last executing test programs: 34.477111528s ago: executing program 1 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/keycreate\x00') r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r4 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) creat(&(0x7f0000000180)='./file0\x00', 0x10) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440)=r3, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) migrate_pages(r5, 0x65c, &(0x7f0000000000)=0x8, &(0x7f0000000140)=0x2) 34.377381978s ago: executing program 1 (id=175): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0xf4, 0xf, 0x4, 0x8, 0xace, 0x13a1, 0x444, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x98, 0xaa, 0xc9, 0x5}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = dup(r2) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="863532fbc91d2ef1abb19b5c959faabd68c542ad69940bf76a7cf1d9e766f5c19088c3680f26b3c34b421c8707336a6ad78d327be7fa", @ANYRESOCT=r2], 0xffffffffffffff23) 32.64418996s ago: executing program 1 (id=185): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='L', 0x1, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r1, r1, 0x5, 0x3, 0x2}) 32.551621145s ago: executing program 1 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r1 = getpid() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0000000000000000001393000000dd00"}, 0x0, 0x0, 0x7fff}}}, 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_pidfd_open(r1, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) statx(r0, &(0x7f0000000c00)='./file0\x00', 0x6000, 0x8, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000e40)='./file0/file0\x00', 0x100, 0x7ff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000019c0)="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", 0x2000, &(0x7f00000010c0)={&(0x7f00000002c0)={0x50, 0xfffffffffffffff5, 0x3, {0x7, 0x29, 0x4, 0x40000, 0x7, 0x6, 0xe, 0x40, 0x0, 0x0, 0x4, 0x81}}, &(0x7f0000000400)={0x18, 0x0, 0x3, {0x6}}, &(0x7f0000000480)={0x18, 0x0, 0x100, {0x7}}, &(0x7f00000004c0)={0x18, 0xfffffffffffffffe, 0x4, {0x23}}, &(0x7f0000000500)={0x18, 0x0, 0xc, {0x4}}, &(0x7f0000000540)={0x28, 0x0, 0xbf, {{0x400, 0x95a5}}}, &(0x7f0000000680)={0x60, 0xfffffffffffffff5, 0x6, {{0xff, 0x6, 0x8000, 0xfffffffffffffffd, 0x800, 0xff, 0x9, 0x3}}}, &(0x7f0000000580)={0x18, 0x0, 0x81, {0x1f}}, &(0x7f0000000600)={0x13, 0x0, 0xffffffffffffffff, {',]\x00'}}, &(0x7f0000000700)={0x20, 0x0, 0x7fffffffffffffff}, &(0x7f0000000780)={0x78, 0x2f, 0x10, {0x8000000000000001, 0x0, 0x0, {0x1, 0x7, 0x4, 0x7, 0x2d, 0x10001, 0x3, 0x5, 0x9, 0x8000, 0x0, 0x0, 0x0, 0xc, 0x5}}}, &(0x7f0000000940)={0x90, 0x0, 0x2, {0x4, 0x2, 0x0, 0x5, 0x81, 0x7, {0x2, 0x1, 0x7f, 0x5, 0xc641, 0x7, 0x2, 0x7, 0x1, 0x7800, 0x6, 0x0, 0xee00, 0x81, 0x9}}}, &(0x7f0000000a00)={0x110, 0x0, 0xcb, [{0x4, 0xef, 0x6, 0xffff, '\xff\xff\xff\xff\xff\xff'}, {0x4, 0x1, 0x18, 0x3, '/dev/infiniband/rdma_cm\x00'}, {0x6, 0x4, 0xb, 0xff, '/dev/audio\x00'}, {0x2, 0x4, 0x8, 0x10000009, '!\'&#^/+/'}, {0x5, 0x1fffe00, 0x18, 0xfffffffb, '/dev/infiniband/rdma_cm\x00'}, {0x6, 0x3, 0x0, 0xff}, {0x6, 0x1, 0x4, 0x1, '}-\x01('}]}, &(0x7f0000000b40)={0xc0, 0x0, 0x0, [{{0x2, 0x3, 0x7, 0x916, 0x3, 0x0, {0x1, 0x9, 0x8, 0xf, 0x1, 0x8, 0x4, 0x9, 0x4, 0x2000, 0x9e7b, 0xffffffffffffffff, 0x0, 0x2, 0x3}}, {0x2, 0x7, 0x18, 0x10, '/dev/infiniband/rdma_cm\x00'}}]}, &(0x7f0000000d40)={0xa0, 0x0, 0x4, {{0x3, 0x0, 0xb, 0x5, 0x3, 0x7fffffff, {0x2, 0x0, 0xb, 0x812, 0x5, 0x800, 0x7f, 0x1000, 0x4, 0x2000, 0x4, 0x0, r5, 0xfd, 0x3}}, {0x0, 0x5}}}, &(0x7f0000000e00)={0x20, 0xffffffffffffffda, 0x6000, {0xffffffeb, 0x4, 0x4}}, &(0x7f0000000f80)={0x130, 0x0, 0x1, {0x4, 0x9b, 0x0, '\x00', {0x10000, 0x2524, 0x8, 0x1, 0xee01, r6, 0xc000, '\x00', 0x4, 0x3, 0x6, 0x1, {0x80000001, 0x4}, {0xee, 0x1c1}, {0x4, 0xa}, {0x3, 0x1000}, 0x8, 0xfffffffd, 0x8001, 0x9}}}}) bind$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) umount2(&(0x7f0000000040)='.\x00', 0x2) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_pid(r8, &(0x7f0000001680), 0x12) ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f0000000040)) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000001980)={0x13}) 31.599338763s ago: executing program 1 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) pipe(&(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x7, 0x8, 0x6, 0x3, 0x12, "aae5eafb3bd6788e0376d0edfc116063255a5c"}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) syz_genetlink_get_family_id$nfc(0x0, r3) 30.517261086s ago: executing program 1 (id=195): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = io_uring_setup(0xf02, &(0x7f0000000080)={0x0, 0xd9db, 0x40, 0x1, 0x2d9}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x105000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000140)) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) r5 = dup3(r4, r3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r6, 0x400, 0x70bd2c, 0x500000, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc37, 0x2c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x30}}, 0x4000040) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0xc820, 0x2, 0x1}, 0x18, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000480)="1ffcc4bb1c6c547af25f3fa665cba2c93435b150592c6bbcec230ea3848e225950805e62a67eb8885bfbf12678bc58501ac94ba3a1098a5e423bad8520bd47b03bef7dcbeb198343c231105aaf7c5dfa4c98148b173c6c8226e1aa09d33352622ef068e52410222bb0ab7b47d902e95fdf17828fca97957c4c60bbda94aa7c2917221176131ddf011ae13be78fefa7e4f6f79ef1fc3d575f5bcc12f11c89e8fc5248b45026e86abda7f9f9c9607b224a0e", 0xb1, 0x8, 0x0, 0x1}]) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000190001002dbd7000000000001d0100000800050001f8fa0017000300"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20004880) landlock_restrict_self(r9, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r12, 0x0) connect$unix(r11, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r13, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r13, 0x541b, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 30.282169697s ago: executing program 32 (id=195): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = io_uring_setup(0xf02, &(0x7f0000000080)={0x0, 0xd9db, 0x40, 0x1, 