EFLAGS: 00000046 [ 369.372812][ C1] RAX: fffffbfff360f6c2 RBX: fffffbfff360f6c3 RCX: ffffffff8198cc33 [ 369.372821][ C1] RDX: fffffbfff360f6c3 RSI: 0000000000000004 RDI: ffffffff9b07b610 [ 369.372830][ C1] RBP: fffffbfff360f6c2 R08: 0000000000000000 R09: fffffbfff360f6c2 [ 369.372838][ C1] R10: ffffffff9b07b613 R11: 0000000000000001 R12: dffffc0000000000 [ 369.372846][ C1] R13: 0000000000000004 R14: 0000000000000004 R15: ffff88806af0d000 [ 369.372855][ C1] FS: 0000000000000000(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 369.372868][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.372877][ C1] CR2: 00007fce186e7d60 CR3: 000000000e382000 CR4: 00000000003526f0 [ 369.372886][ C1] Call Trace: [ 369.372890][ C1] [ 369.372896][ C1] do_raw_spin_unlock+0x53/0x230 [ 369.372912][ C1] _raw_spin_unlock_irqrestore+0x22/0x80 [ 369.372931][ C1] debug_check_no_obj_freed+0x31f/0x600 [ 369.372944][ C1] ? find_held_lock+0x2b/0x80 [ 369.372962][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 369.372975][ C1] ? __page_table_check_zero+0x346/0x5d0 [ 369.372995][ C1] ? __pfx___page_table_check_zero+0x10/0x10 [ 369.373016][ C1] __free_frozen_pages+0x34a/0x1180 [ 369.373034][ C1] vfree+0x1fd/0xb50 [ 369.373046][ C1] ? find_held_lock+0x2b/0x80 [ 369.373063][ C1] ? rcu_is_watching+0x12/0xc0 [ 369.373079][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 369.373095][ C1] ? __pfx_kcov_close+0x10/0x10 [ 369.373109][ C1] kcov_close+0x34/0x60 [ 369.373122][ C1] __fput+0x3ff/0xb70 [ 369.373135][ C1] ? cleanup_mnt+0x262/0x450 [ 369.373151][ C1] task_work_run+0x14d/0x240 [ 369.373166][ C1] ? __pfx_task_work_run+0x10/0x10 [ 369.373182][ C1] do_exit+0x86c/0x2bd0 [ 369.373203][ C1] ? __pfx_do_exit+0x10/0x10 [ 369.373220][ C1] ? cgroup_update_frozen_flag+0x107/0x210 [ 369.373233][ C1] ? find_held_lock+0x2b/0x80 [ 369.373250][ C1] do_group_exit+0xd3/0x2a0 [ 369.373268][ C1] get_signal+0x2673/0x26d0 [ 369.373286][ C1] ? hrtimer_nanosleep+0x187/0x380 [ 369.373304][ C1] ? __pfx_get_signal+0x10/0x10 [ 369.373319][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 369.373335][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 369.373352][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.373375][ C1] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 369.373394][ C1] exit_to_user_mode_loop+0x84/0x110 [ 369.373410][ C1] do_syscall_64+0x3f6/0x4c0 [ 369.373429][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.373442][ C1] RIP: 0033:0x7fce179c11e5 [ 369.373452][ C1] Code: Unable to access opcode bytes at 0x7fce179c11bb. [ 369.373458][ C1] RSP: 002b:00007fce18711f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 369.373470][ C1] RAX: fffffffffffffdfc RBX: 00007fce17bb5fa0 RCX: 00007fce179c11e5 [ 369.373479][ C1] RDX: 00007fce18711fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.373486][ C1] RBP: 00007fce17a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 369.373494][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 369.373502][ C1] R13: 0000000000000000 R14: 00007fce17bb5fa0 R15: 00007fff0e24ad78 [ 369.373515][ C1] [ 369.950371][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 369.957259][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 369.967308][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.977347][ T31] Call Trace: [ 369.980614][ T31] [ 369.983531][ T31] dump_stack_lvl+0x3d/0x1f0 [ 369.988123][ T31] panic+0x71c/0x800 [ 369.992016][ T31] ? __pfx_panic+0x10/0x10 [ 369.996426][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 370.001793][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 370.007764][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 370.013132][ T31] ? watchdog+0xdda/0x12c0 [ 370.017539][ T31] ? watchdog+0xdcd/0x12c0 [ 370.021950][ T31] watchdog+0xdeb/0x12c0 [ 370.026185][ T31] ? __pfx_watchdog+0x10/0x10 [ 370.030846][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.036038][ T31] ? __kthread_parkme+0x19e/0x250 [ 370.041060][ T31] ? __pfx_watchdog+0x10/0x10 [ 370.045724][ T31] kthread+0x3c5/0x780 [ 370.049778][ T31] ? __pfx_kthread+0x10/0x10 [ 370.054353][ T31] ? rcu_is_watching+0x12/0xc0 [ 370.059110][ T31] ? __pfx_kthread+0x10/0x10 [ 370.063690][ T31] ret_from_fork+0x5d4/0x6f0 [ 370.068286][ T31] ? __pfx_kthread+0x10/0x10 [ 370.072863][ T31] ret_from_fork_asm+0x1a/0x30 [ 370.077621][ T31] [ 370.080836][ T31] Kernel Offset: disabled [ 370.085145][ T31] Rebooting in 86400 seconds..