last executing test programs: 1m8.912642005s ago: executing program 3 (id=2278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) 1m6.461213972s ago: executing program 3 (id=2280): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) rt_tgsigqueueinfo(0x0, 0x0, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x4a}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000700000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) 1m5.815876146s ago: executing program 3 (id=2282): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(0x0, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) setrlimit(0x7, &(0x7f0000000400)={0xfffffffffffffffd}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f00000000c0)=0x7fff, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x3, 0x3}, {0xffff, 0xffe0}, {0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x2}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x8}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x1e, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000009000000185a00000d000000000000000000000002f306000b05000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018270000", @ANYRES32=r0, @ANYBLOB="0000000000040000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000041a1a769707680e911", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x25, '\x00', r5, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x9, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0x1}, 0x94) 1m2.895646888s ago: executing program 0 (id=2286): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) 1m2.891662611s ago: executing program 3 (id=2287): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x101000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000041c0)={&(0x7f0000004480)=@bridge_getlink={0x90, 0x12, 0x300, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x40008, 0x7ae40d5080ef4b2c}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}, @IFLA_GROUP={0x8, 0x1b, 0xdb}, @IFLA_NET_NS_PID={0x8}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @remote}]}}}, @IFLA_LINK={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040800) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000940)=""/237) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000400)="60f855803236f30300000000c44fd10c9f64afe33cba0a934105fe", 0x1b, 0x0, 0x0, 0x2}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) sendmmsg(r8, &(0x7f0000004200)=[{{&(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0x0, 0x7, "d1dba1f0c74ed02ab38836b1d7e70a7248e6c33ecb8712d92100b6f5f43c030f85a3c30882f8b65ba79560f5d97cd7fcc3b4be62a92d79e0879d02107937a0", 0x7}, 0x80, &(0x7f0000001480)=[{&(0x7f00000005c0)="db7a073c16581d3adddfc2c258009d8b90814ebb7e007fda3e4f79299f0025db617740159fbdff04ffad5b667c69642926d8ed", 0x33}, {&(0x7f0000000a40)="2b15ee230b1776f4ab293350b4a23c83fa5b1f3dc35a2730e0d6dd31881bb08c757f3c77ebfa0d03f872b2644f29d66d3ed1bfa875b50d042e4a8e9951c434e05e05e9df9dff7d311ac7c42f05bb2b3fbe8577afae56782725753c4dacdbec5add43de40f77d15fc1b6a4f04d7f97d44837fa1690f4aac84bbc60164e4fb8c2b90f346798c3ff25f87fe170c33", 0x8d}, {&(0x7f0000000b00)="c071783f27c2", 0x6}, {&(0x7f0000000b40)="10fd8e80d4cd3654c73164a00f7e9b84af6dfe87fec69306c095b675e824d16c7ca3ce32c49708f0bc633a1a224ff40814286c35677d1adc99f246f991d441403a790659ea3a4c275622b009cde1418290da7fe1e13b615da16244d1a8e81f708ed3b7f71b374341483736a1618b7035ba8f5f35b14f7d21f065bf30ab7c26d7e7e33d8d61c7ef1764cc540300beba71e5d400af8d189f6c1711a66e610e31e68b077aa3778222451a5bd889225293115150f55a64b5894ef5", 0xb9}, {&(0x7f0000000c00)="174c141cab44bf531cbaf3022218b9875691465810072728cc3da38d9759b7a76f22d7e86ce1b22fd1a58fddd8ecf6b431101dfb8a", 0x35}, {&(0x7f0000000c40)="e3be9cfaee241216d5743604f835578aa7586f5a6c86914ccfa684", 0x1b}, {&(0x7f0000000c80)="c835243aa66b81131cd97cac13725fd6d2f5a891e7b3e767f8741d0746ba593e6d73d471a9de2dc8d60fa9c600d95930702007431e0aa3e8c271ac190bf218228478a1d0fd8af2de348a2ace983777ccde8f6684fe6ae09a18a0793d4914490aabb3bbd0f6a6eb76b01628ff8d81aef230676139ccafd4e1cc8267936059b362eb7aa3bae429f5438f165b015b46026623bb2e8d977aaa678bcf0d61340c480348904235812744c8b63e068bb6bc372a3ee2c6f1e09f3c197b41ac", 0xbb}, {&(0x7f0000000d40)="4ffcf8628fa0b54e215fdc14ae87711c36429042d959b223ca0e44b1b4731b4a9ad130dc063ee4619d8061acc1353f6789232ea74fc31ca1e4cdc11193", 0x3d}, {&(0x7f0000000d80)="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", 0xfe}], 0x9}}, {{&(0x7f0000000f40)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000fc0)="897b57cca8e93a0d8ba38b790b50dc0102e735e1c60cae4300697abcc661345f74937e7203cbec534b05a9533e9d4dea9ed906279bfbefc137bd2a8a370c473448ef", 0x42}, {&(0x7f0000001040)="686f171530df2be75a44d7b8dcc792ec43a7d8d830faf01b38b11e776bfc6e3dae7226f70c2d080b060303258b", 0x2d}, {&(0x7f0000001080)="a2ee7be0343a9966f661d21a3c2edb0386b94e648c8877629aebbe57325ea6b379d519812f772b90d5fbb9ff11ae89f5faccd3f58fb27200421ccd8cb3b634be2c62400f90931757f870637cfec129fef3e7b2d17fb1ba1e2c97420c082d150ea8ad5dab8bbfdd2eaefbbd14f320aaf3f36f31c03f8b08f4f2a1a99aa5b8dedf50c8c873b4110fb4127ebbf66143843d784e2c8d50b0e455e573383beb0bf881f70b99e99f5112eb27861e9145c08e94e9d6bd88b21dedd710fb05905099bd5664686db4f7c7de92a52670194529ca433ddfbd824950321a36d66f6f5ba4f210223a8c4cfdf5d6f7e135023f5cfe46aad68d69e372", 0xf5}, {&(0x7f0000001180)="98fa15cc44deea82a403c39d3a2dcfcc19c1c2268e8b12e192c795d0f53642e865e8c636bbfa3cde940a9d5de9ef444a7e8a9261b07837cc78352c98c5373d7ed87a700ddc67a915b4f963e3f755fe1cc5fa340afbfe7af5723788d1e2f5b01ff9a28c8b14e33c3f6395028e2fd6598dba0050fee2bd1cf74af452aa08835d611bcf7d0519eab0962cd05f6af5f7b8dbb6d3a1a4fe6d3e55aaae42328b7d88d1255e151ae69387970e7d4a76b40d83c8350701c296148ab0", 0xb8}, {&(0x7f0000001240)="fdc572ba0b4219be10aea138535e1e463a2f7203477e62107b39afc2415621de7838f51c26235ea6eeaca202dc554fedc15aa7f95655795febc7284ddc4a2fc52fd8770026d4e238e9743dc453591a8ed35e2fe5d4ecf86fa84ab7e2b56ff84ec8468d6c6c1904609b2db5270dd153ff52fa7f6d4f2f9931b541b428a54eab20", 0x80}, {&(0x7f00000012c0)="d79e8e55426e2942657b73510e5d93b653762ff6f2", 0x15}, {&(0x7f0000001300)="a45888daf1701100600420c91fc01bdcf31ce3ee17bd0b7b5ca780ccbdc9b9efe7c3f9b1fa8f16a639f4797857835d897096cc647582213313325dd4cf8eb4a2e0ab6200c6ef1d67f8fa", 0x4a}], 0x7, &(0x7f0000001400)=[{0x58, 0x1, 0x56ce, "88db13db0f927b7ec14fc9276e2cb05f771409efab23335df9be0cbda3a16906002db23159942cc390df86c63766f5e928fdb533178e12091e94928948aa2fa4de54"}], 0x58}}, {{&(0x7f00000016c0)=@ll={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="504a5f826f45"}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001740)="f7a5416c04221ee35730cc7051d2b3f4928558e16ec16f04496368fb55e53cac4b43703978ca48c7d44eb3da5130f09c83ef1d858bd0b4a811107aa4", 0x3c}, {&(0x7f0000001780)="c339e19b0b7b0add32c2455696b093b062db5be4e0ee0eee9da93c41a914beb90a4de67e267e1e62733b8fd9e3cbb98b619d935bc0fc432cec9b1c27ee644cf956f9800dc27a024a600fc83adb568ff10dd5e1e39faaecf79ab6406e9636f5bda520a38714eca93646f20c8cb9fcc71b251d439be197cddededc48a70a106625d876765e0833d48038a26fd19e32c4faa34d639109", 0x95}], 0x2, &(0x7f0000001880)=[{0xb0, 0x113, 0x200, "27de272f4fdd23237f1f16c3e4935c5869ced54a2e3446b0483e200077a567aafad53ff683b5cc3f16759f8279a5fea56f1e357bb30f1ac1acf6170a19ea7bad5597a1d8fe165282fd8edf2ee6dcf022c441a9fa2843ffd09018c36fed7b4d7dd2d082905eedf9f4920a8bbcf8ebe7d51089250daee0ec5cfad7a1deb758ab4e6ca13016fce5c719eef0a4e4d91ce0709ccc42165bd7271eae2c6fe52505c333"}, {0x20, 0x119, 0x8, "265f060fcc12a361e77237"}, {0xf0, 0x107, 0xffff347c, "c4e4118ce6c3d5d6891fe68678c138d7f4ccd6854ac6ef1580e7ac8a9d595bc4ad5aaadfb6ee8fc11690f58238102e68d5216f69ced9ec23ac8ffa3172b50819a2113117a67f5634bf336d372e8231fd57ee7f63df1fe98d86b3b72b6c58c5ed992344c700c6dda2fc5d551721f09d4b99f0de7ce2dd05ba8836df82abb6bb176a740b3ebc8074961d36b2067a51ba124537d79fd21e9df148b66aaa1cffde62c2173c74c82263b877206119ce1d3005ffa44562d771e2c8b49d2d53d932a80964dfad5caecc8a95713db08cbc2d10355f604ec26fd42c512f1d8c1ae866140a"}], 0x1c0}}, {{&(0x7f0000001a40)=@ll={0x11, 0x10, 0x0, 0x1, 0x2, 0x6, @local}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001ac0)="3e1a357df4ae56020d3571bbdd2615b4c403890126bba0a57cdf236f9d0c049624ab1284a5ba51045250b214426d87e1864860c981984303e8e6ba979eb7fd3b5b8f789e5b4abf5dcbf9f88e729adb5eaca2cfe27fc84e9b3cfb5462bb8124d7b978ef647a3960a73b0fabca4e98c33a37a4cae2cb4fd866ecb61873bc5e4af571d5ee09c27cafa7d7a808ebc7e89466a038a3bc36cd50d5bcea0f28d7dae5a18009ef695a56bfe9e18284a40f", 0xad}, {&(0x7f0000001b80)="490c9708c784b2e922db5edecb5cef0d13b3bacce45cd876f45b6eb2439c720fae5b187fa15952c6d6a37fedea06235d060e4bb2e24b504e02122d203f505c92603d4dea7a1c1a334e0a87b692f51841c560ec82f644298dad99d580bdbb62b4baedfa21daee85f7e1c58d1d0a4ac746cac0e8501b15ab458956fc04e039d847ac7f833aa354e6c0e977567547a7bade59787fdbc0a1a46a62eef587aa4119e4ad922d9044cba792f42bf33eb51870413f7187e06f668b2371c61a3be933435cafae45c5eac5004fbcbbf65754ecf21efee4fe74c2823e682803470ef5f46e795e46f65d7291569bca8338031c3a9d9c7f", 0xf1}, {&(0x7f0000001c80)="d3dc4da60a7b1d7d5f055d179fd8f86fcc3a76a87768353bd07c2c3edfe330dbd0c74b908b1f39b4f5ec4d8c59ada49949c639dd317c924d34ef532d2619d023bd5edac75cf3da32f36457de704b452351b46aee3f4ac998cb5b503af523548a5f433f7eebc52ae9cf60124946c50532e5cdb60c55613702d397ed0abd1ecca77d88ba0f8d52023daac678d87b2a2036138ae9d896b974881fc8a0ed5197290f3c123303cc528c79bd06ddbbdee27931fbc2924554fbd7a16038ee57fee30f213e9acdb5c766e6d165cbcd3544c873ad9c100b0803", 0xd5}, {&(0x7f0000001d80)="47edc96808c132eb7f3bc952a06ecf39c5dbcd78665fae7f0c0685264ee29ae5c6f22fc908d6e551a832ee2195c312ab9df8994a3f4e24ca9d22778aa15eded9fe83dd16908e3d73a92ce1b1b7223283d493b664e2a9c5fb2ba82e3847a492f51240e2be6148b66715f86d10863a675935c955f366c9d506f10d3396b16b1bb10dd906d7e860b5a07a119e4c70c3efd96c444d9a478c2b1c0f122c61594aa4f545bf6e26fd0191e98ebd44aa68c3137b9f45a69c66d59d6e", 0xb8}, {&(0x7f0000001e40)="90b30c40ed44ce247ee6c7dc028264d8ebeac4d9b4d97b5b002a9f82a42b5746820d53091e6ed648a21ccb657075255040df297b955cc2eca944f904e90fc491af7a5483f01b2c1297f52c198ec2", 0x4e}, {&(0x7f0000001ec0)="5fff9916f2203476e78bfcd53f66fcb3caf7e417e07fba27f0e63a6f21b170e715446a4527dfd7dd5b35662a1d50c4e34c8801c8c40e39d8bcc62f94302946e950bc9ac70c42e08cc5d5542738aa7c9e6cae7a876fc6b1b549e01d887d6911573b8fb288ea80b9400457a629f86c933894be3d8494d365d535b19fa8e33eb43d12cee87ab66af0a5b0e0d081dbf0ba15b4a6ffc0", 0x94}], 0x6, &(0x7f0000002000)=[{0xb0, 0x3a, 0x4d1, "e2924bc7d3a19adbafc79a7626fa11486af273cdb536f85bccdb97aa848d3f34519bac94ca2cea2eb7ec531836b45ca41029b651237f29e1e76ad53248383dd97e81208e6821fd4b3e2c31a6a1172c4e2c4accaac811a18272c9d31e027d922db793048dc116632d18ac20ec4dd387b8df920e850d119a39e8736ac8065670a11dbd3a990a6a173632b4f7c4e2ece5ca7d1636d6c06b57a5c4ea"}, {0x90, 0x118, 0x0, "a12f74cca43c31497e8775e1b4d6aae84ef7c0d46202fc1d0c3ce73f623d3f1814f8602a8e03905f3ad674787b1a49c217eaa94e5be78d29fba76adb7d2d1ea5245a7b3dcb5ac8569cf1a8e7fe94818034ed5379aebda27138e729d4530bfe65d5437293a41293ea5c148810dac550ac0f8a09b0d31dd821b08e544611c0"}, {0x60, 0x104, 0x9, "169f3e4c0d587395f47fcc653f5639c4dc268dc8e95dc3fddd4f9b39f314cc2e7cec2e8298eca71d90f90a8c0883d69969b592cb94d3e6337f667fa253c05a862b426ad6fcdb12eb55"}, {0x48, 0x1, 0xf, "3b9338258fb5c6902ef5781c1075df786560576470db8d5b82f4d7ee5d81428c6abf7ad0c5556669569a80dfcc247593a62939ab"}, {0xb0, 0x10e, 0x1, "6702e84c92734bcd003a5fb6c714f053c7be1d6430ff4f6782dcfeeba5a4a41b9c5752f8a5f87e14c69f1fcadab1fd6f2eeab706da6b54eeac661144191237b9b42ade21475688148c232b5b0e20b26e999b05c04745f3cbf0fdb569ce790f9c739094065504b6b3011c67566de0ee13e91a77961c8a363320281c3d8518fe1af5b7fefe2375c501a755f96ced6adbe6e3626c894174464b7f9496cc4dc1"}, {0xd0, 0x118, 0xfffffffd, "54a3fafd947bfefdbe07a09b6978c14b7deb6bde136b76bc71a970dc173fcdd0d3e509cebf0ccc978aea8cb6b84e719d3165603db059e9f36098f4c87862bb1ab98d2896ee1aacae8c5914878c7147c8303d759cfd72fadb089833eb500ee8d6e234e61e64d0d07df9106e5aa40e84b674a427bd1d85927185f9b66f9b16859a36d3c3cd92896e99b28d29b8114f24d8b1a4aa130d0b6403c02e35a809df2093e8975ac3a087186d8bd4c6703f165c778f2049684b07f1d1d6da"}], 0x368}}, {{&(0x7f0000002380)=@phonet={0x23, 0xc5, 0xd2, 0x7}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002400)="9016381cba760673fe7bf072da76c0e61989397e3211c93eb064f76ba4d593af39ef60d15f84e7d9f092278129624a8a62d66590c405c8dba9d82dc4aa8be9c10fbea4e13726a6622a4bf034817e52b88314e53e645ce3a50d270ca9e5f54dd5b5f44ee86906548764b2fd94dd2adfdc82e007b584c283efc49d8f27924b81e64082738c94ed0c139b898ac3a1de6748f7b71a84898a69f57bc77b3f9645ec3105b88c4993ea59d414e5691d44cd92640bd6e5501bdf76a4e11c2aaab12b14cbfb037108f97d67b68d", 0xc9}, {&(0x7f0000002500)="8ae03180f8a9ea67e063c716358db828a3db3fef1b56d7673abb0c1797d645e75e599ecf", 0x24}, {&(0x7f0000002540)="0b1c24a728fa58df33b947c08adf6a86804f9c5474a32fb384424e8479b3471d12880f65b2d90fbf0985112f7410f7ab80d5ba255562dcbf068c57", 0x3b}, {&(0x7f0000002580)="3fb0a7165350d8d7a5fbf6fa38febe1bf6dcbb957ab9c9f8112e9ba4999fd2dc8754c06c6e59", 0x26}], 0x4, &(0x7f0000002780)=[{0x58, 0x102, 0x6, "67978cbc0d4a7fa448230ff60caf589186f469d70c5524baa027f79bc8573ac860d14affa31283bcef454302e25bf7067a45a6cd9eb786c5a4cbaec97d9b905d6f45c1"}, {0x40, 0x1, 0xa, "e6caa4e822fcdb0d8990ddd5b8ef4c9df96973d78d74acbce82cc5310b4940c28b3cfe0205e4eb0f55a9a5aba633aa"}, {0x50, 0x102, 0x0, "6d943f919fc02d2648dac7924eb3873ae27dc51c682ff99a716a82aa0d2a9dffe4be1bbfec169de58326285293491503265c85e7bd72aacc65bb9f9b"}, {0xc8, 0x1, 0xffff, "a2a280b0ef6230e914a40e3772e157417ab964eb0c66b2d1a901451a7d680ff0f27238cfa771162098f2de14448a4165437ca8ada0e213c757f759873c8a4117712c4218a5cf5a3d49295a359d6fd9a481bb76e82ac4d9389fde8c547f6d6461d50ab63f4c79c7780bd8ae49566ac0a9030e23d0ad7b3967cc5a4f704d6d5f2eed96d70d1ab21945cbe2ace7a17e61b8718e46c78945d2c4a315665f21e4c76474a9091d79a6b1757576591b651e55a7f559"}, {0xa0, 0x1, 0x1, "1dd78b5e8a78ced8da0fb25dae758ebcf9554e5c726d64a8c3ceab3124495d28e37e6486539a0d5ee9fc46f4d74cf9d7cc03ad742a6b8481f063f9043f3179a98fe66c02ab9874e75c749f81d3759c9650b823f76626e5cf3469167806262d1d9d24bb6701843f761b8176aa7d2ad6ff40d3cbebb0f9ff8f13d4bc55d0400932641c61e7613a77e0ac5efd"}, {0xe8, 0x108, 0x6, "dbb877abe1910a96c98f63f9202df707f68272355b4ba892b6b20b686bf4cf1e781c7db1e9f79b355f9b2986bb284f647a819e6da0fc4fceff088bb0c7c67a52e55799576168dad8b997f910e7addb66521cadff72eb9bb12fb75bad2836bea8ac2ffc63a1bbb8783b775c24cfed9b27e2871e0d9bb1e9c33f26ae35faa44b119ab19d670775a80bf982293c19015b8f6183d1583c0efa014d758078cef92a27810aa6e572b9095743178f8fe9732d70686d00b8a3aaead8ad53d2453a1f585fb89eb6b10c1612073c577ddf6bd12eb833"}, {0x98, 0x103, 0x8a372c, "2f4ca1b8815b6998eac216ddb84f11d84b92d828d8e2b25527c7a40ee8c6a201d660a1c3abf3579e0ed05309b925f4c6bcc13ee860bf86a04208aae6a574d992e3145d3444de5c90c20f1ec2fb5bde2c9ec6e9329e49dbd6b079e9dd8fca38d0fd045c9566c49755d70b8a49a321f30993f8b5b1d7a08bc3107528709d92a323c39017f5"}, {0x1010, 0x110, 0x5, "33ecfef526f6756f796a02cea6370628de106cd45dc185daf5015a10ac85dd22917c582b4dcae233e92290ac77e3e1ada8472219a65595fb51745a23323ce5ec770348a028bc1c5ae91225bc616c378443b6fd08b164e7f39d6b75f685df30cfb2ed3039c750135f82a4cf0191a6da52d836d67c022dedc74253f42614b21d13c6dfe21849e7ad58a76270b7c6c452e2ba96593cf6d12d17142cfeb7ad1011935f17e832d440457e68f4355e8876011f4cda96f12a556067e6b3bedf2d664ea6f81909fe96d3dfc109329003e2eaadab55ddbbb29aa6876e89e50815954ac4f105afb1aa635a9e0ad8242a17110d9ce92ec5e44b70619268ab218c9fd92290cb89ab1945024c503248e22ea23c0687b05151651a73d7e06c0aaec99df82cf32e78428bee73ca61822ac400629c5d4ca39ce462afc5a42b4a0dc2db27a587cb8f880e9a3ec7a6c8819702a4117edf651cab1fb0779d8b5ed712614e9c19863c25206a988527bfff98dc61ab9ca4bad9d51bc387e1d62f5888088d9d512acdbfdcad6898594d5a69fcc244a069a78c80173eed61edbf2e5a6662ffa5884655aec5102afec63dae75d802ecd95289f24b30ecbecf86e8854d5b9070308cdc68e2d24d050e18adcd4e563329490b76ed921f2a2766aab7172f485af3f4a6e09a39bf83a17094db73883ac3b1acac247e1167f2db10526e0f4df6a8e7f57d21ca3290b0ea862333d0211908ed2a37867f966a5e6cbf777a462bacc30bf24c64386166ddf0174e4d1120bc42bb28b27a88f72bff7547e783d98ff9d801cf8aac407f40ac30dc17609c45b70e1d370497431a6eb24c9fb233ae4619f98733412d3a619808a915d66e12fad841142ff4d41fae1a368d3ef647ad9af59a3772572281dd6b5173efd4acb96241ab983a15350c7b6824cf813eafe356bb711c67d2a68d79f81a868e89a9db88437987bb07f47edaf17c0e33b02a24a2124478e25e31bac2fd1e1df897d7fbe5cfff6071c233b6babb09238110469b9591a9274f5dbe940059fe0d40af916470d7aacaaaba6a327df355dcde6765088a9d66c2695abd3612717fda0de493b38db6eadd457df422ea7e6b46dcb079943807ccc7cd579dd4258f83676b554a590834de540ed43712e3b74499a2b2f4d47fa9a14bd0bdfc3f79fcdab120ab4222e3671e0219e1984829ad05917b4c78f304f0d89abd1126280ea319cc92a2ff83e08efb27297047b5ebb3ea6ec488ad4e7f05860ab22821c74e265dc17bb2c1a92fc4b99a9a0fb46f257a4fb323b479d804700387bfe09d009b0476be0d49e57864edbd152de6b20ba92418cbfd2b1507b39ba4c723d58d31a3fa5b15945b6f2abd7f74ef1587190b90dec1a5ffcec62f84ee5d9db29c8ff2926723a17dcf6bb09858d64a91f7ea3fab3e475ffaffdeeccbd2d65052f11018f78e1e54a31b16dae18d8a3f15f34d0867fe2f4e61f66ae00f1e261a6a22e6d6f53883795f8a7ec7ea6b3115d344442ff450b7ea11226d7aa26228d3fbef6f71d26758b52d7e257d0e435b4ef7f43c0ea66bd8ea048eba8f188b4e137f3aabcbd9da988cb4af1d990d0ddd02d14390bd926d10d9430de92a30a499ed748ea8a91cc9a302bc119ace0ac2c0afbd2db019f24e9ca4a9ff8b50a208c58825464f33afd1aa2ccb8451be8f128e3b8b5723b76f4d50167140f72b915e74f1565b2113a4b2ce2da16b3e0fdff5b0d4bcf8f43c4bd9879a0bdb09091f57b6e7463709f677e151b07aab8828712f8697b2e7a80b5bb736a5e02db3c26b09743d1c37846337c6c4d5e9a3db672f445a9258476fea0a739c5204cd40b8ed25066c9e46ae0f06851b28e539f150b00f7f98dc9dd8a091fe5b0589a52614599492807391d84489f25ef79aa287dd514d2cd38e6521ec652744361c9287b01b7506c4a8b42b4e7f2646e5cf9742484503699491735c96494420743c2e4355a1d9d4ab5a6f17b64c16d47b2f8e67f15f0ff8a8c2aba18c60606246b4b1e61978ac0d916db96c2916cdffbd4feb226eb8c00ade69be8f78e1b5632579437855af68ad4b4cb27f325b891ae3b870c4d8b98c859e619e110dc78e2093b54fbabd15660062fcdebf4363a89a034ccc8439ced8f250f6fba62e70c7957565f4838c9975b6467750e8430fd27543eec5a518b0281ea224ce432e884f91c201feab8f02d40c7e67e57812e5658930ae74f7fd3762141bf4b7523eedc72b1af7ac68763e0eac31356c906b07b5a0d9d5f556be6c2fde24785ed08383d05258f7788f52b0289d7fc49f7e197b837ce752326d683ea5b41bb7f5bc924daf74a8dc3a7851676c1dd4b6774a51cecdbd80ffbbf52ec1d2efa8ef9f9f0b070300e59e9c08095387e2f397311d73f3b8168fc4da2ff55dd3fa0486a9c81395eeb8034c0a7a3bfa07d3891815896852794118d597dd85638c6a7e8edc6f129f6b625df0a29af47c537af92d09472dd66b91dda4501dc480d515bd8fadf7b291ff4d4403d71d264193611797452f56001af360fab6b2139f27b0429d9b0757915fe8e784e6f13676251a75fe45e2e7e0577c332e3f0d8b84b2a8c9765c21c4ec6dff940bb77d1755ee495a52fdadc9203f78a6c67fd5d9a6c4a65f18dd77ec223e5b810688b8c1c7e06dfa5bfcc2084a47a63bfcd3dfbe970abaf5c6338a898d17d681b592eb5b8d441153626505c31768d75ae1ce8a2961e604fa728f17dc4f2ad3472625cf4ec254536339c7e428fe65fb9b88257a5a56805a7159b81e829b37ef33224b8a4a6a6397a3b9b1f74739dcd3879b8e52bf3e639b65fd75acd3ac73ee7e4619ec7f5f3838c5eea593bb2873e791ec5893fa0375fb3da5ce95a78e39b2458e8a6a96708d678277fcd70d8091bd9c2f2545d5e74b72cbd626be100b63406da4720c617b4c72fdf41dcd62e1ab43a15749beabc3fcc37b130f52a97600ea3283e8fd23f28515a5a7359f846d86714b6190f04cf0473e3f56f92c1e90b5b5dd9a4a0c6e4f5d0b1eaf002186be98824a47aca068eae68391c99f2a4a57dc09a739a863e292a48921db3f4670ee164884f5ad9022bea260060bb4a3f38a4283ce064a44c8380d173a6703fb1f92f003a83d7ce33c7ea078cbc10a4b67f951bdf31317782b82f4001f10d8d29906181f416690b4c8ef1e7f4f98764344f6ae85afc214e0b92b5c3852dc48c67aa16af4ed3a3c47ae514fe027648db19abf2959862ef461e781e668936fc3428960a5c8771fbe7