0x2d9}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x105000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000140)) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) r5 = dup3(r4, r3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r6, 0x400, 0x70bd2c, 0x500000, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc37, 0x2c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x30}}, 0x4000040) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0xc820, 0x2, 0x1}, 0x18, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000480)="1ffcc4bb1c6c547af25f3fa665cba2c93435b150592c6bbcec230ea3848e225950805e62a67eb8885bfbf12678bc58501ac94ba3a1098a5e423bad8520bd47b03bef7dcbeb198343c231105aaf7c5dfa4c98148b173c6c8226e1aa09d33352622ef068e52410222bb0ab7b47d902e95fdf17828fca97957c4c60bbda94aa7c2917221176131ddf011ae13be78fefa7e4f6f79ef1fc3d575f5bcc12f11c89e8fc5248b45026e86abda7f9f9c9607b224a0e", 0xb1, 0x8, 0x0, 0x1}]) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000190001002dbd7000000000001d0100000800050001f8fa0017000300"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20004880) landlock_restrict_self(r9, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r12, 0x0) connect$unix(r11, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r13, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r13, 0x541b, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 11.075950543s ago: executing program 2 (id=260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x800, 0xfffffffffffffffe, 0x0, 0x401, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x0, r2, 0x0, 0xfcc00000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$afs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x100020, &(0x7f0000000580)={[{@flock_openafs}, {@flock_openafs}, {@flock_strict}, {}, {@flock_write}, {@dyn}, {@flock_openafs}, {@flock_write}, {@flock_local}], [{@euid_lt={'euid<', r2}}, {@subj_user={'subj_user', 0x3d, 'flock=local'}}, {@dont_hash}, {@smackfstransmute}, {@obj_user={'obj_user', 0x3d, 'batadv_slave_0\x00'}}, {@appraise}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101402, 0x134) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000140)='./file0\x00', 0x20000112) vmsplice(r4, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}], 0x1, 0x0) vmsplice(r5, &(0x7f0000000600)=[{&(0x7f0000000500)="058a", 0x2}], 0x1, 0x1) socket$packet(0x11, 0x2, 0x300) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x7}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x48}}, 0x0) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x90, r12, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r13}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040840) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) 10.072084076s ago: executing program 2 (id=264): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x20000005) socket$inet6(0xa, 0x6, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x1, 0x20, 0xc2b, 0xfe0000, {{0x19, 0x4, 0x1, 0x8, 0x64, 0x64, 0x0, 0x2, 0x29, 0x0, @local, @remote, {[@lsrr={0x83, 0xf, 0xfe, [@rand_addr=0x64010101, @broadcast, @remote]}, @lsrr={0x83, 0x13, 0xd3, [@empty, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback, @empty]}, @lsrr={0x83, 0x1b, 0x31, [@empty, @local, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x2f}]}, @end, @cipso={0x86, 0xb, 0x2, [{0x0, 0x5, '^zv'}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0xae}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1d, 0x2, 0x6) getpeername$packet(r4, 0x0, 0x0) close(0x3) r5 = fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10000e50, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setns(0xffffffffffffffff, 0x64000080) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_clone(0x5020500, 0x0, 0x0, 0x0, 0x0, 0x0) 9.770840266s ago: executing program 4 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 8.908079589s ago: executing program 2 (id=267): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_FW_INDEV={0x14, 0x3, 'rose0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x10}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) 8.087456701s ago: executing program 4 (id=268): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pipe2$watch_queue(&(0x7f0000000040), 0x80) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r1, 0x289e0cb5, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000001200)=0x4, 0x4) 7.564293615s ago: executing program 4 (id=271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xe5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="66b9800000c00f326635000400000f3067260f7e56926635100000000f22c0ba4300b85d00ef66ff2d8fe95801e7f30f2bb13000baf80c66b84cbf2f8a66efbafc0c66ed0f09baf80c66b848a9968966efba9a95ec0dec0d260f01c2", 0x5c}], 0x1, 0x43, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000040)={@remote, r4}, 0x14) getsockopt$inet6_int(r5, 0x29, 0xcf, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.637552566s ago: executing program 4 (id=273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x24008890) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r5, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x60, r5, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @empty, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.859186688s ago: executing program 3 (id=276): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000900)=@getsa={0x28, 0x28, 0x1, 0x0, 0x0, {@in=@multicast2, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000003700), r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003740)={'team0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r11, @ANYBLOB="01980000031100002c0012800e00010069703665727370616e00000018000280080014000d000000040012"], 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000003800)={'syztnl2\x00', &(0x7f0000003780)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x747, 0x43e, {{0x10, 0x4, 0x3, 0x3, 0x40, 0x66, 0x0, 0xc4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0x26, [@rand_addr=0x64010100, @rand_addr=0x64010101, @multicast1, @remote]}, @generic={0x7, 0x3, "06"}, @timestamp_addr={0x44, 0x14, 