fc7696b92ed2c3f0f6dfb389509a7a96140dcbbd58be15f8e118a4d7c150482f86feee5ca00da632f6dce43093443f23e3aff3ef6f1855b3d291507dd8e82a1ad7ef80742a5539ee83184baca75227eb732e0515fd585854f2c388416af934d5dab95ffa0a9b9b758b3e6a67f073038e3168d045b81d7ac870ba2d40f37e74733e8953b6dff7dfd0332ddedab543c73c4e51007fdb303b87ec33203e84a4edb24eb8dde6d3017dfef1e5ded710a30f53daa1deb9bd3c8831296ae9f8cbac7f3d50f353ceac6539a6160b1dc99d4d451ec420d0172e1b49d395aadce08677d4c3e42a03057aae2f32416a474b11a130a8b0a02a4b21aef48b5afffbac4e1aca84fb868dc58c24c8e45dec14fd8ebc3aa09e92b010e4c9e2487494acfc03098f9699fa47820d3008d323b8579ccc22ef10157a827aab9a66d1f58e0b6d5f58cd6ec42b0fb7c9bc01b02cb62c74d6c19ed371d0b608abaa12aac68c24157fa9a68549e7d521d35fc43955b9078f1bb229fafd8f707fd94c68719395e2a47d750eee3a71251806f902a56fd0b8c079320e56a256dabe014351d8171b94f390ce42dbfb42c4f4753ac30d70f79e7e082945a49734898fd1d303965adb6df37b8b7d15d2791a07c6573f3ce6a72b847c6622ad568b3bf5ec506990a4f76f9618e816473aae46e077d965890c49c319d0fb1c2147650b76abeaedd13b606a81dee96f64609ab7a7074243bafaf00bdaed8f924d3d1ac68fb689b1e284bf6e0913e7b7773f808aa50a6c2e2687ef7cf7f824579b395fbdccafc1bc708d3a5796707fe769f53a6894e0f465708df81393c04eaeebe6e29198eeb5f02a562702b3e6d2a99b4a0889e4db7f9b197a7a0574bfea4fba8305a53defe948a5520a90c8ef63d1a0f9ebec208d7f8f6f4e87d685e8bca8e29e2e5084305cacd536b05e91b8a34cd63632db05034b31d4f062c84c45b8a9b5f9f068b25ccd8fc5d0f948f9773cff105df73e841b7d489ec4c5436e768f19ae8eb2bed215411fafe703f81f02f0e96126ba321bedbc20acce83d214d9e02454a84b2e1210b36151cc3c7857bebead6ada155bde7829d9dfb71a478b34ee4d3a164f4464e38f737d15e4f8d7875cbcf34090e972e4e03fc7ed9288fb4658f68b980fa7a8b0444fc3c164cff37fdce83bb53c55287adf03fddad4756937a118980a1f759a33e57fc07079a461be8ad3aa6264a81dbda79a4e166b2491601173382dfa197ebecdb80fae2766188e4f80d9b4ca87b26df8bc6c6da9976cfbce73f71b7c5697baf45184ed59e535eea62b7d1dadd62a40321cd99b633535535776beb6fc4b86af25e5f861248837e5fc4de3addf223c121106e57ed88864bb9137fcafce7707d083eeec34b769c0e3756d541fb3dab5cb17e68f80afd4715101479bb80168435f4f9447b8538762e31cbc1fa77d4f934ce3c0d2595aba70710453449f63a52da18bb034ab251dc316a1f41fb320471acc12cc6a243179754da9fa137e8c96c5d34e80e4cf5d38a1e36ca03129dee02f8225dd5c0d948e90fe9bfe3fa0b0b3011358a04f6e4556445297058922b1c68cdc87907ab08c5481e140d800b538e46e976f9a1f0d747438792788b2c8b8af13eadce44fff1b2f6e3ce5eaba39729737841a6949a6b53007dcd32869218411478c1064df7d00fdb5749d82025faf36c4d0306c6300ae171c180ce2c0c730e116f63a3f607276a9482225b6d0f9530d12155ac658e01fa167c88d3221d88beef4776ff33d640b3d427d8c680b8270480b1277fd1d3fdf319d149dd78dce83066b8e912494aa709fcd2b9cd2b610003f9c60dca991db925421bd7014a13bddf7c0aafa2a7509fe938442204072d271f25c5bebb2a37e1c507c66270b20ddb098748203fb4f68a172029207c1488c57f100e2e377999875ec3d4fabf6d8550c9f2b3aed286759b5c09b229fd11bc87726aa1c5ff4a65fa953dbdeae3418a19eabd94ed73777b1867fba917fa320b260616f682aa0a5a4bf1e9f3b2521aff69eab02069818341e1c2e77a8f57b3288a71e452d0bd0e5591162bc304837f46707bce46c7a8e72ce353f873d9b4500cad0bf9fe4ae49dd87e88f2787b30f6bab81056b0ad1c72402777c9d363c845dae2f13a9e8d8e4d09759312bf8990975a9689a883d2f519880651494e49b5c8e7a0a19a591749985b932b885b979808085323c41ad77b2286a63f70fc2f56cb47fb2d5c84489d65f2c73bf76f9bf746026ad37cd74326b3353428da18dbdb2c3223603f7c4164ba392f014552f4e2768c5cbfb3de4a3b5c0f442f66d31a2e0964bfa3a40b6eb21d39c6778d73d26bf943c1f91e2ccd8ba18d7d91e9185d8b1b2a538648f27cfbc06d4ea38532741a0dd0fa29fe3854586ae4a23501d2b3954c260a99fbe5ab6d786797460811ebe8e9de44f23faccbd769161ada353fd1858fd2d5b664453f6998be7327db8aeb64e1dc969f49a7cc8ee38f8a746bc0d626d38de32b88985641b6dd9328f4"}, {0x98, 0x119, 0x40, "1e1950ea5b98a9b5914d02d7ac899926236a7812ca1c75c13cf5b210fefc0d50bfc527aeaab704a79d39244519c63c0a2381bcbcf9cf51745406ea75d3837c73a5a69c62d0351caf6d06ea84a35715fab1294dfa23f553b815628a18298e8baf62432bd4fe202043778f5585c1a9e3591535874b3ed56542c6443bad53ad1602bc22febbb078"}, {0xd8, 0x110, 0x7, "835284584c891099f633dbce683130f24a846fcca6ae89a3d24f0a372c6fcdf2f242660afb92211a9deffd4caab832e213c4a0f9310ffca47151af9404ac153d64ab58981f231310a8bd924b51b8b7e4b1256fd0f2851e6f08e2ac96cc51d7e92f8173681e13f1253c78934cf11ada8398a07aa284eeb912e5d000483ab9b32f18354413efdf17f0260c1c499e5571c6097762ebeb7f6d826f47efb15ae39ae6ce47b89f29dbadbf60ad8fd4f236387c319b4b901fc1152c564640890261d186e839"}], 0x1550}}, {{&(0x7f0000002640)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000004140)=[{&(0x7f00000026c0)="03", 0x1}, {&(0x7f0000003d00)="d8be3b59b6fde3307227e6428ecb876b972829979b53705d3ccc6aff55a6837a94a1ac3df4a1c0f6f01309c9f71a6e57a7bedc03f3dfbe02039c2df7ac2c9c3327b542", 0x43}, {&(0x7f0000003d80)="5710ccec6a214cc9c2c1882515ff9103e98168cbdd3621a93a24299c86da409408bb5cd56ba98b5213cb9d0840666a70db61904ea2baf59570f6ab3e3d632e0584c74d79243354aba2440d92ee6a31e1e5ea24bcbc8b6582461bb35f172fd67379f85e92421adfa88c8d6cd89856d80fac1312", 0x73}, {&(0x7f0000003e00)="f26a84e5746eeac5dc71618807ee303a3052edd7506049180e91967de9c72a7043b379764faf3ba28c36282b34ec16105990e296091c73484db03c2fdce7f09f392415f395165ec448ce", 0x4a}, {&(0x7f0000003e80)="bf930779163db8b99afb310cc6fcdf3dc3e6ac693c763f703fc562bbe06d369946efebbc119f53cb08f5b3286a74447364b8b0655aeba473572ce3ee78821517fd4e5645a6509287e0caa5476f9ce69b7b4ead4d20c8e2e1cc9ca45417c49264c1e112be6ce70f8a6c63ca15eee7b6d25f928ea846028ca53628a34d294dc35953d1f43f4ee1fa064435703ffd6db5f83fc3a8a2215151ceb0653d74680d54b816aefef26f7ed93dcefd072d231e312a41a607bbd8da9b8a114ae9066c1459284f8775a28b8aa7f88417a75728c31a40ec9f55aa014572f5bf682cc5a55de855d2f7abe4abd18c6775ecb436d8274206b8", 0xf1}, {&(0x7f0000003f80)="fc14d1501c02434895ebf6e20cff25e34d13f40b863c6be1916db169b7c90a6a6402bc263b094220bd21df7a23912e64096552ec309f73f290d3a36f16788b374c316168f85f3bf4b26cd516f94df269c1464c71ea9d24925ccf1c86b5fe51c9e1ea2850c33981a32a9f0e0d81bedc79d58c5f0b0a6338f8c474015ecec037b842e67bb037aa576bd6e4d8", 0x8b}, {&(0x7f0000002700)="8aa9169eaa4a82391c820b2b5160874a7e21dc8209af48018be4970d3aa163610f7265e2da76e3b0f6", 0x29}, {&(0x7f0000004040)="7620964dd0a72c94a875c3a83e9b35df7b0796eb3159cea477a3ca77b459e1cda4a7cb0a7d0b138135e635e846addcf01093651ff4014c465205e32a990dab9082a4115e5c2e2bc785ec7fa5c327b0d186d549d2635f178981aae873da52f5a9fd19ac56f29068328763f54b19dc4319749f99f1f95d573c521c6f5418d4b73a0ba6a494d5e2dd7fb50128d22ba91abc088f8627d21b1ae33b7edc40acec30e149bd069886167fb5dc63d0afe5f3ef55c0dc1abd7868069aa4c34cf445489f0addd1f42e2718ef14fc9ed16d1f1865fb0e484eba7c495895b284a6ead2c1df1a573d828c8fe495ba1101", 0xea}], 0x8, &(0x7f00000041c0)}}], 0x6, 0x1) syz_io_uring_setup(0x556f, &(0x7f0000000240)={0x0, 0xfc97, 0x4, 0x3, 0x95, 0x0, r7}, &(0x7f0000000440), &(0x7f00000001c0)) fsopen(&(0x7f00000000c0)='pstore\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x10, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7623c435aff90493ddd7aae07ef35f0700000000000000ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x9]}) 1m1.51729214s ago: executing program 0 (id=2289): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e404d50a969ff67347cff6127e6", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/68, 0x44}], 0x1}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 1m1.415272006s ago: executing program 3 (id=2290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) 59.291779289s ago: executing program 3 (id=2293): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x28, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r11 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r11, 0x110, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@deltclass={0x84, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x6}, {0x5, 0xa0a0451979ef2cd5}, {0xd, 0x8}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xfff}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x81}}}, @tclass_kind_options=@c_htb={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x84}, 0x1, 0x0, 0x0, 0x40098}, 0x24004010) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) 57.998853939s ago: executing program 0 (id=2295): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) socket(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='sN\'\x05\xbd\x15\xe0\xfb\xef\x85\xaf\xdb@`\xc5k\xab\xd5\xbc\x96f\x940\x11\xa5\xffm\r|\xa5\x97\xa0+\x14\r\xe0\xeaw\xc9\x9d9\xc5\xd5\x16\x92\xfbi\x82\xe0\x88\x87\x17\xf3\xb7k\xb4IW\xac9\xa4^\x16\xe2\xa2\b\xe7\xcd\x8a~\x02\xe5\xf80\xe8\x87\x04\x18\x9c\xd7\xe4\x18(\f\xe69\x9fQi\xc57\xfcl\xf5\x91\xfc\x14\xd1\xa3\x9f3S\x16\x1ab\x96\x1e\x97\xe0\x95}V\xb8\xcbC\xe0\xc9\xb4\x03\xfa\xc0\xb7\x86\xe9A\xaf\xb3\x02Sw\xf6w\xaa\x1d\x8b\xcb\x98\xe5\x9e\xab\x17\x83f+\x1d\xd1\xfbF\x1ej_O\x8f\xaa\x1a\x96\xa0K\x18R\xff\xd6\x8c\x06\x8e\\\x00\xc6\v\x87\x0eOA\xbc\xdb\x8c\xc6\x89u\xab4\xd5\xf2toV\x89\xa2\xaf\t*\xfe\xfa\xfcH\xd9\x00`\xb9MO3\xfcq\xac\x01\x88\xae\xbds\xabM\x93\xee)\x8e\xf0\\HG\x05\xdf\xd0\x8ez\xc3f}={@\x8e\f\xd6\xe7]8\xa5=\xf8-\xd5\r\xbdP\x0f\x87b\xe1\xee\xfd\v\xe9\nl\x1cL\xabK\xdd\x12\xf2\xd3\x99\x88\xd94\xd1\r\xfbT\x16>\xb9\xe5\xd5c\x9a\x11Z\xe1\t\xc5m-\xe8\xcf\xc9\xd8c\\V\xde\n\x9d\xac<\xd3\xf1\xb8}\xaer\xd9\x9e\xdb\x90\xfb\\l\x1b\x1a8\xb3\xe87\x1d\xbc\x86\xa5]j\x96\x9d~\x04\xe2\xe7t\x17T\xc3\xa3\xc3bs\b\xa4\xf6\x9cE\xacHl\xcd3\x97\x91n\xec\xe6\x06(\xbf\x06\xba\x0e\xa4\x90E\xa8elEQ\xb12\x03\xba\n\xa6Y\xc3c\xfeI\xec2\xe7$\x86\x98\x89\x9f\xfc', &(0x7f00000002c0)='%(,c\xbe\xfbL:&\x06\x00\x00\x00\x00\x00\x00\x00\xd5\x16\x82\xae\xd0\xd7\x85\xa1\x1f;\xbb\x1c\x93\x87\x14\x9c\xb3w\x90Fw!\xa1!,\x9a\x1a9S\xe0]\xec\x8d\xe5\xbd\xa3\xda\xa4\xc3\xd2\x95\xce\xa7\x00\x00\x00\x00\x91\xd7\x19\x12&\xe6\x1f\x15uL\xff\x9b\aR\fH$p\xea\xb9\xdeo\xab\x122\x9eD\xce%\x9b\xd0G\xc0\x10\xa2\x19\x96h\xd4\x1b\x90\x82-\xc0\xbb\xa5\r\xad\xc7\x1eZ\xc3P\xee\xbd1\x8d/', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x101000, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x9, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) openat$drirender128(0xffffff9c, &(0x7f0000000140), 0x5e5080, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 52.957319247s ago: executing program 0 (id=2301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)={0x18, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x11, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x7, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000180), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x2020) 52.31496514s ago: executing program 0 (id=2303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) 51.597761435s ago: executing program 0 (id=2305): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e404d50a969ff67347cff6127e6", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/68, 0x44}], 0x1}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 51.415506835s ago: executing program 32 (id=2305): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e404d50a969ff67347cff6127e6", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/68, 0x44}], 0x1}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 44.072773873s ago: executing program 33 (id=2293): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x28, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r11 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r11, 0x110, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@deltclass={0x84, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x6}, {0x5, 0xa0a0451979ef2cd5}, {0xd, 0x8}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xfff}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x81}}}, @tclass_kind_options=@c_htb={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x84}, 0x1, 0x0, 0x0, 0x40098}, 0x24004010) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) 14.826656829s ago: executing program 4 (id=2367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0x132, &(0x7f00000004c0)={0x0, 0x5cb1, 0x2, 0x203, 0xe4}, &(0x7f0000000540), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000040)='s/', 0x2) getsockopt(0xffffffffffffffff, 0x2, 0x38, &(0x7f00000002c0)=""/232, &(0x7f0000000000)=0xe8) 12.142428209s ago: executing program 4 (id=2369): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6000000, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x1, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x5, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0xfffffffd, 0x80008071, 0xffff8001, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x80000001, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd6, 0xea4, 0x0, 0x4, 0x7, 0xa, 0x6, 0x400, 0x8000, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x8, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x10, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x7, 0x3], [0x7, 0x408, 0x3ff, 0x7, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x0, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x8, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x5, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x3, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 11.690829008s ago: executing program 1 (id=2370): r0 = syz_usb_connect(0x5, 0x207, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x40400c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(0x0, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x4040, 0x11c) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd000]}, 0x8) 10.120332851s ago: executing program 4 (id=2371): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44e26a9689047dc810523bb6cb646edac69057131e1be7162eed1f07ba5e28f6fe1cb93967ef2f0ef2d0df01ab65f8f730d2851251b7cda33d6e3116f566927744a6e23559db48c03d567c61c68d4095f639c7ddaa0d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) 8.239234275s ago: executing program 1 (id=2374): setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x200000000000000) 8.168475016s ago: executing program 4 (id=2375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8000000, 0x5f9, 0xb3, 0x1ff, 0x0, [{0x8, 0x6, 0x9, '\x00', 0xe}, {0x8, 0x7, 0x72, '\x00', 0x4}, {0x0, 0x7f, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xf7, 0x50, 0x7f, '\x00', 0x60}, {0xff, 0x0, 0x1}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0x8, 0x7, 0xb, '\x00', 0xf0}, {0xa, 0x9, 0x3, '\x00', 0xff}, {0xff, 0xff, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x3, '\x00', 0x1}, {0xd2, 0x7, 0x19, '\x00', 0xff}, {0x1, 0x89, 0xc, '\x00', 0xf9}, {0x7, 0x4f, 0x2}, {0x4, 0x1, 0x96, '\x00', 0x7}, {0xb, 0x20, 0x7, '\x00', 0x7f}, {0x1, 0x7, 0xd2, '\x00', 0x4}, {0x6c, 0x19, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x4d, 0xa, '\x00', 0x3}, {0x9b, 0xff, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x97, 0x8, 0x4, '\x00', 0x68}, {0x6, 0x8, 0xdf}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_io_uring_setup(0x32ba, &(0x7f0000000180)={0x0, 0xc27c, 0x1000, 0x3, 0x43}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000000c0), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@deltaction={0x58, 0x31, 0x300, 0x170bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2e85bf3b}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}]}, 0x58}}, 0x4081) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fc"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendto(0xffffffffffffffff, &(0x7f0000000140)="4c9e7c7e4eafe783643aea030babd56d90a00d126a73", 0x16, 0x40010, &(0x7f0000000180)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r7, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) 7.649108914s ago: executing program 1 (id=2376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xd4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f00000005c0), 0xfffffffffffffffa, 0x200) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000600)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000007c0)={&(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x3, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000b00)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x8}) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000002c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r14}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000bc0)={0x9, 0x0, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001000)={&(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000f80)=[0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0], 0xa, 0x3, 0xa}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000001100)={0x100, 0xa, &(0x7f0000000c00)=[r3, r4, r5, r6, r7, r8, r9, r12, r14, r15], &(0x7f0000000c40)=[0x400, 0x9, 0x6, 0x2], &(0x7f0000001080)=[r16], &(0x7f00000010c0)=[0x72c7], 0x0, 0x3}) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r17, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2400c080) syz_usb_connect$cdc_ecm(0x4, 0x89, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x1, 0x1, 0x81, 0x60, 0x63, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "ff50aa43"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x8, 0x1, 0x4}, [@country_functional={0x12, 0x24, 0x7, 0xfd, 0x4, [0x9, 0x7, 0x0, 0x6, 0x4d, 0x7c]}, @obex={0x5, 0x24, 0x15, 0x8}, @obex={0x5, 0x24, 0x15, 0x8e}, @country_functional={0xa, 0x24, 0x7, 0x80, 0x800, [0x81, 0x3]}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x12}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x8, 0x5, 0x1, 0x1, 0xe5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x408, 0x8, 0x2, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x9, 0xaf}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xf7, 0xf, 0x10, 0x20, 0xc}, 0x35, &(0x7f0000000380)={0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x4, 0xf000, 0x0, [0x3f00, 0xff0000, 0x3f00, 0x3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "ed1b5574732f018b6b198198f207a322"}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x62, &(0x7f0000000400)=ANY=[@ANYBLOB="6203ccf84d19b18106ca4c6a38176747eac143cc8b7e4cdcdf2655d77cd0ecbd516c88a90a43dadd871d89d8e922d60c3d5b2c90cd90ed67baf4d35d3cb9ea0008000000000000b040ef9a907474de6a1d3b521cbbc58d982ce24958d6adcb187d07"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x436}}, {0x6c, &(0x7f00000004c0)=@string={0x6c, 0x3, "c1211fb95b2c015203c6f8d4421cb9ec68e0b2c36399fdfa28152c143aa64de4692dbe0b63a6b2a19793b9ff366d21f86e97e6eb8baaff5678b83eda12813f64534b32b1946a6ff56935cdbbdef514dda8154c0f3886740bd571511ab5da2e806f181ff04a20ac177598"}}]}) 6.429742622s ago: executing program 2 (id=2377): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 6.078862511s ago: executing program 2 (id=2378): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000200000007000780080006400000000011000300686173683a6e65742c6e6574000000000500040000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="71756f74612c001b39b6e20666ff1eccedb36fc3bcc73d4cc58fdfcfb2464532615189b18aa6d4f0845d9870bc16ee68cebda9102009203b0b130ab0a5c8a575ccf7db6be10efbf66ffcfaca9790cfe803e2dbb66642ce863fb420f33c5ca5c26a9e3efe4f00"]) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = syz_io_uring_setup(0x10000835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="744bd0584054e1739035954572616e733d72646d612c706f72743d307830303030b03030203130303234653030303030303030", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f747970653d2a5e2c66736e616d653d7672616e319708066e612c2c00"]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x240040c6, 0x1}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000280)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r8, r4, 0x0, 0x1, &(0x7f0000000300)='\x00'}, 0x30) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) 5.886446153s ago: executing program 1 (id=2379): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000cc0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000200"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000080000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008200000018110000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000005c0)={&(0x7f0000000540)=[{0x401, 0x2800, 0x22, &(0x7f0000000240)="7d28fff002a9d3d0c0c36ef08cfd86373bd06450c9d08a9451710ade911e311b711a"}, {0x3, 0x6801, 0x0, 0x0}], 0x2}) syz_open_pts(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x800000000d, 0x2, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1d, 0x2, 0x0, 0x1fd, 0x1000000802, 0x0, 0x0, 0x6}, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) dup(r4) io_setup(0x2017, 0x0) r5 = socket$kcm(0x2, 0x0, 0x106) sendmsg$inet(r5, 0x0, 0x34004000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0xa, 0x5, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r7, 0x4004480d, 0x0) pselect6(0x40, &(0x7f0000001080)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbf8, 0x20}, 0x6a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 5.384915007s ago: executing program 2 (id=2380): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x20000000000, 0xfffffffffffffffd, 0x0, 0xa00000000000000, 0x1000001000, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x9464}, 0x0, 0x0) dup(0xffffffffffffffff) 4.33861277s ago: executing program 4 (id=2381): ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000004, 0x9, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000140)=[{r2, 0x8024}], 0x1, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x47) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f0000000140)='./bus\x00') r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)={r4}) linkat(r3, &(0x7f0000000000)='./file1\x00', r3, &(0x7f00000001c0)='./bus\x00', 0x0) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') link(&(0x7f0000000300)='./file2\x00', &(0x7f0000000380)='./file1\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="530000000206010200000000000000000000000205000100077dee0005000500070000000000050004000300000105000500"/60], 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090008bd700000000000040000000c0018000aac0f0004ac0f00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.357976221s ago: executing program 2 (id=2382): open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x99, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x63, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x1, "000000050000000026"}]}}}}}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x7fff}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2, 0x2}}, 0x0, 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r7}, 0xc) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='dyn']) 2.005030793s ago: executing program 2 (id=2383): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 1.659532207s ago: executing program 1 (id=2384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44e26a9689047dc810523bb6cb646edac69057131e1be7162eed1f07ba5e28f6fe1cb93967ef2f0ef2d0df01ab65f8f730d2851251b7cda33d6e3116f566927744a6e23559db48c03d567c61c68d4095f639c7ddaa0d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) 1.392379487s ago: executing program 2 (id=2385): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, 0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xd6b, 0xa, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x3, &(0x7f0000000240)) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000495000/0x2000)=nil, 0x2000, 0xb) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0x3d, 0x0, 0x1, &(0x7f00000000c0)="ac"}, {0x3980, 0x2001, 0x1, &(0x7f0000000480)="11"}], 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 658.648407ms ago: executing program 1 (id=2386): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x4000004) pread64(0xffffffffffffffff, &(0x7f0000000580)=""/133, 0x85, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}}, 0x0) read(r3, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd0000", 0x23) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 4 (id=2387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) ioctl$TCXONC(r0, 0x540a, 0x3) sendmmsg$unix(r3, &(0x7f0000006980)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000380)="dcd547a603768190d5a76f20e5f5fed0ffab37928f4ffe44e96a8d6c15aeeb584bc7945da793c8c35d8bf6f952e56785dc85a2f2578883b0453d46c7427fd48eaf8b457b15bf0d07629c794f1f1d36eaffa660ccbac5741a6fdff22ab2ede2567951f44caef1d33b999514a7acf1647cb8270f4d1dfe9560bd8ae059f96190e8bff1f4afdb6ce054579df7dae600a5d910212b9067272a1aeb", 0x99}, {&(0x7f0000000540)="3cad3d85b309367f2dccc13a65fe774c8fd920658a9b19c13b29441c36551f704db1adf8ab0b679fbe26e5390dd000870e5e5c26c2c12e9f37577af363ffa7cadd3862452c237ab5a99b2cb08f3a00054112ca7f32d415e82de0e8cd8f75f146", 0x60}, {&(0x7f00000005c0)="5d1e1a6897f5e5e14aee4efd9a7e71e86554bb87f6efa797778ac200467e56d94f57e04fa2193da98407ceb64e7a1d5de3c553ffde69e58d6ef106f905f47ac7177054b8d365be7801e9d6cedeb86d0fbfb64c6f46b02e6c32c20469fd2cf041ca9e983862998b51fdb2b8895830b148a5af8359f936ef859babd20ea52bbcd1bc034bd4d0ea81cd1b2d54fd81e7d2d30b53891c3acf1aea993952a420b47c8bd36842517c3ee5c79ca04feb405d9d5af2b731437f6960add4873bc65b0614257191f0cf5d0de4e80a03eb22a3e7a22ee89d9fe6705aeeb3baed50c2853e5e80bcff6a2ab714ea7cb5b084b4e447ffec58704f45f9", 0xf5}], 0x3, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r1, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, 0xffffffffffffffff]}}], 0xc8, 0x40}}, {{&(0x7f0000006180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000065c0)=[{&(0x7f0000006200)="fe02eba0284e0a03f003f082194027b10fe531af7b0ced046019f6c8299a88e537f90bc56e6a7ac5f0efee8610b132ae279588", 0x33}, {&(0x7f0000006240)="a938b51672d2bdff435094d8635bbac84f4d297a35561788e677cbe9ee3da53eadf1e7e2a102b2b71a26e529029e6666385672", 0x33}, {&(0x7f0000006280)="9916fcfcfe16b210b1975280d87940b2b81054fd6fe84b607129796a2fd7ef0fde1d6110e5bf7cb60eb5d8c553db5dea900eff4bbfd7129681b0a5b196d0f1d73e34001771e011659a52f59cf4a9f17f253b6ec456452432e8b72ecdd339950d831680340ab425773cb6c7584a4142fe9dcf6eb6d86678c8f8", 0x79}, {&(0x7f0000006300)="03d3740fe376e5a70e24a11b519db9d3a3969fb2ce50a4007ca61656806bf569f9307b4421494cb53ca13ceab4de17e49e9d258210b0ad4d46979363dcf948edefbed7e974def2c0", 0x48}, {&(0x7f0000006380)="7993bdc27726eae38245080d7ccb4723cdc0e4a890cb3cae4ee88ad88a6587a7d59733ee46ee337aca8496327839d4605871818d523e1815dda8fef8c2f591a7fa4bfb602e1e7d77e128830c233d828e762e83c593b34588c6f6b94a1fcf8ec3c6bb52259b085ebcf6a5b87666cbea8045356f", 0x73}, {&(0x7f0000006440)="5b446b643835a56491b9937821f51d5f22318f635298c5d427a4943834042426c4446b1b0d4858d4998ca6b12c19843ae2", 0x31}, {&(0x7f0000006480)}, {&(0x7f0000000700)="e6f72f40ddfb49823c0201c99e1e2153687616f1c553a154d8002d49b53bdc290755c47b35ce099fe5ab96c5da7d3e982949fbede9b2ed508943ccfb400336982d54c8b516674aa0e4c913028cfa0953dfaaeeb9fca0f946bdd68d5127cf23a236de4adeb6930aac48425d6b83dc645e85ee6b34e03e7730e330bb00561565c5c1501e0d0388935b3234b9c512eca9d7bc7aa9261846c53909def833ea7e8f0ba04e153eb5d47f8c2f414fb9272584e2614ec52c158589fb3df747af2d80dc0e7297718f847c84d2e7a0543f9c6b30a5b955c82fa7aae142cca04490cbd561", 0xdf}], 0x8, &(0x7f0000006640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}], 0x58, 0x48080}}, {{&(0x7f00000066c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000006880)=[{&(0x7f0000006740)="91a0ef6cd0eb6867e4b8eea061702a590d66", 0x12}, {&(0x7f0000006780)="46fcfa78ca3cdcae3a86d57b7060c643b8f98ed9f0cf60d5ac4b75ad421e551d6af159e4557aead2273de73b028f4990a0d7fe7bdd93d3d1526787b6587400d09ec46f65a00881b17d528e818f08396ab2046915b01198a711359f66da09bd8481bd3388efaa797c3c3c9115e870ad0090f62522e3b5caeff5386d9b51f59d642c629c2e08578728874a18f2259f480fb4bdf82e62f47ce16e54153ad5d35fdf54221c76b5cdd8b9e30c43754cec53da025827377d525ae62c1b6bd092f2aed268138bfeab5e302c39e1d9cf28cdf466c944bb7317a55ab8c5cb26e5cf3c7ef7c43c9a292e1cd62a0384", 0xea}], 0x2, &(0x7f0000000800)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r3, r3, r2, r2]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78, 0x4000040}}], 0x3, 0x0) r4 = gettid() setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001840), 0x3b, 0x0) sched_setattr(r4, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, 0x0, 0x20044000) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x101}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x2, 0x0, 0x6}}, 0xe8) kernel console output (not intermixed with test programs): int 0x88 has an invalid bInterval 0, changing to 7 [ 913.931337][T12830] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.266517][ T6051] usb 5-1: USB disconnect, device number 65 [ 914.324900][T12830] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 914.367663][T12830] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 914.424362][T12830] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 914.493687][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 914.505679][T12830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.521954][T12830] usb 4-1: Product: syz [ 914.527305][T12830] usb 4-1: Manufacturer: syz [ 914.554036][T12830] usb 4-1: SerialNumber: syz [ 914.619665][T12830] usb 4-1: config 0 descriptor?? [ 914.706838][T14155] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 914.719685][T12830] iguanair 4-1:0.255: probe with driver iguanair failed with error -12 [ 914.886222][T12830] usb 4-1: USB disconnect, device number 46 [ 914.981728][ T5870] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 915.091529][ T5927] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 915.183774][ T5870] usb 1-1: unable to get BOS descriptor or descriptor too short [ 915.193406][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.204105][ T5870] usb 1-1: config 0 has no interfaces? [ 915.212578][ T5870] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 915.214518][T14186] fuse: Invalid rootmode [ 915.223001][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.255597][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 915.267153][ T5870] usb 1-1: Product: syz [ 915.275114][ T5870] usb 1-1: Manufacturer: syz [ 915.289053][ T5927] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 915.299238][ T5870] usb 1-1: SerialNumber: syz [ 915.316893][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.327675][ T5870] usb 1-1: config 0 descriptor?? [ 915.332837][ T5927] usb 2-1: Product: syz [ 915.340706][ T5927] usb 2-1: Manufacturer: syz [ 915.345527][ T5927] usb 2-1: SerialNumber: syz [ 915.365291][ T5927] usb 2-1: config 0 descriptor?? [ 915.376640][ T5927] gspca_main: sq905-2.14.0 probing 2770:9120 [ 915.521493][T12830] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 915.824137][ T5927] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 915.871947][ T5927] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 915.961342][ T5927] usb 2-1: USB disconnect, device number 59 [ 915.989679][T12830] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 916.014815][T12830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.048746][T12830] usb 3-1: Product: syz [ 916.090301][T12830] usb 3-1: Manufacturer: syz [ 916.197603][T12830] usb 3-1: SerialNumber: syz [ 916.406742][ T6051] usb 1-1: USB disconnect, device number 55 [ 917.054070][T12830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 917.081266][T12830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 917.099645][T12830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 917.127811][T12830] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 917.180750][T12830] usb 3-1: USB disconnect, device number 64 [ 917.780663][T14211] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2042'. [ 917.842631][T14213] usb usb8: usbfs: process 14213 (syz.0.2041) did not claim interface 0 before use [ 917.988528][T14219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2044'. [ 917.992503][T14217] SELinux: failed to load policy [ 918.180652][ T30] audit: type=1400 audit(1766292715.799:1286): avc: denied { execute } for pid=14216 comm="syz.4.2044" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=52530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 918.424576][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 918.542668][ T5927] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 918.637324][ T30] audit: type=1400 audit(1766292716.249:1287): avc: denied { ioctl } for pid=14212 comm="syz.0.2041" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 918.844295][ T5927] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 918.873527][ T5927] usb 3-1: config 0 has no interface number 0 [ 918.883314][T14225] syzkaller1: entered promiscuous mode [ 918.889730][T14225] syzkaller1: entered allmulticast mode [ 918.895604][ T5927] usb 3-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 918.984623][ T5927] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 919.006756][ T5927] usb 3-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 919.024896][ T5927] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 919.041881][ T5927] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 919.240811][ T5927] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 919.250017][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.258516][ T5927] usb 3-1: Product: syz [ 919.263802][ T5927] usb 3-1: Manufacturer: syz [ 919.268409][ T5927] usb 3-1: SerialNumber: syz [ 919.279616][ T5927] usb 3-1: config 0 descriptor?? [ 919.290119][T14217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 919.361870][ T5870] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 919.588242][T14237] fuse: Invalid rootmode [ 919.711943][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.821604][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 919.833300][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.856364][ T5870] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 919.880952][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.899779][ T5870] usb 5-1: Product: syz [ 919.906990][ T5870] usb 5-1: Manufacturer: syz [ 919.918808][ T5870] usb 5-1: SerialNumber: syz [ 919.958988][ T5870] usb 5-1: config 0 descriptor?? [ 919.976432][ T5870] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 919.995388][ T5870] usb 5-1: Detected SIO [ 920.001866][ T5870] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 920.010803][ T5927] iguanair 3-1:0.255: probe with driver iguanair failed with error -12 [ 920.151907][ T5870] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 920.971926][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 921.000691][ T5927] usb 3-1: USB disconnect, device number 65 [ 921.307386][T14255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2048'. [ 921.403939][T14225] veth0_macvtap: left promiscuous mode [ 922.124926][ T10] usb 5-1: USB disconnect, device number 66 [ 922.134125][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 922.143501][ T5927] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 922.165751][ T10] ftdi_sio 5-1:0.0: device disconnected [ 922.257419][ T30] audit: type=1400 audit(1766292719.909:1288): avc: denied { read } for pid=14266 comm="syz.1.2054" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 922.385428][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 922.412401][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.422734][ T5927] usb 3-1: config 0 has no interfaces? [ 922.430575][ T5927] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 922.439766][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.592983][ T5927] usb 3-1: Product: syz [ 922.597172][ T5927] usb 3-1: Manufacturer: syz [ 922.601833][ T5927] usb 3-1: SerialNumber: syz [ 922.825798][ T30] audit: type=1400 audit(1766292719.909:1289): avc: denied { open } for pid=14266 comm="syz.1.2054" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 922.869015][ T5927] usb 3-1: config 0 descriptor?? [ 922.876637][ T1077] bond0: (slave bond_slave_0): interface is now down [ 922.889560][ T1077] bond0: (slave bond_slave_1): interface is now down [ 922.906322][ T1077] bond0: now running without any active interface! [ 924.115467][ T6051] usb 3-1: USB disconnect, device number 66 [ 924.900578][ T10] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 925.110494][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 925.124867][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 925.145829][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 925.170158][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 925.246590][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.255751][ T10] usb 4-1: Product: syz [ 925.259908][ T10] usb 4-1: Manufacturer: syz [ 925.264677][ T10] usb 4-1: SerialNumber: syz [ 925.308694][ T10] usb 4-1: config 0 descriptor?? [ 925.336956][ T10] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 925.567317][ T10] usb 4-1: USB disconnect, device number 47 [ 926.243144][T14292] fuse: Invalid rootmode [ 928.804632][T14313] binder_alloc: 14310: binder_alloc_buf, no vma [ 929.040658][T14317] FAULT_INJECTION: forcing a failure. [ 929.040658][T14317] name failslab, interval 1, probability 0, space 0, times 0 [ 929.108575][T14319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=340 sclass=netlink_route_socket pid=14319 comm=syz.0.2066 [ 929.276614][T14317] CPU: 0 UID: 0 PID: 14317 Comm: syz.4.2067 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.276644][T14317] Tainted: [L]=SOFTLOCKUP [ 929.276650][T14317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 929.276657][T14317] Call Trace: [ 929.276661][T14317] [ 929.276667][T14317] dump_stack_lvl+0x16c/0x1f0 [ 929.276686][T14317] should_fail_ex+0x512/0x640 [ 929.276703][T14317] ? __kmalloc_cache_noprof+0x5f/0x800 [ 929.276722][T14317] should_failslab+0xc2/0x120 [ 929.276737][T14317] __kmalloc_cache_noprof+0x80/0x800 [ 929.276755][T14317] ? sctp_auth_shkey_create+0x9e/0x210 [ 929.276772][T14317] ? sctp_auth_shkey_create+0x9e/0x210 [ 929.276785][T14317] sctp_auth_shkey_create+0x9e/0x210 [ 929.276800][T14317] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 929.276818][T14317] sctp_association_new+0x19ad/0x29d0 [ 929.276839][T14317] sctp_connect_new_asoc+0x1a8/0x770 [ 929.276857][T14317] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 929.276873][T14317] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 929.276892][T14317] sctp_sendmsg+0x157c/0x1e20 [ 929.276913][T14317] ? __pfx_sctp_sendmsg+0x10/0x10 [ 929.276935][T14317] ? __pfx_sock_has_perm+0x10/0x10 [ 929.276954][T14317] ? __pfx_sctp_sendmsg+0x10/0x10 [ 929.276971][T14317] inet_sendmsg+0x11c/0x140 [ 929.276984][T14317] ____sys_sendmsg+0x973/0xc30 [ 929.277001][T14317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.277022][T14317] ___sys_sendmsg+0x134/0x1d0 [ 929.277035][T14317] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.277064][T14317] __sys_sendmsg+0x16d/0x220 [ 929.277076][T14317] ? __pfx___sys_sendmsg+0x10/0x10 [ 929.277096][T14317] do_syscall_64+0xcd/0xf80 [ 929.277112][T14317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.277123][T14317] RIP: 0033:0x7fd05798f749 [ 929.277134][T14317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.277144][T14317] RSP: 002b:00007fd05883b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.277155][T14317] RAX: ffffffffffffffda RBX: 00007fd057be5fa0 