0xa1, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x78}, {@remote, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000038c0)={'ip6tnl0\x00', &(0x7f0000003840)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7f, 0x605d, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7800, 0x80, 0xfffffff9, 0x6}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000003b40)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003900)={0x1f8, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe4c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xdc, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0xc, 0xb, 0x12000}, {0x0, 0x9, 0x4, 0x8000}, {0x3, 0xb, 0x0, 0x6}, {0x9, 0x10, 0xfa, 0x8000}, {0x7f, 0x8, 0x2e, 0xe976}, {0x9, 0x5, 0x4, 0x9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) r14 = getuid() read$FUSE(r3, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r16 = syz_open_pts(r2, 0x10000) r17 = inotify_init1(0x0) sendmmsg$unix(r3, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="ab25482dd5ef8ecf3e9d8e4092f5d8a6573aae07a95f47bbae95e555a0da659ed49cb4c595198c6e54577289b5b65803e673360a1c9e0782f10b8e641859005b3c677cceaf7d2a8910601e0c083a900e7a9bd625a8d5a8eb7879872d72a77196a3882025dfc0b3d3f63094d5c936d28139e22db8426c150632c77386832e12f3cd8daa58850c52912f0210184b058194cc4799546a3bb4ad903956662fa3ed19b6ed674a5aa43eb2724c15db90f7dc7e3f3b661f8c86a3656f7cfb880196cc7b026de46697c2495294adf9060df69f97fa49d5b53412b8196117726c160df1f0dbc6d941f4c3983f9ad7b7cb88683238f04aa48836a954499a761b97073a38e41e83206289feea0b4b89fd1a3e7fa5a2a861691c199c5dd9238e2bf5542617000cb0a4f1bcc2883a55391e3e2127d58f78dc2e14b2d28d31bcbb601a5cfb45eda1b2fe64edd654d8993dfc6bb9a94c50b187358560d73ac1c0fefc00e7d996997524e32fcd16c956bf287eaa111228a638cff1db061629342429f1651e8f92def82cb1d7cd826ad67bfa794bff754d453a749fff06d077bfe2bad890ed1ca1ee937ee249f796a5c57fd0d3ac44614f785dda84fef5952fc773d66b7f8a0948ecde51d5deefd52c19385c2f71605994936fbbe8c5c621fadc5b8abe19ea50403ee5baea1f6e9562d719df3c525a07c21ff01d5aa3a7b8151075071ec1313966b86f71bce86becfe9d6e6090b7785385ee37bd84275528ffcb052320258217a89f0723e5aa90140371467bd4027b6bbe34a9141376bd2e3f597577eabc3eca3d78c430f79d4c88798598d2dbd717be375bc1c129f40cc193db3f4d380dfb85d7f876f9b40a74eea6795e4e3f8ef6bf7feed4232c8d8f15d277eca47d1f8477b1fc43ec9486f593857d8c97b3a71c769279512f37ce75d5055be1095e91a4ffd18aadb6424e7c3159881f00c7e1ca7e2b1b8969a38a1f9f821e3f07fd4653b6f8f3017e0064bfa96826f808ab34b65c8a81cf0c0a184b05db5ee0abe3b29f724d622119146ed119b229df6ca3091e6ce40c857e0e555a2342f31170456bf64820790c5767b448e56a875d8ae2aeb90eb7a5f3d691486e0f516d1a69e9914d45cf885c1c241ce99e7a9379fe2a2d1c22aea3e8ddd91abd482e6589b8e7eb106d5b99fa82560739566dd9302d43722470032dc269b82e47a0d213fbb369e21150a356dee124b3f2f6cdde653d68768da1278059e016cea7d2c7ca07894394b50dc08b9e7915e850175027b00ae29e47590629d97101465982c44138ecb10fa36164342c509324a4caad9f99de74173af1508211e33ca326b6f219861c01aeba6017a0406d9971a1e8f64146beb10f587c5d30c2f25a067ae8de8d50ea6dcac3493b83ae81e3d89bb5db57585af6e228edb787d6c0181a3e49d895e4b7fc9026bf5a778a68c805ec00e9c2c3e51c8acd46c17e5491565d4978addd5ec80a6cb701fa95f7c9b5811e9b2889ca49db49ebe2d83e4345e1ea3de37bd51e3717157e5c60945dd3fc48af1f204744c50b42f2d28c4bb65426fdc04f66e2e14fef74ab8b29739e7f51241a453e41738b6be236973eda1363087adbf1c2d2028663eb8e36402fa43f8aa6e3aa440e45dc8cbeff734169a0b2efd3178f71c59f9bc6216984d2cb5ad00f4dcfd2085d1414c4c9cddabc25f55544a0e637a6edecd1ec709d12e9c67cc6edb091cd2f5068c6aaf76e394fecc36cfa29867360e2e6c3dd35860a79a01d56794f9900666a240392894156c28db3e54f58ada111bd60b6eb9ae2f977653e190f954c97d1f896ac99c60e51dbe4e12df3e7a56e1e28cac12b7040c539c2fd54f51507b29ea6e509fdc0c94283caa102e10186f9f90934aefb7abb3844f95857b3b304f00d5a41c14136816368e6126c28576bf21332b78a31018a134c99a31e096ee22ad7c36dc3fda88263311c4930c7c0336bb258ab5d1db82805209af6377ff21855853bd12db37f0e3cd9280c7d5947ee110fcdc62cc79c2c5a0d3cecf6b929298469a2f2e20eeb926db1943413ff57eea1e603117ef7d61970309b061a093796b4160b2a55487911c59243a692949583599737daab5a60052ec5ee65d9554a40d69b10edc862258f8d3452121e9dd3d25e429f56d61335eba58aefdd460af3235b40aa9cd5ce268c327c88487abc354c3eb15714975b532726f11b517a9e94cf9bb064e67bd084ec9df6fbb4575b70fee53fef9153d3c10905c6324b84da7cb6625152632b90246773bf1aba7072f1fcdc85f2123d5268f5dbdbf24edb71155854b4d717d414fe474b92a02af97c53e69008358c7830b4a97df829e5ffb1e55b5cf47da286a6099a004463e0d822bdd6942ba472e84232db6fd036fc09c508670f595493d16fba6fb8a6c49112f47a798f674af1e157ba76bbe050138637199c2de35a8f7c602d6d574b44ff0f94e428588719918d40d6af51f436823039783fc767dc13666a5ad4479765a055ac6cdab29c3babb3e9cca961588f23226b6ca5dabb56b31a9fe00fa7ca804421e6f12bc9492d7c88456c3876f8f84f362b4e027c8f191ebf8fc98d7612b5884ba325072f7d9628c4b1568f653e13512da6f571645064f223dd1517cc9279179add881ec81fb1094fc5731eded9fe34c906bf89cdd41b9eab0361b9d1bfbc2041c21783767c7e98434455c4800d8ff5200e83068536ee3f8a39faf72d479a2bc70037df5565292b9e006241dffa9cbb938c26ade3ee6d65b41ec4954455e3a2256131fa7a4111dec4d3f9cebb5249e39b80d6a45053d50eee8ada1da8d72980db466a844f858eb7ad3588338df2427c7e02ad3aae935846450d4e13887a01b4dc7727894f952e09db0396b5e184845c5a7ed5f143548e1eb99f7b395bf68ca222795a0e8cdeccd4abf0b8514042d19b4e587da542d47482c4025631cab99e8be4cbafa899b36ac5791f95f75264788edd96e4fba3406a5f8be941e3c3b85032ef007954b303a73a0658c8baa2bb6fbf228e00e45e72bb87d77552a59a672179f1fe52fe3b25e9b3f9ff2a88abec1136bfd591b234db62fa69c830f3ba7bc2e651910c694574c841134b43ffbd5f931f0644b79930a7c954bcc268d601fab50d2e84890332d501abb81c149f7037a3be143ab985af5159e5f3c21a45605c7c435fee6767ad86e04e3ea3335715d1bd2831c0a2c779cc27145eb7d08978f1d21a9e3cd841665206418977e8bde4bf770b7ae5df37e2a328ff7896724f5ba5159650d4f865598d45707573163719ac0a13d93b1687f1e66e4935d95e0f9c8441e12f3381d52c5b6602c39bb2a826013ccfc45c0a761076c7d12fd3f3dc8fb805cd3a4a709697deec1e485893a33c52db729d5ca6530f0ab7c1d9e6687085230090a614bac92d8bef44cc44adc89d93b758a44001ce8d5544a842c28ca19b60745cdae4ddc130ca0427acc0579531cecdf08d460271b9aa67eb1f28630f9136772efc8e627fb9e2b0181a2fe047af002e7e13ed0e56d74d74adaf19d6e55f2d57e5812bbe30012eea9d2948869b52f0519d52e2f4ec9e9bc66a87399a619fb0fd852969a0f72ca2f7c515c0f8af8414ad66a7c5e9bb30d3b8bb604e0d2d13c7619c6cabdf5978f482edd272642da1a588b117277948b92e9b34fa4f91be0f432ce55944c0650d809d1b7ebe0cec02de00c0e3dd6d306