RCX: 00007fd05798f749 [ 929.277162][T14317] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 929.277169][T14317] RBP: 00007fd05883b090 R08: 0000000000000000 R09: 0000000000000000 [ 929.277181][T14317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.277187][T14317] R13: 00007fd057be6038 R14: 00007fd057be5fa0 R15: 00007fff8e4a5bd8 [ 929.277202][T14317] [ 930.599939][T14328] SELinux: failed to load policy [ 930.751197][T14331] overlayfs: failed to resolve './file1': -2 [ 930.861514][ T5985] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 931.088413][ T5985] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 931.282124][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.564508][ T5985] usb 4-1: config 0 has no interface number 0 [ 931.589120][ T5985] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 931.651137][ T5985] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 931.693691][ T5985] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 931.738816][ T5985] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 931.756104][ T5985] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 931.862471][ T5985] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 931.873460][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.894797][ T5985] usb 4-1: Product: syz [ 931.899044][ T5985] usb 4-1: Manufacturer: syz [ 931.911576][ T5985] usb 4-1: SerialNumber: syz [ 932.091086][ T5985] usb 4-1: config 0 descriptor?? [ 932.115275][T14328] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 932.178858][T14351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2073'. [ 932.219089][ T5985] iguanair 4-1:0.255: probe with driver iguanair failed with error -12 [ 932.745719][T14354] fuse: Invalid rootmode [ 933.355262][ T5870] usb 4-1: USB disconnect, device number 48 [ 933.473244][T14367] overlayfs: failed to resolve './file1': -2 [ 934.801564][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 936.444404][T14397] fuse: Invalid rootmode [ 937.017354][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 937.447546][T14407] SELinux: failed to load policy [ 937.673541][ T5870] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 937.841983][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 937.869176][ T5870] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 937.881464][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.908156][T13819] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 937.956163][ T5870] usb 3-1: Product: syz [ 937.972118][ T5870] usb 3-1: Manufacturer: syz [ 937.978498][ T5870] usb 3-1: SerialNumber: syz [ 938.025607][ T5870] usb 3-1: config 0 descriptor?? [ 938.058832][ T5870] gspca_main: sq905-2.14.0 probing 2770:9120 [ 938.074903][T13819] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 938.083472][T13819] usb 4-1: config 0 has no interface number 0 [ 938.114011][T13819] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 938.241644][T13819] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 938.274910][T13819] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 938.301606][T13819] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 938.395469][T13819] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 938.414620][T13819] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 938.431018][T13819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.441435][T13819] usb 4-1: Product: syz [ 938.447999][T13819] usb 4-1: Manufacturer: syz [ 938.461428][ T5870] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 938.481952][ T5870] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 938.510032][ T5870] usb 3-1: USB disconnect, device number 67 [ 938.530769][T13819] usb 4-1: SerialNumber: syz [ 938.586689][T13819] usb 4-1: config 0 descriptor?? [ 938.609173][T14411] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 938.640937][T13819] iguanair 4-1:0.255: probe with driver iguanair failed with error -12 [ 939.000508][ T5877] usb 4-1: USB disconnect, device number 49 [ 939.120347][ T30] audit: type=1400 audit(1766292737.767:1290): avc: denied { setopt } for pid=14418 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 941.251499][T10700] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 941.374104][T14448] fuse: Invalid rootmode [ 941.502467][T10700] usb 1-1: Using ep0 maxpacket: 8 [ 941.791053][T10700] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 941.804771][T10700] usb 1-1: config 0 has no interface number 0 [ 941.875609][T10700] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 941.905689][T10700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.956886][T10700] usb 1-1: Product: syz [ 941.961076][T10700] usb 1-1: Manufacturer: syz [ 941.986474][T10700] usb 1-1: SerialNumber: syz [ 942.001812][T10700] usb 1-1: config 0 descriptor?? [ 942.266788][ T6051] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 942.274062][T14458] binder_alloc: 14449: binder_alloc_buf, no vma [ 942.354895][T14457] SELinux: failed to load policy [ 942.491637][ T6051] usb 5-1: device descriptor read/64, error -71 [ 942.751476][ T6051] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 942.841607][T13819] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 942.955311][ T6051] usb 5-1: device descriptor read/64, error -71 [ 943.041787][T14466] xt_TCPMSS: Only works on TCP SYN packets [ 943.078176][T13819] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 943.086484][T13819] usb 2-1: config 0 has no interface number 0 [ 943.093991][T13819] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 943.121919][ T6051] usb usb5-port1: attempt power cycle [ 943.216562][T13819] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 943.264363][T10700] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 943.285229][T10700] uvcvideo 1-1:0.31: No valid video chain found. [ 943.302517][T13819] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 943.319896][T10700] usb 1-1: USB disconnect, device number 56 [ 943.330451][T13819] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 943.355677][T13819] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 943.415980][T13819] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 943.447613][T13819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.491484][ T6051] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 943.500160][T13819] usb 2-1: Product: syz [ 943.517935][T13819] usb 2-1: Manufacturer: syz [ 943.530621][T13819] usb 2-1: SerialNumber: syz [ 943.532277][ T6051] usb 5-1: device descriptor read/8, error -71 [ 943.563524][T13819] usb 2-1: config 0 descriptor?? [ 943.585120][T14457] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 943.612893][T13819] iguanair 2-1:0.255: probe with driver iguanair failed with error -12 [ 943.905111][ T6051] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 943.954444][ T6051] usb 5-1: device descriptor read/8, error -71 [ 943.992475][T13819] usb 2-1: USB disconnect, device number 60 [ 944.023769][T14473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2111'. [ 944.067816][T14475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.171871][ T6051] usb usb5-port1: unable to enumerate USB device [ 945.773491][T14494] fuse: Invalid rootmode [ 947.631861][T14496] binder_alloc: 14487: binder_alloc_buf, no vma [ 947.990043][T14518] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2123'. [ 948.344841][T14522] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 948.352125][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 949.250842][T14532] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2126'. [ 949.610423][T14538] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 949.617768][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 950.838836][T14547] SELinux: failed to load policy [ 951.131504][ T6201] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 951.216770][T14556] fuse: Invalid rootmode [ 951.298181][ T6201] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 951.317355][ T6201] usb 3-1: config 0 has no interface number 0 [ 951.338174][ T6201] usb 3-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 951.392623][ T6201] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 951.459317][ T6201] usb 3-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 951.532674][ T6201] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 951.621152][ T6201] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 951.733888][ T6201] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 951.769949][ T6201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.806437][ T6201] usb 3-1: Product: syz [ 951.856903][ T6201] usb 3-1: Manufacturer: syz [ 951.896106][ T6201] usb 3-1: SerialNumber: syz [ 951.946413][ T6201] usb 3-1: config 0 descriptor?? [ 951.981760][T14547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 952.005720][ T6201] iguanair 3-1:0.255: probe with driver iguanair failed with error -12 [ 952.394089][T13819] usb 3-1: USB disconnect, device number 68 [ 952.651363][T14568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.668266][T14567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2133'. [ 953.581594][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2134'. [ 954.187238][ T30] audit: type=1326 audit(1766292752.827:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5692f8f749 code=0x7ffc0000 [ 954.490175][ T30] audit: type=1326 audit(1766292752.867:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5692f8f749 code=0x7ffc0000 [ 954.703977][ T30] audit: type=1326 audit(1766292752.867:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5692f8f749 code=0x7ffc0000 [ 954.939890][ T30] audit: type=1326 audit(1766292752.867:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5692f8f749 code=0x7ffc0000 [ 955.253260][ T30] audit: type=1326 audit(1766292752.877:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5692f8f749 code=0x7ffc0000 [ 955.436168][ T30] audit: type=1326 audit(1766292752.877:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5692f8f749 code=0x7ffc0000 [ 956.734531][ T30] audit: type=1326 audit(1766292752.897:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5692f8f749 code=0x7ffc0000 [ 957.325652][ T30] audit: type=1400 audit(1766292755.977:1298): avc: denied { ioctl } for pid=14610 comm="syz.4.2143" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 957.486434][T14614] xt_TCPMSS: Only works on TCP SYN packets [ 957.620850][T14609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2142'. [ 957.977150][T14626] netlink: 'syz.4.2146': attribute type 10 has an invalid length. [ 958.217927][T14625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2142'. [ 958.604496][T14627] fuse: Invalid rootmode [ 959.149843][T14634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2148'. [ 959.793047][T14640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.762654][ T5870] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 961.554790][T14653] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 961.563921][T14653] FAULT_INJECTION: forcing a failure. [ 961.563921][T14653] name failslab, interval 1, probability 0, space 0, times 0 [ 961.576589][T14653] CPU: 1 UID: 0 PID: 14653 Comm: syz.3.2152 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.576607][T14653] Tainted: [L]=SOFTLOCKUP [ 961.576611][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 961.576618][T14653] Call Trace: [ 961.576622][T14653] [ 961.576632][T14653] dump_stack_lvl+0x16c/0x1f0 [ 961.576652][T14653] should_fail_ex+0x512/0x640 [ 961.576668][T14653] ? fs_reclaim_acquire+0xae/0x150 [ 961.576685][T14653] should_failslab+0xc2/0x120 [ 961.576700][T14653] __kmalloc_noprof+0xeb/0x910 [ 961.576717][T14653] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 961.576735][T14653] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 961.576749][T14653] tomoyo_realpath_from_path+0xc2/0x6e0 [ 961.576765][T14653] ? tomoyo_profile+0x47/0x60 [ 961.576783][T14653] tomoyo_path_number_perm+0x245/0x580 [ 961.576794][T14653] ? tomoyo_path_number_perm+0x237/0x580 [ 961.576808][T14653] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 961.576822][T14653] ? find_held_lock+0x2b/0x80 [ 961.576852][T14653] ? find_held_lock+0x2b/0x80 [ 961.576867][T14653] ? hook_file_ioctl_common+0x144/0x410 [ 961.576887][T14653] ? __fget_files+0x20e/0x3c0 [ 961.576905][T14653] security_file_ioctl+0x9b/0x240 [ 961.576921][T14653] __x64_sys_ioctl+0xb7/0x210 [ 961.576935][T14653] do_syscall_64+0xcd/0xf80 [ 961.576950][T14653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.576961][T14653] RIP: 0033:0x7f5692f8f749 [ 961.576971][T14653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.576982][T14653] RSP: 002b:00007f5693d92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 961.576992][T14653] RAX: ffffffffffffffda RBX: 00007f56931e5fa0 RCX: 00007f5692f8f749 [ 961.577000][T14653] RDX: 0000200000000040 RSI: 0000000000005408 RDI: 0000000000000004 [ 961.577006][T14653] RBP: 00007f5693d92090 R08: 0000000000000000 R09: 0000000000000000 [ 961.577013][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.577020][T14653] R13: 00007f56931e6038 R14: 00007f56931e5fa0 R15: 00007ffc08dd47e8 [ 961.577035][T14653] [ 961.577048][T14653] ERROR: Out of memory at tomoyo_realpath_from_path. [ 961.936364][T14657] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2153'. [ 962.143436][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 962.239200][T14663] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 962.246462][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 962.345823][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2155'. [ 962.694419][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.732722][ T5870] usb 3-1: config 0 has no interfaces? [ 962.741710][ T5870] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 962.791884][T14669] xt_TCPMSS: Only works on TCP SYN packets [ 962.831877][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.858453][ T5870] usb 3-1: Product: syz [ 962.862979][ T5870] usb 3-1: Manufacturer: syz [ 962.867572][ T5870] usb 3-1: SerialNumber: syz [ 962.941485][ T5870] usb 3-1: config 0 descriptor?? [ 963.403331][ T5870] usb 3-1: USB disconnect, device number 69 [ 963.661649][ T30] audit: type=1400 audit(1766292762.267:1299): avc: denied { connect } for pid=14679 comm="syz.3.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 963.785564][ T30] audit: type=1400 audit(1766292762.267:1300): avc: denied { bind } for pid=14679 comm="syz.3.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 963.872332][T14682] netlink: 'syz.2.2160': attribute type 5 has an invalid length. [ 963.914192][ T30] audit: type=1400 audit(1766292762.267:1301): avc: denied { listen } for pid=14679 comm="syz.3.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 963.978856][ T30] audit: type=1400 audit(1766292762.267:1302): avc: denied { accept } for pid=14679 comm="syz.3.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 964.061856][ T30] audit: type=1400 audit(1766292762.467:1303): avc: denied { ioctl } for pid=14680 comm="syz.2.2160" path="socket:[55155]" dev="sockfs" ino=55155 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 964.167331][ T30] audit: type=1400 audit(1766292762.537:1304): avc: denied { read write } for pid=14680 comm="syz.2.2160" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 964.340258][ T30] audit: type=1400 audit(1766292762.537:1305): avc: denied { open } for pid=14680 comm="syz.2.2160" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 964.365803][ T30] audit: type=1400 audit(1766292762.937:1306): avc: denied { bind } for pid=14687 comm="syz.2.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 964.388104][ T30] audit: type=1400 audit(1766292762.937:1307): avc: denied { listen } for pid=14687 comm="syz.2.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 964.451525][ T30] audit: type=1400 audit(1766292762.937:1308): avc: denied { write } for pid=14687 comm="syz.2.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 964.561852][ T6201] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 964.728955][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2164'. [ 964.746936][ T6201] usb 3-1: Using ep0 maxpacket: 16 [ 964.752491][T14698] xt_TCPMSS: Only works on TCP SYN packets [ 964.823606][ T6201] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.840865][ T6201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 964.870683][T14700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2163'. [ 964.891716][ T6201] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 964.952353][ T6201] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 964.974358][ T6201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.018997][ T6201] usb 3-1: Product: syz [ 965.040656][ T6201] usb 3-1: Manufacturer: syz [ 965.067579][ T6201] usb 3-1: SerialNumber: syz [ 965.101068][ T6201] usb 3-1: config 0 descriptor?? [ 965.159385][ T6201] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 965.174459][ T6201] gspca_stv06xx: st6422 sensor detected [ 965.454283][ T6201] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 965.528923][ T6201] usb 3-1: USB disconnect, device number 70 [ 966.462578][T14717] xt_TCPMSS: Only works on TCP SYN packets [ 967.137537][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2168'. [ 967.381610][ T5936] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 967.543659][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 967.562485][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.581457][ T5936] usb 3-1: config 0 has no interfaces? [ 967.597392][ T5936] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 967.606598][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.621430][ T5936] usb 3-1: Product: syz [ 967.630203][ T5936] usb 3-1: Manufacturer: syz [ 967.639462][ T5936] usb 3-1: SerialNumber: syz [ 967.654446][ T5936] usb 3-1: config 0 descriptor?? [ 967.779487][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2174'. [ 967.822361][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2174'. [ 967.883030][ T5877] usb 3-1: USB disconnect, device number 71 [ 968.205848][T14745] Invalid logical block size (16646144) [ 968.451549][ T5936] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 968.603905][ T5936] usb 4-1: unable to get BOS descriptor or descriptor too short [ 968.645671][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.663770][T14751] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2177'. [ 968.680852][ T5936] usb 4-1: config 0 has no interfaces? [ 968.787268][ T5936] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 968.830720][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.944080][T14754] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 968.951325][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 969.287418][ T5936] usb 4-1: Product: syz [ 969.293729][ T5936] usb 4-1: Manufacturer: syz [ 969.301859][ T5936] usb 4-1: SerialNumber: syz [ 969.315646][ T5936] usb 4-1: config 0 descriptor?? [ 969.541822][ T5936] usb 4-1: USB disconnect, device number 50 [ 972.709502][T14797] FAULT_INJECTION: forcing a failure. [ 972.709502][T14797] name failslab, interval 1, probability 0, space 0, times 0 [ 972.790807][T14797] CPU: 1 UID: 0 PID: 14797 Comm: syz.4.2188 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.790833][T14797] Tainted: [L]=SOFTLOCKUP [ 