985a2ac0f11ae3b2328b61847ece55a0c3e80a3d4c688d5611314604c103bb4ea26fca6bec491ef99c9f4feebf86b3331dcde62b29238a9b356be4ee924b9fc9ea10db446237678823c1e9b2354e89a81f71abdc7d8bade0613ef52f3bedf81029b298f11eda41b4d8100bdf1069ab67560e56d44e8e306cb01f699bcfd72c0f27569888e6cd47aafd1791f7d66eb497cc0016dacdaa281d2706416ba13ddf20b64285365593b411615d6a22e5f4c3a6166ddd9b6ca3858c032cf03c9e003d09ef6f7b4887e97faa93922dbeb30c81b91317e71d874ed7e64b68675d626308faad1d975afedb7c58a1ee9e89f7f8e26cf997cdad72ea7a790cc6c5ea6fb0b39323494fcd24e4785ddd5f99ffcbb1ed48270c62c23f8cf92fa9a3330fd2623c8fd353ef9394616e47b77a96534447594423096721ad4fcab9ba4dcce39017f5c19a026143b11a2d52ef537ed816afae65805a3d04ff8cc9c7abe0be3f72ecaf81149c94a90bbb449960be0299c64557760eeba72e7a490e06e29f39e19985aaac02c22be54ad586829cc919dae76c7a04be1b936cc3b35720e662a1e5f7e34799ec0694430397b3de247cd3efa98d40ebc0f8bd514bdef6c0fe40564e931d006e4c851fc021adaca8e3760cc922b5fbcb34e0f11e368c547fad7b736c9f987a06906df2e8bae5a4dabbb9c07a1955632bd946e02bd36880ab5dbbc3bcb936b2cc195040414728f47578d5195c846f238dc2afaaabccbfdcc998b3ba164e6774fa73b2b267a3125e35a5c37a0dcdd7f9cbc8022106c9e74b88a0328c18cae8d2fc3de6491c2ab930befc7893612fa678cdcb7bba4d248fda4b32fb51bcaef9a646bfbb1b3e2fe33f0c530d753cfdd88d73792ec9d111991165cab6b2d3ad818409d5c95783779932aaa6327df9684cb8c879f8fd5518c560bbee71b7bc1677366425995ff5a42b4b7ae2c014d724819b671b97e311ceb178150d199c0fdda19d6a9e69f9cc2b8d93ded10a1f66b83e74667c93696e4e520a6cb84d11dc905ec52311dd69d7eb7e3741974f7359cb54204606b748b082d302dbe0fd2561a7e876296e6e8d45bf8779f1f8c7eea9a17cecd939f6fbace4dcb507926911b76cb17902ed3de832954c6a705bc6726d12d02098126ad049b68af899ae1d10dc60c6c2a6e96f5d2fe2363fed673ecc7401bd45cc840b83cc0695223d75c2630311e3399c171b38ef31acddb79adcfb2d6e9c31dd43227d5abb2902e8af960d579f3a6860c758b26e427fe0c8d0610a071b06d5a7034cfb04c33252ece863161e116e1e42cadb3cbe6f3618500f6d59de5bb4ecb6be52ae5f827df2e76ba10f97c3d412aff3a040fecd034ae8d31fb3624525279c56458864153994766e1aebb8ec52ea8738a888a433d4d49725d217f9490a53833ea54a3d9b329f1db439257b3d02ee1c5caafa5c4836a12748c4ecdefef8d437121bbfc924b65878425f1671c6b1db396e59b71d4a9175987daf22346d687cbdf3ee4c1ecee9bc07ebdf3301f59cd6c0f605438b3f6b65b4536e872a31d3e2abfdd98b208862d19da92aeb75bac4896f2cc44cdaf4fb0a9b129f2ee77245610c4bc1c705af1e66766b44e33994e386b590059a206d195ea8ac1993cb2f98f63062f86f7c459df880fb5c89d4efedf3038d5c6915be03e14f657bc445b49a2be9ce8528614e49715b4b611a08c801fbac61d980ce32b17a55e4e0ddfd6051478bdebd715287de7915af95e350e3d92efd65bdc8f00d47d44ab8ec145405952b547025fda169a480c308dd9e3e707f6e791c9eaafe68d6bd81edc91049fcc87a09b43fbcb90dc05bbe30d4d4ba709c6372911be7eb56b885297261b5ceb04b1857ccc7b8057f44fe3de59f8bb283228b9e8b6db6278cf63b53476f28fe5625d2ed783eb5d66e323756b188d03f12a7fd511a7b1f4ab80264da5597d49ce2979db356187131a7aa02ad0424468b98eb585e3a23f45c42098ec24cddb20619b57ba920604f40ab65b2fcb5bcf60491f23fdf9fc01841b2857b6fbfc7d08b8235ba871f11286faae0316701d88", 0x1000}, {&(0x7f00000000c0)="e3642f4f7645a1e2c011c38369e889509ef4eceef244bf745aa19ebf2387d37d8c21ed4811bc3d278a74986a9acfe67c980324a60b29c325034ccaddefa35b213e7e63fbce46cd78204902052abe9f36d362cdbbafe2d6c5bce2922ed60e41e0f786da9f52e89cc58b93ecde44729dfa838c9b8297ffd14eb3ef3446e1aa221aac240f0556bfbda53ec24100d98c4c", 0x8f}, {&(0x7f0000000000)="a43c59b516a2c13ef9c7cda660144422f88628b0e0d0f69801b9e57cf37f6ef1f7cca3433f1008aa7297c19ab5ecdc10c0d1d35bbc31d42705c3658b3e415a94c3c8642b3460e117aa17fefa792e07661ae73fb7ebc111a066b4ce", 0x5b}], 0x3, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [r3, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, r15}}}], 0x40, 0x20050004}}, {{&(0x7f0000000200)=@file={0xe9c13e63733521da, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)="40d6151daf9a2a6008e8cec5add1d8ea376709023afaa487214becfedfdb67b581e22b658ed40014a5b73fbef0997f66c8920eed6a1b309f0ead135659b472b2b57a668357e58d4a1452af30e95ae7771297d44f925e7df58c220474cff3276edf6d5906b16f501ae3c09443b5fc258eeb3f42", 0x73}, {&(0x7f0000003480)="1b8acc6d72e7b5df65f351b88de68cd9a54e058d85bab69802b54b58afc763a0d08ef3ac9e667159dc3c522a500c15b281fd7e8ebe66fb424b9e2bddfb9816168d9da6e45dd75cdeea0544a59b0e367cb9f3b8c09dfd5d5b8a8c855a8a3196e78bc6f382022fdcefaefbc8d83c76d529f784cbc58ec83e834a609285f1cf746ef5a133189d8d7c4efef93a9baf71842a40329845f6a461da8f51f85bfe6dd3ab96a769c00c296d1ec2ea7032150d18aa172c7584dacf630f2adefa23c4eb76515869fc2f08ddb3dd8871ab8706688f09da5426e22a9f7846fd846ff2a2f0f7ef", 0xe0}, {&(0x7f0000000300)="facf47330e00f3a1d5bdd89b5d3c6d99e84343f332eff5b5ade6", 0x1a}, {&(0x7f0000003580)="747ad982f667a583b8d571c205ff640c0ef2980d4e6a6d8f7fb7dbed7e187a78b8eac0a3870946511a9ab51ca762b698e7b23916c64a8b805f33fb0fcf8ece56b35a8acb5c29c29f7fa453417fbcd70fdd5b4306f9a1f9546513b6257691a637359e6fac400bee55282dd0c46b93dc097e4c60a96edf3f9dc08157840a119ddbec5c100907e85d014bae8bc6e5d2e61f85f39cac47a5f496353db1255cc012ebdf0fa517ce40873c6b3e5c03a540a01d5549801e", 0xb4}], 0x4, &(0x7f00000003c0)=[@rights={{0x30, 0x1, 0x1, [r2, r3, r16, r0, r1, r2, r17, r1]}}], 0x30, 0x40010}}], 0x2, 0x4008000) write$cgroup_int(r3, &(0x7f0000000380)=0xfffffffffffff800, 0x12) 4.305642077s ago: executing program 2 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, r3, 0x0, 0x2000, 0xfffffffe}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "203bef835567ff41019c24459349508594cc63c20a02e3477ba469088f1dd6db64b5313cce9ba3920ed65bab716f21fd3cc650061428e82150fe7199215c651d", 0x3f}, 0x48, 0xfffffffffffffff8) unshare(0x62040200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwritev2(r6, 0x0, 0x0, 0x800be6b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) keyctl$get_persistent(0x16, r3, r4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000200000000160500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 3.96802669s ago: executing program 4 (id=279): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x1, 0xd59f80, 0x19f1, 0x0, 0x69, 0x0, 0x8, 0x2800, 0x6, 0x2, 0x80000001, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2100000000000000030000a78c80bcaff9a630e305a53fe115fa00000000004401000072a15c54df7ba89e92d8f51a78607a54809917af9cea60223f8c4d96571738dfcd5b5d003e07e9a92437befd86a76215f3c5f98120065445b0f1f3b97db9d4002b80dca215e168dced7faf64e5fe42b2f6ca9b81cf0db0429146b327998f80a33eeab39c67fbde523dd85cb739e7d4dc1ed2c3af9ecd62", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x5, 