972.790837][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 972.790844][T14797] Call Trace: [ 972.790849][T14797] [ 972.790853][T14797] dump_stack_lvl+0x16c/0x1f0 [ 972.790872][T14797] should_fail_ex+0x512/0x640 [ 972.790890][T14797] ? fs_reclaim_acquire+0xae/0x150 [ 972.790907][T14797] should_failslab+0xc2/0x120 [ 972.790922][T14797] __kmalloc_noprof+0xeb/0x910 [ 972.790940][T14797] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 972.790959][T14797] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 972.790973][T14797] tomoyo_realpath_from_path+0xc2/0x6e0 [ 972.790989][T14797] ? tomoyo_profile+0x47/0x60 [ 972.791007][T14797] tomoyo_path_number_perm+0x245/0x580 [ 972.791019][T14797] ? tomoyo_path_number_perm+0x237/0x580 [ 972.791033][T14797] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 972.791046][T14797] ? find_held_lock+0x2b/0x80 [ 972.791076][T14797] ? find_held_lock+0x2b/0x80 [ 972.791091][T14797] ? hook_file_ioctl_common+0x144/0x410 [ 972.791112][T14797] ? __fget_files+0x20e/0x3c0 [ 972.791135][T14797] security_file_ioctl+0x9b/0x240 [ 972.791150][T14797] __x64_sys_ioctl+0xb7/0x210 [ 972.791165][T14797] do_syscall_64+0xcd/0xf80 [ 972.791180][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.791191][T14797] RIP: 0033:0x7fd05798f749 [ 972.791201][T14797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.791211][T14797] RSP: 002b:00007fd05883b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.791222][T14797] RAX: ffffffffffffffda RBX: 00007fd057be5fa0 RCX: 00007fd05798f749 [ 972.791229][T14797] RDX: 0000000000000000 RSI: 00000000c1007c00 RDI: 0000000000000003 [ 972.791235][T14797] RBP: 00007fd05883b090 R08: 0000000000000000 R09: 0000000000000000 [ 972.791242][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.791248][T14797] R13: 00007fd057be6038 R14: 00007fd057be5fa0 R15: 00007fff8e4a5bd8 [ 972.791263][T14797] [ 972.791268][T14797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 973.331365][ T3790] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.449241][ T3473] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.485472][ T1139] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.522510][ T1139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.601581][ T49] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 973.702072][ T5877] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 973.811916][ T49] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 973.831749][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.850018][ T49] usb 1-1: Product: syz [ 973.861983][ T49] usb 1-1: Manufacturer: syz [ 973.866742][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 973.874721][ T49] usb 1-1: SerialNumber: syz [ 973.880067][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.891938][ T49] usb 1-1: config 0 descriptor?? [ 973.897843][ T5877] usb 5-1: config 0 has no interfaces? [ 973.903423][ T6051] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 973.971635][ T5877] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 973.981537][ T5985] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 973.991146][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.001503][ T5877] usb 5-1: Product: syz [ 974.005692][ T5877] usb 5-1: Manufacturer: syz [ 974.010295][ T5877] usb 5-1: SerialNumber: syz [ 974.026595][ T5877] usb 5-1: config 0 descriptor?? [ 974.064653][ T6051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 974.089711][ T6051] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 974.100213][ T6051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.123895][ T6051] usb 3-1: config 0 descriptor?? [ 974.145392][ T5985] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 974.154689][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.163271][ T5985] usb 4-1: Product: syz [ 974.167588][ T5985] usb 4-1: Manufacturer: syz [ 974.172388][ T5985] usb 4-1: SerialNumber: syz [ 974.182201][ T5985] usb 4-1: config 0 descriptor?? [ 974.270227][ T5877] usb 5-1: USB disconnect, device number 71 [ 974.332329][ T6051] ath6kl: Failed to submit usb control message: -71 [ 974.358991][T14820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.362325][ T6051] ath6kl: unable to send the bmi data to the device: -71 [ 974.483999][ T6051] ath6kl: Unable to send get target info: -71 [ 974.511910][T14820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.516978][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 974.516993][ T30] audit: type=1400 audit(1766292773.167:1311): avc: denied { mount } for pid=14817 comm="syz.3.2197" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 974.959492][ T6051] ath6kl: Failed to init ath6kl core: -71 [ 974.970851][ T6051] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 975.000099][ T6051] usb 3-1: USB disconnect, device number 72 [ 975.065979][T14818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.095667][T14818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.192784][T14826] input: syz0 as /devices/virtual/input/input66 [ 975.272345][ T30] audit: type=1400 audit(1766292773.927:1312): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 975.791506][T13819] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 975.954867][T14836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.970287][T13819] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 975.996118][T13819] usb 3-1: config 1 has no interface number 1 [ 976.027113][T13819] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 976.078126][T13819] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.118610][T13819] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 976.146993][T13819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.168564][T13819] usb 3-1: Product: 杈噳煂䨶ᮋ渗壽屣눥烯⁈ၸ埒ꭿ拰Ⴍ硕쳢릴翥ቢ쀻珨⭛匟쉂붨鵺ᧃ窥釾剖Ṥᰳ왔⮯綏먹㳽ꮾ寗횭੪嬹█珽प卲᪳琕柫貸轖픋삹ૻ홪ᩭ漋㬛楦≋봜볗䡼⇅ [ 976.225723][T13819] usb 3-1: Manufacturer: Т [ 976.242230][T13819] usb 3-1: SerialNumber: 䠳撬﮷嶠⤃⺩ꆂ橤뭍ꣽ헓䎩떻䨤은뙺犮髗঻펩䤨ౢ秈뷃㪜뜹ḳ䳢 [ 976.379698][ T49] usb-storage 1-1:0.0: USB Mass Storage device detected [ 976.498442][ T49] usb 1-1: USB disconnect, device number 57 [ 976.705672][T14842] loop6: detected capacity change from 0 to 524287999 [ 976.856165][T14844] overlayfs: missing 'lowerdir' [ 976.975768][ T30] audit: type=1400 audit(1766292775.627:1313): avc: denied { ioctl } for pid=14833 comm="syz.2.2200" path="socket:[56613]" dev="sockfs" ino=56613 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 977.048152][ T5985] usb-storage 4-1:0.0: USB Mass Storage device detected [ 977.205132][ T5985] usb 4-1: USB disconnect, device number 51 [ 977.319320][T13819] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 977.363408][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2203'. [ 977.404973][T13819] usb 3-1: USB disconnect, device number 73 [ 977.518803][T14705] udevd[14705]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.491421][T14880] overlayfs: missing 'lowerdir' [ 979.401523][ T49] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 979.448265][T14895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2218'. [ 979.571158][ T49] usb 4-1: unable to get BOS descriptor or descriptor too short [ 979.602328][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.648679][ T49] usb 4-1: config 0 has no interfaces? [ 979.692497][ T49] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 979.715855][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.817431][T14900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.845782][ T49] usb 4-1: Product: syz [ 979.906157][ T49] usb 4-1: Manufacturer: syz [ 979.910777][ T49] usb 4-1: SerialNumber: syz [ 979.962960][ T49] usb 4-1: config 0 descriptor?? [ 980.241989][ T49] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 980.577887][ T6051] usb 4-1: USB disconnect, device number 52 [ 981.262836][ T49] usb 5-1: Invalid ep0 maxpacket: 64 [ 981.669626][T14908] syz.1.2221 (14908): drop_caches: 2 [ 981.761483][ T49] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 981.951530][ T49] usb 5-1: Invalid ep0 maxpacket: 64 [ 981.979314][ T49] usb usb5-port1: attempt power cycle [ 982.381727][ T49] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 982.483244][ T49] usb 5-1: Invalid ep0 maxpacket: 64 [ 982.521474][T14919] xt_TCPMSS: Only works on TCP SYN packets [ 982.661547][ T49] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 982.703698][ T49] usb 5-1: Invalid ep0 maxpacket: 64 [ 982.724259][ T49] usb usb5-port1: unable to enumerate USB device [ 983.127364][T14926] overlayfs: missing 'lowerdir' [ 984.427340][T14936] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2230'. [ 984.739838][T14942] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 984.747132][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 985.579804][T14952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2232'. [ 986.119859][T14957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2231'. [ 986.355606][T14963] binder: 14960:14963 ioctl 4018620d 0 returned -22 [ 986.833440][T14967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.271652][ T6051] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 987.423408][ T6051] usb 2-1: unable to get BOS descriptor or descriptor too short [ 987.452173][ T6051] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.536445][ T6051] usb 2-1: config 0 has no interfaces? [ 987.563299][ T6051] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 987.590827][ T6051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.634063][ T6051] usb 2-1: Product: syz [ 987.660412][ T6051] usb 2-1: Manufacturer: syz [ 987.692590][ T6051] usb 2-1: SerialNumber: syz [ 987.743074][ T6051] usb 2-1: config 0 descriptor?? [ 987.814058][T14974] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 987.838478][T14974] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 987.865609][T14976] binder: 14975:14976 ioctl 400c620e 200000000500 returned -22 [ 987.996608][ T6051] usb 2-1: USB disconnect, device number 61 [ 988.115349][T14978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2239'. [ 988.124684][T14978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2239'. [ 988.724359][T14978] Process accounting resumed [ 988.828341][ T30] audit: type=1400 audit(1766292787.477:1314): avc: granted { setsecparam } for pid=14982 comm="syz.4.2240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 989.321528][ T5936] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 989.478686][ T5936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 989.492776][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.603220][ T5936] usb 5-1: config 0 has no interfaces? [ 989.618209][ T5936] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 989.628232][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.636832][ T5936] usb 5-1: Product: syz [ 989.642494][ T5936] usb 5-1: Manufacturer: syz [ 989.648930][ T5936] usb 5-1: SerialNumber: syz [ 989.659750][ T5936] usb 5-1: config 0 descriptor?? [ 989.895774][ T5936] usb 5-1: USB disconnect, device number 76 [ 990.445037][T15004] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2245'. [ 990.638132][T15009] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.839898][T15011] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2247'. [ 991.023207][T15009] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.443880][T15020] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 991.461136][T15021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2249'. [ 991.476935][T15020] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 991.514038][T15009] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.831890][T15009] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.482145][ T1139] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.572893][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.715156][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.744048][ T1139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.279137][ T1139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.511531][ T6051] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 994.632132][T10700] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 994.683599][ T6051] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 994.716655][ T6051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 994.769843][ T6051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 994.817043][ T6051] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 994.840641][T10700] usb 3-1: unable to get BOS descriptor or descriptor too short [ 994.871017][T10700] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.877211][ T6051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.927188][T10700] usb 3-1: config 0 has no interfaces? [ 994.954130][T10700] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 994.973881][ T6051] usb 5-1: Product: syz [ 994.975664][T10700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.986834][T10700] usb 3-1: Product: syz [ 994.995478][T10700] usb 3-1: Manufacturer: syz [ 995.000863][T10700] usb 3-1: SerialNumber: syz [ 995.000865][ T6051] usb 5-1: Manufacturer: syz [ 995.000883][ T6051] usb 5-1: SerialNumber: syz [ 995.058957][T10700] usb 3-1: config 0 descriptor?? [ 995.075988][ T6051] usb 5-1: config 0 descriptor?? [ 995.107563][ T6051] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 995.313501][T10700] usb 5-1: USB disconnect, device number 77 [ 996.251049][ T6201] usb 3-1: USB disconnect, device number 74 [ 996.536425][T15061] 9pnet_virtio: no channels available for device 127.0.0.1 [ 997.145083][ T30] audit: type=1326 audit(1766292795.797:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.0.2264" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aa498f749 code=0x0 [ 997.745807][ T6201] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 998.364187][ T6201] usb 4-1: unable to get BOS descriptor or descriptor too short [ 998.378179][ T6201] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.389051][ T6201] usb 4-1: config 0 has no interfaces? [ 998.403185][ T6201] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 998.417329][ T6201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.428165][ T6201] usb 4-1: Product: syz [ 998.432667][ T6201] usb 4-1: Manufacturer: syz [ 998.437914][ T6201] usb 4-1: SerialNumber: syz [ 998.453509][ T6201] usb 4-1: config 0 descriptor?? [ 998.727474][ T6201] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 998.778579][ T5936] usb 4-1: USB disconnect, device number 53 [ 999.395660][ T6201] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 999.409440][ T6201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.419990][ T6201] usb 1-1: Product: syz [ 999.425173][ T6201] usb 1-1: Manufacturer: syz [ 999.431022][ T6201] usb 1-1: SerialNumber: syz [ 999.442879][ T6201] usb 1-1: config 0 descriptor?? [ 999.468716][ T6201] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 999.560353][T15087] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 999.594792][ T6201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 999.632205][T15087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 999.659568][ T6201] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 999.669601][ T6201] usb 1-1: media controller created [ 999.678363][T15080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2267'. [ 999.706979][T15080] dvb-usb: bulk message failed: -22 (7/0) [ 999.767011][ T6201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 999.839829][ T6201] DVB: Unable to find symbol mt352_attach() [ 999.899300][ T6201] DVB: Unable to find symbol nxt6000_attach() [ 999.906936][ T6201] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 999.926021][ T6201] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input67 [ 999.969918][ T6201] dvb-usb: schedule remote query interval to 1000 msecs. [ 999.993285][ T6201] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1000.020454][T14839] udevd[14839]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1000.941341][ T6201] dvb-usb: bulk message failed: -22 (7/0) [ 1000.949347][ T6201] dvb-usb: bulk message failed: -22 (7/0) [ 1000.957744][T14825] udevd[14825]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1000.972050][ T6201] usb 1-1: USB disconnect, device number 58 [ 1001.123610][ T6201] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1001.201578][ T6051] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1001.283220][T15113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2270'. [ 1001.534288][ T6051] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1001.574619][ T6051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1001.705633][ T6201] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1001.745475][ T6051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1001.861550][ T6201] usb 2-1: Using ep0 maxpacket: 32 [ 1001.876694][ T6201] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1001.896074][ T6201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.922421][ T6201] usb 2-1: config 0 descriptor?? [ 1002.028624][ T30] audit: type=1400 audit(1766292801.662:1316): avc: denied { map_create } for pid=15117 comm="syz.0.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1002.049583][ T6051] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1002.079352][ T6051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.144702][ T6051] usb 5-1: Product: syz [ 1002.148968][ T6051] usb 5-1: Manufacturer: syz [ 1002.181281][ T30] audit: type=1400 audit(1766292801.672:1317): avc: denied { map_read map_write } for pid=15117 comm="syz.0.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1002.231859][ T6051] usb 5-1: SerialNumber: syz [ 1002.263621][ T6051] usb 5-1: config 0 descriptor?? [ 1002.288355][T15119] netlink: 'syz.0.2274': attribute type 4 has an invalid length. [ 1002.342704][ T6201] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1002.357270][ T6051] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 1002.376880][ T30] audit: type=1400 audit(1766292801.762:1318): avc: denied { map } for pid=15117 comm="syz.0.2274" path="socket:[57316]" dev="sockfs" ino=57316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1002.549494][ T30] audit: type=1400 audit(1766292801.822:1319): avc: denied { create } for pid=15117 comm="syz.0.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1002.551276][T15119] tmpfs: Group quota inode hardlimit too large. [ 1002.583788][ T6946] usb 5-1: USB disconnect, device number 78 [ 1002.641579][ T30] audit: type=1400 audit(1766292801.962:1320): avc: denied { ioctl } for pid=15107 comm="syz.1.2272" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1002.694021][ T30] audit: type=1400 audit(1766292802.002:1321): avc: denied { ioctl } for pid=15107 comm="syz.1.2272" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1002.734028][ T30] audit: type=1400 audit(1766292802.012:1322): avc: denied { ioctl } for pid=15100 comm="syz.4.2271" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1002.774747][ T30] audit: type=1400 audit(1766292802.012:1323): avc: denied { ioctl } for pid=15100 comm="syz.4.2271" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1002.807569][ T30] audit: type=1400 audit(1766292802.012:1324): avc: denied { ioctl } for pid=15100 comm="syz.4.2271" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1002.841959][ T30] audit: type=1400 audit(1766292802.012:1325): avc: denied { ioctl } for pid=15100 comm="syz.4.2271" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1002.875495][ T30] audit: type=1400 audit(1766292802.182:1326): avc: denied { create } for pid=15117 comm="syz.0.