0x14, 0x18, 0x5, 0xb7, 0x1, 0xf5, 0x1}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0xb000001c}) syz_usb_connect$uac1(0x2, 0xc2, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x9d, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x2, 0x5, [0x9, 0x6, 0x2, 0x9, 0x4], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x2, 0xd, "ec"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0x81, 0x1, "a0f1", "e38180"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x6, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x8, 0xa, {0x7, 0x25, 0x1, 0x3, 0xb, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x3, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x80, 0xfa, "80e1c4", '('}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9, 0x0, "cf8a622b9e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x6, 0x6, {0x7, 0x25, 0x1, 0x83, 0x9, 0xe7}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x9, 0x2, 0x40}, 0xe8, &(0x7f0000000580)=ANY=[@ANYBLOB="050fe80003d210026fdf9ca985844e9ba7e7b45341c91ac08c407ef05c1e5366bbf2f21af4bb2f5dc82af9679a89c54e63017f8d64fae5480d5ee6741cf591fdf3b8542365d12bae34e9ecdb4d1cfecd9f6e62313420e2c77570a767859c98f042237804288aa37865f41c0387c76bf31287870bee6b82b4181d60fdbc6f5634194c8b000000bece12843c49a8e51ed6ccb50aefdb7d975bc1d6b22a2717d54040fe512a61ace24b2fe1f37509007a327b8e1fa842592528a8bce11677e028854c2a76f2ea88a9661e068fbe985006b69255bfb0c0c9c90a1003001e000b05feff07100200620900"]}) close(r1) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000700)=0x4) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109026200020123400c0904000001020d00000b24060001a9cb03fbfa91052400ef050d240f010701040606241a0200010905810308000875330904010000020d00000904010102020d00000905820200040e0107090503024000030598"], &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0x1, 0xb6, 0x40, 0x9}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x4, [@generic={0x4, 0x10, 0xa, '#'}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0xccf, 0x7, 0x7, [0x3f00, 0x0, 0x3f00, 0xf, 0x180]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0xe, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x4, 0x5, 0x4e0a, 0x81}]}, 0x1, [{0x6d, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}]}) bind$bt_rfcomm(r9, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r9, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) 3.862961214s ago: executing program 3 (id=281): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0xfffffffffffffff7}) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x190, 0x14, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf9, 0x8, "ed6cbea31d8d52cba1e407d6c547563a6bd58c5853a3647a7a97f06e165bc62fda0dc047f99a5920ee0fd2be91d5c500e2098d645d7dd3bc50ac6f7520c8996f029cbfe737da95f39cac97048bd5623c778ba821acff1e2d8c18e20d95529125e3777588181276cb4853c91cb509dcea7029b9d1e14affcd89ba3ef87d636cb466578a40bb56c49e4707996a779ba6a4ab09a555e0bc4604759388aa93c23bf5a170d531137a7ff52d3428ed4bee9438e2d281a2570170ec627962ceb8e013c7392b1731efb643b4690a19af041c4266f8a174f6c95ceb4e3fb69df681a0175e583af6786e84650664201394f610f56ecb4a0efa93"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x36, 0x8, "761f995b371ff2f08a4512310f1e1a2abf4612ac38e5cb45e129118550fae7deb8cdee6a6c7b8b4f844ce5c202538c37f8c4"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x18c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xaf, 0xd, 0x1, 0x0, "4f05e44b320dd59ba1dfc3d05d753a5bbf4fcf772faf3298882c650ed9c83abd48c8bcbdec81799c16b427218cfe988edcc35096ba60811894ca28b6b5cae5dd9f916c6816fc87458397af51db1d4d87491ce4a67c22ead3d7c4a2ecf36d76a8da5d975f797c4d2f41b39215e83e8aa1e5203fca601ce37cf51225e0abd804be5c0ef3b7091ef573b02117eea4220383faab3c4626391d4eda7ee56340735fa3a7161315cfe49b07e33bd5"}, @NFTA_SET_DESC={0x98, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36c9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELSET={0x1a0, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x11c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc81}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc4d}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x47c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x127}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x58, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf84}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}]}, @NFT_MSG_NEWTABLE={0x20c, 0x0, 0xa, 0x202, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "468307f1c9f5c6fdabc00977a56c45904f5a3b80314a867586367a6db87b89d959498007e4dcbb5274c82b4379f69aba7d127c02e0fd99378fcd0aeac84be157e95b9a2e2cd88b07a73c4bdd51e138c5ac66ce61afbaaeeb4fb9"}, @NFTA_TABLE_USERDATA={0xc7, 0x6, "9423162d437a78138cd8490b4411b52ddad18edd69bd5e51dca029d82e381e7010e1cfec611f579e796f2b0d008ff3e42b250f68f4f35f7258d1096407cded101c2fd7e2b703ee5b1f9c182427dded55d17c90e0b34710ad99603e7a2dd89823cb8a093574054e18e0631bd35fbf03b377214c709f842531ca4ba8130d3e7a499b4d2a2461b62f365a84f22a8c9ec5a2245a7eb0806f0775bb2a9c5a4f319c9de359bb34ffb0ee1083bf0937cd005c6f260d16d7116ca0ca7dd09bba68b6c559cd97da"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x83, 0x6, "78c896f2b868a4da28b65e67c5c05e49a8fd5e813d9992924cd4e4f2091da490a8062d1dfda8e4495577bf4c67e911cb9ddbaf840d11074bb56464b87d4b075f79e33dff7067632ee171d41c5cf9cdd6c683defc7e966dd30334e35d8595ae8e1aac5f40080e4fd42837b7ba804b5acb5a21c2ae0530ab24c3a8e9158238b4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x30e0}]}}, @NFT_MSG_NEWOBJ={0x58, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x44, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x11}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x3a}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0xee7a1b7e69fed71c}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @NFTA_CT_HELPER_NAME={0x5, 0x1, '\x00'}]}}], {0x14}}, 0x798}}, 0x81) 3.791120575s ago: executing program 0 (id=282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) add_key$user(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000002240)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9, 