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1003.419206][ T6201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1003.445311][ T6201] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1003.520343][T15130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.712042][ T6051] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1003.878991][ T6201] usb 2-1: media controller created [ 1003.899310][ T6201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1003.951118][ T6201] az6027: usb out operation failed. (-71) [ 1003.964885][ T6201] az6027: usb out operation failed. (-71) [ 1003.970031][ T6051] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1003.990867][ T6201] stb0899_attach: Driver disabled by Kconfig [ 1004.021150][ T6201] az6027: no front-end attached [ 1004.021150][ T6201] [ 1004.034443][ T6051] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.036342][ T6201] az6027: usb out operation failed. (-71) [ 1004.065504][ T6201] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1004.073889][ T6051] usb 1-1: config 0 has no interfaces? [ 1004.129189][ T6201] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68 [ 1004.200233][ T6051] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1004.221264][ T6051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.237653][ T6201] dvb-usb: schedule remote query interval to 400 msecs. [ 1004.251522][ T6051] usb 1-1: Product: syz [ 1004.263463][ T6051] usb 1-1: Manufacturer: syz [ 1004.265306][ T6201] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1004.341706][ T6201] usb 2-1: USB disconnect, device number 62 [ 1004.361459][ T6051] usb 1-1: SerialNumber: syz [ 1004.382061][ T6051] usb 1-1: config 0 descriptor?? [ 1004.521268][ T6201] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1006.271749][ T6201] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1006.369300][ T10] usb 1-1: USB disconnect, device number 59 [ 1006.488233][ T6201] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1006.507534][ T6201] usb 2-1: config 1 has no interface number 1 [ 1006.524598][ T6201] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1006.597450][ T6201] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1006.621537][ T6201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.640490][ T6201] usb 2-1: Product: syz [ 1006.650588][ T6201] usb 2-1: Manufacturer: syz [ 1006.660713][ T6201] usb 2-1: SerialNumber: syz [ 1007.183453][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 1007.183468][ T30] audit: type=1400 audit(1766292806.832:1497): avc: denied { bpf } for pid=15145 comm="syz.4.2279" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1007.221537][ T30] audit: type=1400 audit(1766292806.832:1498): avc: denied { bpf } for pid=15144 comm="syz.3.2280" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1007.290092][ T30] audit: type=1400 audit(1766292806.842:1499): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1007.491491][ T30] audit: type=1400 audit(1766292806.842:1500): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1007.928450][ T30] audit: type=1400 audit(1766292806.882:1501): avc: denied { perfmon } for pid=15145 comm="syz.4.2279" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1007.981951][ T30] audit: type=1400 audit(1766292806.882:1502): avc: denied { bpf } for pid=15145 comm="syz.4.2279" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1008.060202][ T30] audit: type=1400 audit(1766292806.882:1503): avc: denied { perfmon } for pid=15145 comm="syz.4.2279" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1008.096168][T15133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2277'. [ 1008.127755][ T30] audit: type=1400 audit(1766292806.882:1504): avc: denied { bpf } for pid=15145 comm="syz.4.2279" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1008.222219][ T6201] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1008.233985][ T6201] usb 2-1: failed to enable PITCH for EP 0x82 [ 1008.251307][ T30] audit: type=1400 audit(1766292806.882:1505): avc: denied { perfmon } for pid=15145 comm="syz.4.2279" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1008.333843][ T6201] usb 2-1: USB disconnect, device number 63 [ 1008.392404][ T30] audit: type=1400 audit(1766292806.902:1506): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1008.713619][T15166] xt_TCPMSS: Only works on TCP SYN packets [ 1008.795717][T14651] udevd[14651]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.301059][T14839] udevd[14839]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1009.493070][T14825] udevd[14825]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1009.941280][T15176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2284'. [ 1012.687383][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 1012.687403][ T30] audit: type=1400 audit(1766292812.425:1631): avc: denied { execmem } for pid=15191 comm="syz.0.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1012.719379][ T5877] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1012.771788][ T30] audit: type=1400 audit(1766292812.715:1632): avc: denied { read } for pid=15191 comm="syz.0.2289" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1012.841559][ T30] audit: type=1400 audit(1766292812.715:1633): avc: denied { read open } for pid=15191 comm="syz.0.2289" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1012.871491][ T5877] usb 5-1: device descriptor read/64, error -71 [ 1012.963328][ T30] audit: type=1400 audit(1766292812.875:1634): avc: denied { create } for pid=15191 comm="syz.0.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1013.016735][ T30] audit: type=1400 audit(1766292812.885:1635): avc: denied { bind } for pid=15191 comm="syz.0.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1013.036499][ T6051] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1013.281813][ T5877] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1013.382267][ T30] audit: type=1400 audit(1766292812.905:1636): avc: denied { accept } for pid=15191 comm="syz.0.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1013.429236][ T30] audit: type=1400 audit(1766292812.915:1637): avc: denied { write } for pid=15191 comm="syz.0.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1013.474444][ T30] audit: type=1400 audit(1766292812.925:1638): avc: denied { read } for pid=15191 comm="syz.0.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1013.501477][ T50] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1013.512277][ T5877] usb 5-1: device descriptor read/64, error -71 [ 1013.533699][T15193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1013.540242][T15193] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1013.552714][ T6051] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1013.577940][ T6051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1013.604093][ T6051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1013.631799][ T5877] usb usb5-port1: attempt power cycle [ 1013.779700][ T6051] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1013.800976][ T50] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1013.812891][ T6051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.842339][ T5877] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1014.872161][ T50] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.068716][ T5877] usb 5-1: device descriptor read/8, error -71 [ 1015.081497][ T6051] usb 1-1: Product: syz [ 1015.097850][ T6051] usb 1-1: Manufacturer: syz [ 1015.108752][ T50] usb 2-1: config 0 has no interfaces? [ 1015.187914][ T6051] usb 1-1: SerialNumber: syz [ 1015.262629][ T6051] usb 1-1: config 0 descriptor?? [ 1015.291844][ T50] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1015.311615][ T6051] usb 1-1: can't set config #0, error -71 [ 1015.332723][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.343943][ T6051] usb 1-1: USB disconnect, device number 60 [ 1015.351959][ T50] usb 2-1: Product: syz [ 1015.365158][ T50] usb 2-1: Manufacturer: syz [ 1015.393207][ T50] usb 2-1: SerialNumber: syz [ 1015.417426][ T50] usb 2-1: config 0 descriptor?? [ 1016.147917][ T6201] usb 2-1: USB disconnect, device number 64 [ 1016.235328][T15214] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2294'. [ 1016.353300][T15215] netlink: 'syz.3.2293': attribute type 10 has an invalid length. [ 1016.531770][T15215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.691687][T15215] bond0: (slave team0): Enslaving as an active interface with an up link [ 1016.712295][ T61] bond0: (slave team0): interface is now down [ 1016.733592][ T61] bond0: now running without any active interface! [ 1017.051522][ T5877] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1017.272147][T15207] delete_channel: no stack [ 1017.306485][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 1017.323203][ T5877] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1017.341623][ T5877] usb 5-1: config 0 has no interface number 0 [ 1017.350890][T15221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.358215][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.368133][ T5877] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1017.390876][ T5877] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1017.413274][ T5877] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.429428][ T5877] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1017.460582][ T5877] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1017.497180][ T5877] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1017.529092][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.561533][ T5877] usb 5-1: Product: syz [ 1017.588266][ T5877] usb 5-1: Manufacturer: syz [ 1017.622025][ T5877] usb 5-1: SerialNumber: syz [ 1017.694807][ T5877] usb 5-1: config 0 descriptor?? [ 1017.704565][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 1017.704581][ T30] audit: type=1400 audit(1766292818.315:1840): avc: denied { create } for pid=15222 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1017.793224][T15214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1017.881577][ T30] audit: type=1400 audit(1766292818.435:1841): avc: denied { ioctl } for pid=15209 comm="syz.4.2294" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1017.906902][ T5877] iguanair 5-1:0.255: probe with driver iguanair failed with error -12 [ 1018.031520][ T30] audit: type=1400 audit(1766292818.435:1842): avc: denied { ioctl } for pid=15209 comm="syz.4.2294" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1018.179500][ T30] audit: type=1400 audit(1766292818.445:1843): avc: denied { ioctl } for pid=15209 comm="syz.4.2294" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1018.376533][T12730] usb 5-1: USB disconnect, device number 83 [ 1018.383322][ T30] audit: type=1400 audit(1766292818.445:1844): avc: denied { ioctl } for pid=15209 comm="syz.4.2294" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1018.543933][ T30] audit: type=1400 audit(1766292818.485:1845): avc: denied { create } for pid=15219 comm="syz.0.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1018.641963][ T30] audit: type=1400 audit(1766292818.495:1846): avc: denied { create } for pid=15220 comm="syz.1.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1019.236798][ T30] audit: type=1400 audit(1766292818.505:1847): avc: denied { create } for pid=15222 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1019.286075][ T30] audit: type=1400 audit(1766292818.505:1848): avc: denied { execmem } for pid=15222 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1019.331579][ T30] audit: type=1400 audit(1766292818.505:1849): avc: denied { ioctl } for pid=15209 comm="syz.4.2294" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1020.602750][T15254] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1020.602750][T15254] The task syz.1.2300 (15254) triggered the difference, watch for misbehavior. [ 1020.881488][ T6946] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1021.031563][ T6946] usb 2-1: device descriptor read/64, error -71 [ 1021.310372][T15261] dlm: no locking on control device [ 1021.404751][ T6946] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1021.541572][ T6946] usb 2-1: device descriptor read/64, error -71 [ 1021.653030][ T6946] usb usb2-port1: attempt power cycle [ 1021.875666][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1021.885257][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1021.893242][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1021.907014][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1021.914693][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1022.001933][ T6946] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1022.005031][ T61] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.240204][ T6946] usb 2-1: device descriptor read/8, error -71 [ 1022.450261][T15270] lo speed is unknown, defaulting to 1000 [ 1022.472120][ T61] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.551504][ T6946] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1022.659883][ T61] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.705414][ T6946] usb 2-1: device descriptor read/8, error -71 [ 1022.721751][ T30] kauditd_printk_skb: 453 callbacks suppressed [ 1022.721766][ T30] audit: type=1400 audit(1766292823.375:2303): avc: denied { ioctl } for pid=15246 comm="syz.1.2300" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1022.897315][ T61] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.962642][ T6946] usb usb2-port1: unable to enumerate USB device [ 1022.993441][ T30] audit: type=1400 audit(1766292823.455:2304): avc: denied { read } for pid=15275 comm="syz.2.2308" name="v4l-subdev5" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1023.067815][ T30] audit: type=1400 audit(1766292823.465:2305): avc: denied { read open } for pid=15275 comm="syz.2.2308" path="/dev/v4l-subdev5" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1023.171316][ T30] audit: type=1400 audit(1766292823.615:2306): avc: denied { ioctl } for pid=15275 comm="syz.2.2308" path="/dev/v4l-subdev5" dev="devtmpfs" ino=947 ioctlcmd=0x5625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1023.171364][ T30] audit: type=1400 audit(1766292823.615:2307): avc: denied { ioctl } for pid=15246 comm="syz.1.2300" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1023.173188][ T30] audit: type=1400 audit(1766292823.675:2308): avc: denied { search } for pid=15277 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.173224][ T30] audit: type=1400 audit(1766292823.675:2309): avc: denied { read } for pid=15277 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1023.173255][ T30] audit: type=1400 audit(1766292823.685:2310): avc: denied { read open } for pid=15277 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1023.173286][ T30] audit: type=1400 audit(1766292823.685:2311): avc: denied { search } for pid=15277 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.173321][ T30] audit: type=1400 audit(1766292823.685:2312): avc: denied { search } for pid=15277 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.304157][T15270] chnl_net:caif_netlink_parms(): no params data found [ 1023.992613][ T5814] Bluetooth: hci1: command tx timeout [ 1024.181607][T15270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.235845][T15270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.270682][T15270] bridge_slave_0: entered allmulticast mode [ 1024.321813][T15270] bridge_slave_0: entered promiscuous mode [ 1024.444525][T15270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.457162][T15296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2310'. [ 1024.496737][T15270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.527991][T15270] bridge_slave_1: entered allmulticast mode [ 1024.568514][T15270] bridge_slave_1: entered promiscuous mode [ 1024.633666][ T61] bridge_slave_1: left allmulticast mode [ 1024.731008][ T61] bridge_slave_1: left promiscuous mode [ 1024.778551][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.869612][ T61] bridge_slave_0: left allmulticast mode [ 1024.901448][ T61] bridge_slave_0: left promiscuous mode [ 1024.938905][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.508210][T15312] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2312'. [ 1025.729023][T15315] SELinux: failed to load policy [ 1026.071580][ T5814] Bluetooth: hci1: command tx timeout [ 1026.093114][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1026.385134][ T10] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 1026.421617][ T10] usb 3-1: config 0 has no interface number 0 [ 1026.878139][ T10] usb 3-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1026.894839][ T10] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1026.921448][ T10] usb 3-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.942820][ T10] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1026.955661][ T10] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1026.988850][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1027.005287][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.045778][ T10] usb 3-1: Product: syz [ 1027.055898][ T10] usb 3-1: Manufacturer: syz [ 1027.066036][ T10] usb 3-1: SerialNumber: syz [ 1027.088599][ T10] usb 3-1: config 0 descriptor?? [ 1027.112275][T15315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1027.141076][ T10] iguanair 3-1:0.255: probe with driver iguanair failed with error -12 [ 1027.732934][ T30] kauditd_printk_skb: 364 callbacks suppressed [ 1027.732974][ T30] audit: type=1400 audit(1766292828.385:2677): avc: denied { node_bind } for pid=15327 comm="syz.4.2315" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1027.839274][ T30] audit: type=1400 audit(1766292828.475:2678): avc: denied { search } for pid=15326 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1027.863250][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.863256][ T30] audit: type=1400 audit(1766292828.475:2679): avc: denied { read } for pid=15326 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1027.863295][ T30] audit: type=1400 audit(1766292828.475:2680): avc: denied { read open } for pid=15326 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1027.959024][ T30] audit: type=1400 audit(1766292828.475:2681): avc: denied { getattr } for pid=15326 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1027.985428][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.047528][ T30] audit: type=1400 audit(1766292828.495:2682): avc: denied { create } for pid=15308 comm="syz.2.