0x12) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r4, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 3.70024571s ago: executing program 3 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = io_uring_setup(0x5db5, &(0x7f0000000280)={0x0, 0xd3c5, 0x1, 0x1, 0x352}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r5, &(0x7f0000004d80)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f0000000f80)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000fedbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="04000801f2ff3300a800000008004dcaaa143c93047f0453ed26"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 3.619312736s ago: executing program 0 (id=285): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x1, 0xd59f80, 0x19f1, 0x0, 0x69, 0x0, 0x8, 0x2800, 0x6, 0x2, 0x80000001, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2100000000000000030000a78c80bcaff9a630e305a53fe115fa00000000004401000072a15c54df7ba89e92d8f51a78607a54809917af9cea60223f8c4d96571738dfcd5b5d003e07e9a92437befd86a76215f3c5f98120065445b0f1f3b97db9d4002b80dca215e168dced7faf64e5fe42b2f6ca9b81cf0db0429146b327998f80a33eeab39c67fbde523dd85cb739e7d4dc1ed2c3af9ecd62", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x5, 0x14, 0x18, 0x5, 0xb7, 0x1, 0xf5, 0x1}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000040)={0xb000001c}) syz_usb_connect$uac1(0x2, 0xc2, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x9d, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x2, 0x5, [0x9, 0x6, 0x2, 0x9, 0x4], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x2, 0xd, "ec"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0x81, 0x1, "a0f1", "e38180"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x6, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x8, 0xa, {0x7, 0x25, 0x1, 0x3, 0xb, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x3, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x80, 0xfa, "80e1c4", '('}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9, 0x0, "cf8a622b9e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x6, 0x6, {0x7, 0x25, 0x1, 0x83, 0x9, 0xe7}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x9, 0x2, 0x40}, 0xe8, &(0x7f0000000580)=ANY=[@ANYBLOB="050fe80003d210026fdf9ca985844e9ba7e7b45341c91ac08c407ef05c1e5366bbf2f21af4bb2f5dc82af9679a89c54e63017f8d64fae5480d5ee6741cf591fdf3b8542365d12bae34e9ecdb4d1cfecd9f6e62313420e2c77570a767859c98f042237804288aa37865f41c0387c76bf31287870bee6b82b4181d60fdbc6f5634194c8b000000bece12843c49a8e51ed6ccb50aefdb7d975bc1d6b22a2717d54040fe512a61ace24b2fe1f37509007a327b8e1fa842592528a8bce11677e028854c2a76f2ea88a9661e068fbe985006b69255bfb0c0c9c90a1003001e000b05feff07100200620900"]}) close(r1) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000700)=0x4) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109026200020123400c0904000001020d00000b24060001a9cb03fbfa91052400ef050d240f010701040606241a0200010905810308000875330904010000020d00000904010102020d00000905820200040e0107090503024000030598"], &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0x1, 0xb6, 0x40, 0x9}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x4, [@generic={0x4, 0x10, 0xa, '#'}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0xccf, 0x7, 0x7, [0x3f00, 0x0, 0x3f00, 0xf, 0x180]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0xe, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x4, 0x5, 0x4e0a, 0x81}]}, 0x1, [{0x6d, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}]}) bind$bt_rfcomm(r10, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r10, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) 3.472298439s ago: executing program 5 (id=286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000083000040"]) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x9, 0x200}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 3.428908705s ago: executing program 3 (id=287): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000008000000000000000009500000000000000801e4a440831f8aa98ec2d36d5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) process_vm_writev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000180)=""/93, 0x5d}], 0x2, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, 0x0, 0x14) close_range(r5, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x200, r0, &(0x7f0000000080)=0x6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x64, r8, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8, 0xb, 0x10}}]}, 0x64}}, 0x0) 3.339125408s ago: executing program 5 (id=288): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff32, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000030000050000020073797a310000000005000100070000001c0007800c0000000000000000fffffe0c001480080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) dup(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x400, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x19}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xc8, 0xe}}]}, 0x2c}}, 0x1) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) close(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_open_dev$video4linux(0x0, 0x5, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r9, 0x0, 0x0) 3.100085982s ago: executing program 2 (id=289): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x12, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 2.436220731s ago: executing program 3 (id=290): socket(0x2a, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r2 = dup2(r1, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x7}) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) 2.285895016s ago: executing program 5 (id=291): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$kcm(0x10, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 1.509130656s ago: executing program 5 (id=292): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0x93, "b731add4e40a9181f3f29d9d381369cded4eb8a4f98bb86495b288e6e49d85f7176bc9cb1fe8c1344d6cddab4e691a3096c6002cd16913e7a238c78d6439f7c88d2dbadf8d170da1bb28655949a5b15b1109b1909fe8a2556055eabe15b4de14252ec6cbeb033e658b3625dd1f282d38a74964034d453d0199e3db13fc898ddd8b4f086872a65eb5fb7fe6fc2970167d8e4658"}, &(0x7f0000000040)=0x9b) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0x1}, &(0x7f00000003c0)=0x8) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000001c0)={@local, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xe4b, 0x8, 0x8000, 0x4, 0x10, 0x1, 0xe}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0xd, 0x8, 0x4}, 0x9c) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 1.472712275s ago: executing program 3 (id=293): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x1, 0xd59f80, 0x19f1, 0x0, 0x69, 0x0, 0x8, 0x2800, 0x6, 0x2, 0x80000001, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x5, 0x14, 0x18, 0x5, 0xb7, 0x1, 0xf5, 0x1}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000040)={0xb000001c}) syz_usb_connect$uac1(0x2, 0xc2, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x9d, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x2, 0x5, [0x9, 0x6, 0x2, 0x9, 0x4], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x2, 0xd, "ec"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0x81, 0x1, "a0f1", "e38180"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x6, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x8, 0xa, {0x7, 0x25, 0x1, 0x3, 0xb, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x3, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x80, 0xfa, "80e1c4", '('}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9, 0x0, "cf8a622b9e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x6, 0x6, {0x7, 0x25, 0x1, 0x83, 0x9, 0xe7}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x9, 0x2, 0x40}, 0xe8, &(0x7f0000000580)=ANY=[@ANYBLOB="050fe80003d210026fdf9ca985844e9ba7e7b45341c91ac08c407ef05c1e5366bbf2f21af4bb2f5dc82af9679a89c54e63017f8d64fae5480d5ee6741cf591fdf3b8542365d12bae34e9ecdb4d1cfecd9f6e62313420e2c77570a767859c98f042237804288aa37865f41c0387c76bf31287870bee6b82b4181d60fdbc6f5634194c8b000000bece12843c49a8e51ed6ccb50aefdb7d975bc1d6b22a2717d54040fe512a61ace24b2fe1f37509007a327b8e1fa842592528a8bce11677e028854c2a76f2ea88a9661e068fbe985006b69255bfb0c0c9c90a1003001e000b05feff07100200620900"]}) close(r1) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000700)=0x4) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109026200020123400c0904000001020d00000b24060001a9cb03fbfa91052400ef050d240f010701040606241a0200010905810308000875330904010000020d00000904010102020d00000905820200040e0107090503024000030598"], &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0x1, 0xb6, 0x40, 0x9}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x4, [@generic={0x4, 0x10, 0xa, '#'}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0xccf, 0x7, 0x7, [0x3f00, 0x0, 0x3f00, 0xf, 0x180]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0xe, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x4, 0x5, 0x4e0a, 0x81}]}, 0x1, [{0x6d, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}]}) bind$bt_rfcomm(r10, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r10, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) 1.470287741s ago: executing program 4 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x7, 0x8, 0x6, 0x3, 0x12, "aae5eafb3bd6788e0376d0edfc116063255a5c"}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) syz_genetlink_get_family_id$nfc(0x0, r3) 1.292340909s ago: executing program 5 (id=295): mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x800, 0x6, 0x0, 0x3, 0x1, 0x3}, 0x0, &(0x7f0000000240)={0x8, 0xffffffff00000000, 0xffff, 0x1, 0xd53b, 0xfffffffffffffff7, 0x0, 0xfffffffffffff800}, 0x0, 0x0) 1.242609233s ago: executing program 2 (id=296): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000), 0x8) listen(r3, 0xf2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003700)=@newtfilter={0x2104, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20d4, 0x2, [@TCA_CGROUP_POLICE={0x60, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x24d1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x6, 0x7fffffff, 0x5, {0x3, 0x0, 0x3, 0x4, 0x743e, 0xeda8}, {0x8, 0x2, 0x6, 0x2, 0x3fae, 0x5a85fdc8}, 0x56a5ff4a, 0x7fb, 0x1}}]}, @TCA_CGROUP_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xa4c, 0x4, 0x3, 0xf4a3, 0x5, 0xe3, 0x800, 0x200, 0x4, 0x800, 0x4, 0x19e7e2fe, 0x7, 0x1, 0x3, 0x6, 0x0, 0x7ff, 0x1ff, 0x4, 0x81, 0x0, 0x9, 0x1, 0x7, 0x5, 0xb, 0x0, 0x4, 0x3, 0x51b, 0x9, 0x8, 0x0, 0x9, 0xbd9, 0xff, 0x43f, 0xbf, 0x3, 0x401, 0x8004, 0x1ff, 0x3, 0x0, 0x7, 0x401, 0x2, 0x2, 0x101, 0x5b54f5c7, 0xb9, 0x3, 0x9, 0x1, 0x71b, 0x3ce, 0xffffffff, 0x27, 0xc5da, 0x5, 0x3, 0x27be, 0xc0a7, 0x5d, 0xe, 0x0, 0x7, 0xbc2, 0x100, 0x80000001, 0x2, 0x1, 0x5, 0xd, 0x2, 0x3, 0x2, 0x4, 0x80000001, 0x10001, 0x318da78, 0x8001, 0xffff, 0x6, 0xfff, 0x6, 0x100, 0x808, 0x8, 0x9, 0xa9, 0x3, 0x3, 0x8, 0x80000001, 0x7, 0xfffffffa, 0x1, 0x80000000, 0x4, 0x1, 0x1, 0x81, 0x6e, 0x2, 0x400, 0x81, 0x64, 0x1, 0x7d2, 0xffffffff, 0x80, 0x3c, 0xb7d, 0x0, 0x7, 0x1, 0x9, 0x7989, 0x4, 0xd269, 0x9b3, 0xd5, 0x3, 0x1852, 0x9, 0x4, 0x3, 0x677e8c1d, 0x1ff, 0xfffffffd, 0xfff, 0x8, 0x5, 0x5, 0xfffffe00, 0x4, 0x11000, 0x2, 0x9, 0x1, 0x1, 0x6, 0x800, 0x2, 0x400, 0x1, 0x4, 0xe63, 0xffffffff, 0x800, 0x8d, 0x8, 0x7d151531, 0x1, 0x6, 0xfb, 0x4, 0x4, 0x4, 0xe8, 0xff000000, 0x7, 0x800, 0x80, 0x3, 0x2, 0x3, 0x6, 0x1ff, 0x10, 0x80000001, 0x80, 0x9, 0x2, 0x3, 0x3, 0x1800, 0x200000, 0x9, 0x2, 0x9, 0x3, 0x3, 0x7, 0xfe, 0xfa, 0x10001, 0x2, 0x80000000, 0x8, 0x7f, 0x10000, 0x3, 0x3ff, 0x5, 0xfffffce1, 0xfffffff9, 0x40, 0x2, 0x8000, 0x5, 0xc, 0x6, 0x2, 0x7, 0x6, 0x1, 0x4, 0x1, 0x401, 0x36c3, 0x1, 0x8, 0xffffff7f, 0x3, 0x5f, 0x3, 0x1000, 0x800, 0x40, 0x2, 0xffffffff, 0x7, 0xc, 0x9b, 0x7f, 0x6, 0x5, 0x3, 0x7fff, 0xfffffff9, 0x4, 0x8000, 0x2, 0x7, 0x2, 0x872, 0x9, 0x3ff, 0x3, 0x63c, 0x7, 0xd9, 0x8001, 0x8f16, 0xff5, 0x5, 0x9, 0x0, 0xfffffffb, 0x2, 0x4, 0x99de]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x0, 0x2, 0x8, 0x1, 0x8000, 0xe83, 0x8, 0x4, 0x8, 0x8, 0x100, 0xffffffff, 0xfffffffd, 0x1d0, 0xc, 0x8, 0xfffffff4, 0xa, 0x9, 0x4, 0x55, 0x7, 0x6, 0x1, 0x7fff, 0xd, 0x80000000, 0x81, 0x9, 0x2, 0x7, 0x1, 0x47, 0xfffffff9, 0x1, 0x44ad, 0x4, 0x9, 0x3, 0x9, 0x4, 0x1, 0x2, 0x2c, 0x2, 0x620, 0xc, 0xfff, 0x400, 0x0, 0x7, 0x6, 0x5, 0x0, 0x9, 0x101, 0x5, 0x3, 0x7, 0xfffffff8, 0xe077, 0x1, 0x8, 0x4d, 