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1028.069869][ T61] bond0 (unregistering): Released all slaves [ 1028.114614][T15328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1028.121182][T15328] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 1028.128964][T15328] audit: backlog limit exceeded [ 1028.134535][T15328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1028.152517][ T5814] Bluetooth: hci1: command tx timeout [ 1028.317537][ T61] tipc: Left network mode [ 1028.332346][T15270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.350142][ T6201] usb 3-1: USB disconnect, device number 75 [ 1028.391236][T15270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.641998][T15270] team0: Port device team_slave_0 added [ 1028.665844][T15270] team0: Port device team_slave_1 added [ 1028.851863][T15270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.899280][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.124058][T15270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.148437][ T6201] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1030.240296][ T5814] Bluetooth: hci1: command tx timeout [ 1030.257227][T15270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.287934][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1030.299378][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1030.317160][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.331604][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1030.346356][T15270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.354146][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1030.368842][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1030.432676][ T6201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1030.572967][ T6201] usb 2-1: not running at top speed; connect to a high speed hub [ 1030.613916][ T6201] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 1030.631064][ T6201] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.645046][ T6201] usb 2-1: config 5 has no interface number 0 [ 1030.651147][ T6201] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1030.661065][ T6201] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1030.674237][ T6201] usb 2-1: config 5 interface 246 has no altsetting 0 [ 1030.787021][ T6201] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1030.808045][ T6201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.816139][ T6201] usb 2-1: Product: syz [ 1030.820274][ T6201] usb 2-1: Manufacturer: syz [ 1030.824870][ T6201] usb 2-1: SerialNumber: syz [ 1030.962387][T15270] hsr_slave_0: entered promiscuous mode [ 1030.968866][T15270] hsr_slave_1: entered promiscuous mode [ 1030.978992][T15270] debugfs: 'hsr0' already exists in 'hsr' [ 1030.992995][T15270] Cannot create hsr debugfs directory [ 1031.008541][T15348] lo speed is unknown, defaulting to 1000 [ 1031.652337][ T6201] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1031.664628][ T7476] usb 2-1: Failed to submit usb control message: -71 [ 1031.715708][ T7476] usb 2-1: unable to send the bmi data to the device: -71 [ 1031.794018][ T6201] usb 2-1: USB disconnect, device number 69 [ 1031.801153][ T7476] usb 2-1: unable to get target info from device [ 1031.816937][ T7476] usb 2-1: could not get target info (-71) [ 1031.830994][ T7476] usb 2-1: could not probe fw (-71) [ 1032.193776][T15362] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.632090][ T5816] Bluetooth: hci5: command tx timeout [ 1032.762878][ T30] kauditd_printk_skb: 355 callbacks suppressed [ 1032.762894][ T30] audit: type=1400 audit(1766292833.415:3000): avc: denied { search } for pid=15366 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.793118][ T30] audit: type=1400 audit(1766292833.415:3001): avc: denied { search } for pid=15366 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.866667][ T30] audit: type=1400 audit(1766292833.415:3002): avc: denied { search } for pid=15366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.891428][ T30] audit: type=1400 audit(1766292833.415:3003): avc: denied { read open } for pid=15366 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.917621][ T30] audit: type=1400 audit(1766292833.415:3004): avc: denied { getattr } for pid=15366 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.956102][T15366] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1032.962709][T15366] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 1032.970443][T15366] audit: backlog limit exceeded [ 1032.980114][ T30] audit: type=1400 audit(1766292833.415:3005): avc: denied { search } for pid=15366 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.007008][T15366] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1033.069239][T15362] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.233331][T15362] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.585703][T15348] chnl_net:caif_netlink_parms(): no params data found [ 1034.153542][T15362] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.502046][T15395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1034.712824][ T5816] Bluetooth: hci5: command tx timeout [ 1034.967624][T15270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1035.195492][T15270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1035.485775][T15398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2326'. [ 1036.165885][T15348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.183742][T15348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.220292][T15348] bridge_slave_0: entered allmulticast mode [ 1036.238100][T15348] bridge_slave_0: entered promiscuous mode [ 1036.791552][ T5816] Bluetooth: hci5: command tx timeout [ 1036.812143][T15270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1036.849968][T15270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1036.860044][T15348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.879602][T15348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.887316][T15348] bridge_slave_1: entered allmulticast mode [ 1036.898556][T15348] bridge_slave_1: entered promiscuous mode [ 1036.993592][ T3790] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.125807][T15348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.135012][ T3790] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.208455][T15348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.316230][ T6333] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.936127][T15348] team0: Port device team_slave_0 added [ 1037.965191][ T30] kauditd_printk_skb: 325 callbacks suppressed [ 1037.965207][ T30] audit: type=1400 audit(1766292838.615:3269): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.027372][ T30] audit: type=1400 audit(1766292838.615:3270): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.103703][T15348] team0: Port device team_slave_1 added [ 1038.111714][ T30] audit: type=1400 audit(1766292838.615:3271): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.143953][ T3790] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.156977][ T30] audit: type=1400 audit(1766292838.615:3272): avc: denied { read } for pid=5481 comm="dhcpcd" name="n112" dev="tmpfs" ino=6993 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1038.199440][ T6051] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1038.218025][ T30] audit: type=1400 audit(1766292838.615:3273): avc: denied { read open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n112" dev="tmpfs" ino=6993 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1038.252048][ T30] audit: type=1400 audit(1766292838.615:3274): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n112" dev="tmpfs" ino=6993 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1038.284652][ T30] audit: type=1400 audit(1766292838.705:3275): avc: denied { ioctl } for pid=15418 comm="syz.1.2330" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1038.315207][ T30] audit: type=1400 audit(1766292838.765:3276): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1038.345407][ T30] audit: type=1400 audit(1766292838.765:3277): avc: denied { read write open } for pid=5820 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1038.375100][ T30] audit: type=1400 audit(1766292838.765:3278): avc: denied { ioctl } for pid=5820 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1038.400821][ T6051] usb 2-1: Using ep0 maxpacket: 8 [ 1038.416753][ T6051] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.427314][ T6051] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1038.450118][ T6051] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1038.467250][ T6051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.476723][ T6051] usb 2-1: Product: syz [ 1038.480874][ T6051] usb 2-1: Manufacturer: syz [ 1038.492736][ T6051] usb 2-1: SerialNumber: syz [ 1038.544480][ T6051] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1038.769869][T15348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.800714][T15348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.828296][T15348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.871463][ T5816] Bluetooth: hci5: command tx timeout [ 1038.873190][T15348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.896529][T15348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.958108][T15348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.052304][ T6051] gspca_spca501: reg write: error -110 [ 1039.057812][ T6051] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1039.104347][ T6051] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 1039.141362][ T6051] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1039.362492][ T6051] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1039.425687][T14825] udevd[14825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.759092][T15438] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1040.030525][T15348] hsr_slave_0: entered promiscuous mode [ 1040.049944][T15348] hsr_slave_1: entered promiscuous mode [ 1040.089882][T15348] debugfs: 'hsr0' already exists in 'hsr' [ 1040.121616][T15348] Cannot create hsr debugfs directory [ 1040.231478][T15435] can0: slcan on ttyS3. [ 1040.352051][ T6051] usb 2-1: USB disconnect, device number 70 [ 1041.613005][T15432] can0 (unregistered): slcan off ttyS3. [ 1042.825424][T15270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.007881][ T30] kauditd_printk_skb: 395 callbacks suppressed [ 1043.007897][ T30] audit: type=1400 audit(1766292843.655:3674): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1043.117185][ T30] audit: type=1400 audit(1766292843.705:3675): avc: denied { read write open } for pid=5810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1043.163078][T15270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.213186][ T30] audit: type=1400 audit(1766292843.705:3676): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1043.287455][ T30] audit: type=1400 audit(1766292843.855:3677): avc: denied { search } for pid=15467 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.326221][ T30] audit: type=1400 audit(1766292843.855:3678): avc: denied { read } for pid=15467 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1043.388009][ T30] audit: type=1400 audit(1766292843.855:3679): avc: denied { read open } for pid=15467 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1043.412478][ T30] audit: type=1400 audit(1766292843.895:3680): avc: denied { search } for pid=15467 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.567104][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.574287][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.592183][ T30] audit: type=1400 audit(1766292843.895:3681): avc: denied { search } for pid=15467 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.677088][ T30] audit: type=1400 audit(1766292843.895:3682): avc: denied { search } for pid=15467 comm="cmp" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.741873][ T30] audit: type=1400 audit(1766292843.895:3683): avc: denied { search } for pid=15467 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.363392][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.370550][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.926663][T15348] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1045.065360][ T61] hsr_slave_0: left promiscuous mode [ 1045.093041][ T61] hsr_slave_1: left promiscuous mode [ 1045.114389][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.140820][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.166757][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.193633][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.260329][ T61] veth1_macvtap: left promiscuous mode [ 1045.277148][ T61] veth0_macvtap: left promiscuous mode [ 1045.290882][ T61] veth1_vlan: left promiscuous mode [ 1045.301863][ T61] veth0_vlan: left promiscuous mode [ 1047.953745][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1048.016054][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1048.067692][ T30] kauditd_printk_skb: 975 callbacks suppressed [ 1048.067706][ T30] audit: type=1400 audit(1766292848.725:4638): avc: denied { create } for pid=15512 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1048.209675][T15514] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1048.231104][ T30] audit: type=1400 audit(1766292848.755:4639): avc: denied { getopt } for pid=15512 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1048.302402][ T30] audit: type=1400 audit(1766292848.755:4640): avc: denied { connect } for pid=15512 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1048.323144][ T30] audit: type=1400 audit(1766292848.755:4641): avc: denied { name_connect } for pid=15512 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1048.362384][ T30] audit: type=1400 audit(1766292848.815:4642): avc: denied { create } for pid=15512 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1048.382395][ T30] audit: type=1400 audit(1766292848.845:4643): avc: denied { getopt } for pid=15512 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1048.402337][ T30] audit: type=1400 audit(1766292848.855:4644): avc: denied { getopt } for pid=15512 comm="syz.4.2349" lport=48662 faddr=2001:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1048.425320][ T30] audit: type=1400 audit(1766292848.855:4645): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=2844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1048.450608][ T30] audit: type=1400 audit(1766292848.855:4646): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1048.471022][ T30] audit: type=1400 audit(1766292849.005:4647): avc: denied { unlink } for pid=5815 comm="syz-executor" name="#170" dev="tmpfs" ino=2844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1050.011602][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1050.079653][ T5870] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1050.106343][T15348] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1050.135224][T15348] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1050.177982][ T10] usb 2-1: config 0 interface 0 altsetting 29 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.203866][ T10] usb 2-1: config 0 interface 0 altsetting 29 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.217630][ T10] usb 2-1: config 0 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.231804][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1050.242894][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1050.254454][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.271933][ T10] usb 2-1: config 0 descriptor?? [ 1050.335853][ T5870] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1050.349262][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.369354][ T5870] usb 3-1: Product: syz [ 1050.379577][ T5870] usb 3-1: Manufacturer: syz [ 1050.391458][ T5870] usb 3-1: SerialNumber: syz [ 1050.417462][ T5870] usb 3-1: config 0 descriptor?? [ 1050.514466][ T5870] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1050.528623][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1050.538809][ T5870] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1050.549412][ T5870] usb 3-1: media controller created [ 1050.570088][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1050.609234][T15212] syz_tun (unregistering): left allmulticast mode [ 1050.635440][T15348] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1050.936672][T15533] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1050.987997][T15530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2354'. [ 1051.015881][T15533] can0: slcan on ttyS3. [ 1051.026894][T15541] dvb-usb: bulk message failed: -22 (7/0) [ 1051.040707][ T5870] DVB: Unable to find symbol mt352_attach() [ 1051.066530][ T61] IPVS: stop unused estimator thread 0... [ 1051.072141][T15533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.162100][T15533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.535613][T15532] can0 (unregistered): slcan off ttyS3. [ 1051.561260][ T5870] DVB: Unable to find symbol nxt6000_attach() [ 1051.585322][ T5870] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1051.602482][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1051.621665][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1051.675165][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input71 [ 1051.711799][ T10] usb 2-1: USB disconnect, device number 71 [ 1052.303255][ T5870] dvb-usb: schedule remote query interval to 1000 msecs. [ 1052.310312][ T5870] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1052.392497][ T5870] dvb-usb: bulk message failed: -22 (7/0) [ 1052.398253][ T5870] dvb-usb: bulk message failed: -22 (7/0) [ 1052.520269][ T5870] usb 3-1: USB disconnect, device number 76 [ 1052.530116][T15348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.725355][ T5870] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1052.863296][T15348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.908926][ T6291] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.026884][T12258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.034107][T12258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.057855][T15535] udevd[15535]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1053.071596][ T30] kauditd_printk_skb: 205 callbacks suppressed [ 1053.071606][ T30] audit: type=1400 audit(1766292853.725:4853): avc: denied { search } for pid=15567 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1053.151913][ T30] audit: type=1400 audit(1766292853.745:4854): avc: denied { search } for pid=15567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1053.178035][T15567] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1053.184606][T15567] audit: audit_lost=53 audit_rate_limit=0 audit_backlog_limit=64 [ 1053.196420][T15570] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1053.203037][T15570] audit: audit_lost=54 audit_rate_limit=0 audit_backlog_limit=64 [ 1053.210762][T15570] audit: backlog limit exceeded [ 1053.216255][T15570] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1053.222810][T15570] audit: audit_lost=55 audit_rate_limit=0 audit_backlog_limit=64 [ 1053.230511][T15570] audit: backlog limit exceeded [ 1053.617945][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.625173][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.665779][T15535] udevd[15535]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1053.743506][ T6291] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.775026][T15565] 9p: Bad value for 'port' [ 1053.949848][ T6291] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.155590][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.557707][ T6291] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.787768][T15270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.271684][T15588] overlayfs: workdir and upperdir must be separate subtrees [ 1055.631737][ T6291] bridge_slave_1: left allmulticast mode [ 1055.671153][ T6291] bridge_slave_1: left promiscuous mode [ 1055.781732][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.843153][ T6291] bridge_slave_0: left allmulticast mode [ 1055.848814][ T6291] bridge_slave_0: left promiscuous mode [ 1055.917679][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.404081][T15604] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2363'. [ 1056.555220][ T5870] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1056.788346][ T5870] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1056.815451][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.859468][ T5870] usb 3-1: config 0 descriptor?? [ 1057.144157][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.207139][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.314763][ T6291] bond0 (unregistering): (slave team0): Releasing backup interface [ 1057.384523][ T5870] usb 3-1: string descriptor 0 read error: -71 [ 1057.386454][ T6291] bond0 (unregistering): Released all slaves [ 1057.437620][ T5870] usb 3-1: Cannot read MAC address [ 1057.463260][ T5870] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1057.506193][ T5870] usb 3-1: USB disconnect, device number 77 [ 1057.855639][ T6291] bond1 (unregistering): Released all slaves [ 1057.867985][ T6291] bond2 (unregistering): Released all slaves [ 1057.986854][ T6291] bond3 (unregistering): Released all slaves [ 1058.201537][ T30] kauditd_printk_skb: 467 callbacks suppressed [ 1058.201554][ T30] audit: type=1400 audit(1766292858.845:5234): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.275358][ T6291] tipc: Left network mode [ 1058.308177][ T30] audit: type=1400 audit(1766292858.845:5235): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1059.102045][T15617] NILFS (loop2): device size too small [ 1059.528161][ T30] audit: type=1400 audit(1766292858.845:5236): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1059.651511][ T30] audit: type=1400 audit(1766292858.845:5237): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1059.791529][ T30] audit: type=1400 audit(1766292858.875:5238): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.901581][ T30] audit: type=1400 audit(1766292858.875:5239): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.993849][ T30] audit: type=1400 audit(1766292858.875:5240): avc: denied { read } for pid=5481 comm="dhcpcd" name="n114" dev="tmpfs" ino=6997 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1060.099283][ T30] audit: type=1400 audit(1766292858.885:5241): avc: denied { read open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n114" dev="tmpfs" ino=6997 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1060.936976][ T30] audit: type=1400 audit(1766292858.885:5242): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n114" dev="tmpfs" ino=6997 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1060.963134][ T30] audit: type=1400 audit(1766292858.925:5243): avc: denied { unlink } for pid=5810 comm="syz-executor" name="bus" dev="tmpfs" ino=2743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1061.223265][T15348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.521724][T10700] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1061.711881][T10700] usb 5-1: Using ep0 maxpacket: 8 [ 1061.773984][T10700] usb 5-1: config 0 has no interfaces? [ 1061.825145][T10700] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1061.870771][T10700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.922796][T10700] usb 5-1: Product: syz [ 1061.926986][T10700] usb 5-1: Manufacturer: syz [ 1061.954963][T10700] usb 5-1: SerialNumber: syz [ 1061.982299][T10700] usb 5-1: config 0 descriptor?? [ 1062.238559][T15270] veth0_vlan: entered promiscuous mode [ 1062.293172][ T49] usb 5-1: USB disconnect, device number 84 [ 1062.732684][T15270] veth1_vlan: entered promiscuous mode [ 1063.212277][ T30] kauditd_printk_skb: 348 callbacks suppressed [ 1063.212292][ T30] audit: type=1400 audit(1766292863.865:5592): avc: denied { search } for pid=15653 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.376831][ T30] audit: type=1400 audit(1766292863.885:5593): avc: denied { search } for pid=15653 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.838423][T15270] veth0_macvtap: entered promiscuous mode [ 1063.882830][T15659] FAULT_INJECTION: forcing a failure. [ 1063.882830][T15659] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.928062][T15659] CPU: 0 UID: 0 PID: 15659 Comm: syz.2.2372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.928083][T15659] Tainted: [L]=SOFTLOCKUP [ 1063.928087][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1063.928093][T15659] Call Trace: [ 1063.928098][T15659] [ 1063.928103][T15659] dump_stack_lvl+0x16c/0x1f0 [ 1063.928123][T15659] should_fail_ex+0x512/0x640 [ 1063.928139][T15659] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1063.928153][T15659] should_failslab+0xc2/0x120 [ 1063.928167][T15659] kmem_cache_alloc_noprof+0x83/0x770 [ 1063.928178][T15659] ? io_submit_one+0x122/0x1e70 [ 1063.928192][T15659] ? io_submit_one+0x122/0x1e70 [ 1063.928202][T15659] io_submit_one+0x122/0x1e70 [ 1063.928214][T15659] ? __lock_acquire+0x436/0x2890 [ 1063.928228][T15659] ? lockdep_hardirqs_on+0x7c/0x110 [ 1063.928243][T15659] ? __pfx_io_submit_one+0x10/0x10 [ 1063.928259][T15659] ? __might_fault+0xe3/0x190 [ 1063.928268][T15659] ? __might_fault+0x13b/0x190 [ 1063.928282][T15659] ? __x64_sys_io_submit+0x1a9/0x370 [ 1063.928292][T15659] __x64_sys_io_submit+0x1a9/0x370 [ 1063.928305][T15659] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1063.928316][T15659] ? fput+0x70/0xf0 [ 1063.928332][T15659] do_syscall_64+0xcd/0xf80 [ 1063.928347][T15659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.928358][T15659] RIP: 0033:0x7f1a9e38f749 [ 1063.928368][T15659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.928379][T15659] RSP: 002b:00007f1a9f2f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1063.928389][T15659] RAX: ffffffffffffffda RBX: 00007f1a9e5e5fa0 RCX: 00007f1a9e38f749 [ 1063.928397][T15659] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007f1a9f2cf000 [ 1063.928404][T15659] RBP: 00007f1a9f2f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.928410][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.928416][T15659] R13: 00007f1a9e5e6038 R14: 00007f1a9e5e5fa0 R15: 00007ffdd4058aa8 [ 1063.928437][T15659] [ 1064.197476][ T30] audit: type=1400 audit(1766292863.885:5594): avc: denied { search } for pid=15653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.281716][T15270] veth1_macvtap: entered promiscuous mode [ 1064.458502][ T30] audit: type=1400 audit(1766292863.895:5595): avc: denied { search } for pid=15653 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.578893][ T30] audit: type=1400 audit(1766292863.895:5596): avc: denied { search } for pid=15653 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.635794][T15655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1064.642394][T15655] audit: audit_lost=85 audit_rate_limit=0 audit_backlog_limit=64 [ 1064.650081][T15655] audit: backlog limit exceeded [ 1064.655792][T15655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1064.662288][T15655] audit: audit_lost=86 audit_rate_limit=0 audit_backlog_limit=64 [ 1064.810636][T15270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.921695][ T5877] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1064.950182][T15270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.127328][ T1139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.163563][ T1139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.285798][ T1139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.325222][ T1139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.901782][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1065.932845][ T5877] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1065.940442][ T5877] usb 3-1: can't read configurations, error -71 [ 1066.689452][T15348] veth0_vlan: entered promiscuous mode [ 1066.707694][ T7476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.747559][ T7476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.818484][ T6291] hsr_slave_0: left promiscuous mode [ 1066.838466][ T6291] hsr_slave_1: left promiscuous mode [ 1066.845880][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.853346][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.892183][ T6291] veth1_macvtap: left promiscuous mode [ 1066.900778][ T6291] veth0_macvtap: left promiscuous mode [ 1066.907233][ T6291] veth1_vlan: left promiscuous mode [ 1066.912680][ T6291] veth0_vlan: left promiscuous mode [ 1067.623512][T15684] 9p: Bad value for 'port' [ 1067.971533][ T5877] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1067.982776][T15691] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1067.989485][T15691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1067.998309][T15691] vhci_hcd vhci_hcd.0: Device attached [ 1068.271697][ T50] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1068.406696][ T30] kauditd_printk_skb: 301 callbacks suppressed [ 1068.406719][ T30] audit: type=1400 audit(1766292869.045:5888): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1068.757865][ T30] audit: type=1400 audit(1766292869.385:5889): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1068.918044][ T30] audit: type=1400 audit(1766292869.445:5890): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1069.037571][ T5877] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1069.079931][T15692] vhci_hcd: connection reset by peer [ 1069.114824][ T5877] usb 2-1: config 0 has no interface number 0 [ 1069.175440][ T1077] vhci_hcd vhci_hcd.2: stop threads [ 1069.197509][ T5877] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1069.237253][ T30] audit: type=1400 audit(1766292869.475:5891): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1069.270378][ T1077] vhci_hcd vhci_hcd.2: release socket [ 1069.320499][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.347555][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 1069.386990][ T1077] vhci_hcd vhci_hcd.2: disconnect device [ 1069.523360][ T5877] usb 2-1: config 0 descriptor?? [ 1069.541645][ T30] audit: type=1400 audit(1766292869.505:5892): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1069.573550][ T5877] usb 2-1: selecting invalid altsetting 1 [ 1069.580126][ T5877] dvb_ttusb_budget: ttusb_init_controller: error [ 1069.591695][ T30] audit: type=1400 audit(1766292869.535:5893): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1069.611448][ T5877] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1069.666364][ T30] audit: type=1400 audit(1766292869.545:5894): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1069.701332][ T30] audit: type=1400 audit(1766292869.615:5895): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1069.763366][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 1069.808067][ T30] audit: type=1400 audit(1766292869.645:5896): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1069.876581][ T30] audit: type=1400 audit(1766292869.725:5897): avc: denied { ioctl } for pid=15687 comm="syz.1.2379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1070.046222][ T6201] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1070.106538][ T6201] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1070.399429][ T5877] DVB: Unable to find symbol cx22700_attach() [ 1071.321726][ T5877] DVB: Unable to find symbol tda10046_attach() [ 1071.328018][ T5877] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1071.407600][T15707] fido_id[15707]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1071.438755][ T5877] usb 2-1: USB disconnect, device number 72 [ 1072.522346][ T5877] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1072.690314][T15348] veth1_vlan: entered promiscuous mode [ 1072.826736][ T5877] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1072.863077][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.924705][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.957400][T15725] xt_TCPMSS: Only works on TCP SYN packets [ 1072.972621][ T5877] usb 3-1: Product: syz [ 1072.976798][ T5877] usb 3-1: Manufacturer: syz [ 1072.981370][ T5877] usb 3-1: SerialNumber: syz [ 1072.989473][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.107224][ T5877] usb 3-1: config 0 descriptor?? [ 1073.190772][T15348] veth0_macvtap: entered promiscuous mode [ 1073.265789][ T6291] IPVS: stop unused estimator thread 0... [ 1073.283618][T15348] veth1_macvtap: entered promiscuous mode [ 1073.319944][ T5877] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1073.382316][T15270] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 1073.394371][T15270] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 1073.402764][T15270] CPU: 0 UID: 0 PID: 15270 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1073.413844][T15270] Tainted: [L]=SOFTLOCKUP [ 1073.418138][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1073.428165][T15270] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 1073.431636][ T50] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1073.433864][T15270] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 1073.459735][T15270] RSP: 0018:ffffc900049c7ae0 EFLAGS: 00010202 [ 1073.465780][T15270] RAX: dffffc0000000000 RBX: ffff88805998ff00 RCX: ffffffff826a4395 [ 1073.473723][T15270] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 1073.481694][T15270] RBP: ffff88805998ff98 R08: 0000000000000005 R09: 0000000000000000 [ 1073.489647][T15270] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92000938f6b [ 1073.497602][T15270] R13: 0000000000000000 R14: ffff88807691ebe0 R15: 0000000000000038 [ 1073.505551][T15270] FS: 000055555b331500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1073.514455][T15270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1073.521013][T15270] CR2: 00007fd057bb6ad8 CR3: 0000000088dd7000 CR4: 00000000003526f0 [ 1073.528972][T15270] Call Trace: [ 1073.532241][T15270] [ 1073.535147][T15270] __kernfs_new_node+0x7b4/0x990 [ 1073.540062][T15270] ? __pfx___kernfs_new_node+0x10/0x10 [ 1073.545498][T15270] ? find_held_lock+0x2b/0x80 [ 1073.550177][T15270] ? kernfs_root+0xee/0x2a0 [ 1073.554654][T15270] kernfs_new_node+0x13c/0x1e0 [ 1073.559394][T15270] ? kasan_save_track+0x14/0x30 [ 1073.564226][T15270] kernfs_create_dir_ns+0x4c/0x1a0 [ 1073.569324][T15270] cgroup_mkdir+0x40f/0x12e0 [ 1073.573900][T15270] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1073.578908][T15270] kernfs_iop_mkdir+0x111/0x190 [ 1073.583743][T15270] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1073.588747][T15270] vfs_mkdir+0x731/0xb60 [ 1073.592963][T15270] do_mkdirat+0x442/0x5e0 [ 1073.597270][T15270] ? __pfx_do_mkdirat+0x10/0x10 [ 1073.602096][T15270] ? getname_flags.part.0+0x1c5/0x550 [ 1073.607443][T15270] __x64_sys_mkdirat+0x83/0xb0 [ 1073.612191][T15270] do_syscall_64+0xcd/0xf80 [ 1073.616678][T15270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.622543][T15270] RIP: 0033:0x7fbcf658de97 [ 1073.626932][T15270] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.646519][T15270] RSP: 002b:00007ffe44600c58 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 1073.654909][T15270] RAX: ffffffffffffffda RBX: 00007ffe44600cb0 RCX: 00007fbcf658de97 [ 1073.662855][T15270] RDX: 00000000000001ff RSI: 00007ffe44600cb0 RDI: 00000000ffffff9c [ 1073.670798][T15270] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007ffe446009a7 [ 1073.678754][T15270] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1073.686711][T15270] R13: 0000000000000003 R14: 00007ffe44601128 R15: 0000000000000000 [ 1073.694685][T15270] [ 1073.697682][T15270] Modules linked in: [ 1073.702139][T15270] ---[ end trace 0000000000000000 ]--- [ 1073.727665][T15348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.837004][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1073.857350][T15348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.864746][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 1073.864763][ T30] audit: type=1400 audit(1766292874.395:6088): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1073.893127][T15719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2385'. [ 1073.897705][ T5877] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1073.935712][ T4665] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.965727][ T30] audit: type=1400 audit(1766292874.405:6089): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.011065][ T30] audit: type=1400 audit(1766292874.405:6090): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.024773][ T4665] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.033181][ T30] audit: type=1400 audit(1766292874.405:6091): avc: denied { add_name search } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.063221][ T30] audit: type=1400 audit(1766292874.465:6092): avc: denied { create } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1074.084058][ T30] audit: type=1400 audit(1766292874.475:6093): avc: denied { append open } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1074.109130][ T30] audit: type=1400 audit(1766292874.475:6094): avc: denied { getattr } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1074.132333][ T30] audit: type=1400 audit(1766292874.525:6095): avc: denied { read append } for pid=15717 comm="syz.2.2385" name="i2c-1" dev="devtmpfs" ino=3750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1074.165471][T15732] dvb-usb: bulk message failed: -22 (7/0) [ 1074.173308][ T30] audit: type=1400 audit(1766292874.525:6096): avc: denied { read append open } for pid=15717 comm="syz.2.2385" path="/dev/i2c-1" dev="devtmpfs" ino=3750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1074.228803][ T30] audit: type=1400 audit(1766292874.525:6097): avc: denied { create } for pid=15717 comm="syz.2.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1074.251055][T15270] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 1074.256836][T15270] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 1074.289771][ T5877] usb 3-1: media controller created [ 1074.316905][ T4665] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.343418][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1074.352986][ T4665] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.377789][T15270] RSP: 0018:ffffc900049c7ae0 EFLAGS: 00010202 [ 1074.498443][T15270] RAX: dffffc0000000000 RBX: ffff88805998ff00 RCX: ffffffff826a4395 [ 1074.661623][T15270] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 1074.669748][T15270] RBP: ffff88805998ff98 R08: 0000000000000005 R09: 0000000000000000 [ 1074.700819][T15270] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92000938f6b [ 1074.714432][T15348] ieee80211 phy135: Selected rate control algorithm 'minstrel_ht' [ 1074.731246][T15270] R13: 0000000000000000 R14: ffff88807691ebe0 R15: 0000000000000038 [ 1074.749470][T15270] FS: 000055555b331500(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1074.766466][T15270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1074.781226][ T5877] DVB: Unable to find symbol mt352_attach() [ 1074.788750][T15270] CR2: 00007f5b429be048 CR3: 0000000088dd7000 CR4: 00000000003526f0 [ 1074.848670][T15270] Kernel panic - not syncing: Fatal exception [ 1074.855067][T15270] Kernel Offset: disabled [ 1074.859372][T15270] Rebooting in 86400 seconds..