0x0, 0x9, 0xa, 0x80000000, 0x1, 0x0, 0x873b, 0x81, 0x4775, 0x4, 0x80, 0x2302b637, 0x5, 0x2, 0x1, 0x10000, 0x1, 0x6, 0x1, 0x9, 0x8, 0x8001, 0x5, 0x2, 0x0, 0x101, 0x4, 0x0, 0x6, 0x8000, 0x8, 0x7, 0x6, 0x8, 0x1ff, 0x2, 0xd7b, 0xffff, 0x8, 0x3c00, 0xffffffff, 0x6e9, 0x8, 0x3, 0x23e, 0xffffffff, 0xa, 0x8, 0x1, 0x1, 0x1, 0x7, 0x9, 0x6, 0x1, 0x40, 0x8001, 0x40, 0xc, 0x1, 0x5, 0x10001, 0xffff, 0x4, 0x80000000, 0x4, 0x4, 0x7fffffff, 0x6, 0x401, 0x3, 0x81, 0xa74, 0x9, 0x5, 0x9, 0x8, 0x1, 0x6ae, 0x0, 0x5, 0x6, 0x7, 0x0, 0x8, 0x3, 0x3, 0xffff8804, 0x8, 0x4717, 0x6, 0xd2ba, 0x2, 0x6, 0x0, 0x8, 0x3, 0x19c, 0x4, 0x1, 0x5c8, 0x7, 0xa, 0x1, 0x7, 0x4, 0x8, 0x7, 0x3, 0x7, 0x4, 0xc48c7a1, 0xb, 0x3, 0x357, 0x4, 0x4, 0x0, 0x5, 0xdd, 0xc, 0x8, 0x4, 0xfffffc01, 0x5, 0xe, 0x2, 0xc, 0x7f, 0x0, 0x8135, 0x3, 0x80000001, 0x2, 0x7adf, 0x401, 0x4, 0x1, 0x5, 0x968, 0x48e6411c, 0x9, 0x5, 0xd, 0x81, 0x9, 0xffffffff, 0x2, 0x1, 0xaea6, 0x80, 0xd9a, 0x8, 0x0, 0xfffffffe, 0x2, 0x7, 0x1, 0x7, 0xe7e, 0x59f1, 0x1, 0x3, 0x7, 0x7, 0x7, 0x72ee5df6, 0x8, 0x1, 0x5, 0xbd2, 0x7, 0x6, 0x9, 0x4, 0x7, 0x8000, 0x507, 0x2, 0x4, 0x3, 0x40, 0x5, 0x8, 0x4, 0xaf64, 0x8, 0x10, 0x9, 0x7fffffff, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x25}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x784}, @TCA_POLICE_RESULT={0x8, 0x5, 0x58}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]}, @TCA_CGROUP_EMATCHES={0x154, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1}, {0xfffffffc, 0x6, 0x1, 0x8}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfffe, 0x1, 0x3}, {0x8000, 0x6, 0xfffb, 0x6, 0x3, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfffa, 0x1, 0x100}, {0x7fff, 0x0, 0x8000, 0x4, 0x4, 0x2}}}, @TCF_EM_CONTAINER={0x50, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x3}, "9234f12fa67fc60f721dd46e33aae73f3c34a7144ef550f12fa2f5f4162e1f45ac527ae9dc6e595717d3b13a525316acece96d6c755aaf2aad6ea303c49bed5b695a064c"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8a}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x8c, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x1}, "e006542bcfe4c6299c86bafbcfecefb17d9d3113d88642d1ee8fbff44c5902c27f6837291d32a19cb162b2a4090c6444c9fe6045414669a3234fe8b8decaf1912ef5060216c60080d309b47c7d3fcf1c3c6c347e77a247366a0768d763285c4b3035eedf218977c4e721c9d5462dd267702cf73914cbb67c95987bca88"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0x1, 0x4, 0x1}}}]}]}, @TCA_CGROUP_EMATCHES={0x68, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbe48}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfff, 0x7, 0x622}, {{0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6}, {0x2, 0x8, 0x5, 0x81}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x4}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}]}, @TCA_CGROUP_POLICE={0x2c, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_CGROUP_ACT={0x1638, 0x1, [@m_nat={0x140, 0x12, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x2, 0x0, 0xffffffa8}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x66, 0xc39, 0x1, 0xd, 0x6}, @local, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xb, 0x8, 0x9, 0x8}, @local, @empty, 0xd8ce763280dcc4c9, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0xf49, 0x0, 0xffff, 0x101}, @private=0xa010100, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdf75, 0x9, 0x4, 0x5, 0x4}, @remote, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7c, 0xfffffffd, 0x6, 0xfff, 0x8}, @loopback, @local, 0xffffff00}}]}, {0x28, 0x6, "812d57f3c54fc5a39e942098e54b54c6eefe2d83502ab9f3752fec0d5dea9db1f6e9bb35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0xd4, 0x1c, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_ACTION={0x6, 0x3, 0xd}, @TCA_CT_MARK={0x8, 0x5, 0x1000}, @TCA_CT_LABELS={0x14, 0x7, "e56f8522745aaf811e433ca596b0d59f"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_ZONE={0x6}, @TCA_CT_LABELS={0x14, 0x7, "17fb6c8bfbb0337d9ac409edfa10370d"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0xff98}]}, {0x1e, 0x6, "326d269bf88a3aa46d7d605dc613112a1dd5ef81be6df6bb15cd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x13c, 0x15, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x2, 0x1, 0x6, 0x7}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010102}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}]}, {0x90, 0x6, "e8158ecf3bf33f53b148a6d40ed8e7300d7a95054b049c23937e6788efa95dd1988013abcfa3d40957c1b8018ddf1914bd9714f3f8f167fcada77d3682e42a7409cf80c923a42a860ff488e328b739cb455970c92f1a7d48dde9e5d5bfe54a08111d54f3fb22f794ba742169d12a9b48e5963aac3f95d72e920276c99cf41c2399ea4d3be099560c17bbc300"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x1038, 0x15, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x1002, 0x6, "7656a225a06e9986b5f84a3d8be74143da00a37df144c59759b74505e099779b601f51966bae2251f6f771533e94978f3872f10d98a86c05b186da6a19c4fd4ea183a0b7f4ffc712140f3b7e3ad633ebf4f6be5a9c60058a6d79f7d3149daac4943f0ea737e4860976eb4b2dfbe8c02b7b8f80d81c3c5b1718ba7ef81a3379e6b661c43812bd7bda5ab26ff83ab3e6c0d9521e4fc4018f24fa70ba1795ff46ddb72888e393f251e3155565bb566daba3769719a8425c4ebd69b3ac1e13c1e3c0570ae9c2249440085dd07b613aeb8690f4ec74f5d01993f810a2c7981409d79e233f658c456609450711318d16be6eca8e6ea18d05b6883c5e04ed8a22abc007de70d69e05d50515a9a25637d0571fdd0babed45ec0c8943f517497fa2f644ca7e9710b102c553661992533dffbc4a37018a9061e94066f3e02d25c761bea05ce4dfe36e01a0d2ae21b031f3d5e5e36d295fcdc05d34c88e98b6b932e0c22c37128f958104034ef152d042a77f3828aa437208b79291031788169cc5cb7d030cf6b3948338b10be5bbaadef441f9561416424adac6e2f86e19ae63b89f0fc2bea7095f99e5ca4c94c01e03397e1deef03b89c009f73fc1f4b81fac267358fa8bbc8b54b0bc36553f246661549c4a43c7eacb13b942edb7e433e4e070ea1e133ecabf31ce669a49ad76587fb17ee9c8bce92b5182e039612b3d9ccca6af80909865d65338c8b1f51e138d97f001ec47b5230109c0eb40b59f6bb5ba11fad006d92d519a775de465b14a4d184dabef1dd50562bd69ef310a1530e3c1fb8a9a9b7b340445025c0abf090176b38b8712c93cecd43df972a588b210847e06dcb3d55ac3cc846e2ef6bb7e86e2f4451a21060638b60d87c6ca9ba8a897d52341f6d388ca95087465b5e3f90efa6adb5a620c3c7fe8c12d2ba4b6bc6c9615f7b93f47f897b7f93ed98df50d7d542c9d8fd2fab7b56663fbfaea54ba0eb8f117d629e283304930f8ed7d4837df044da70e3484751b3c6371ed184d6df9a35e7b871530fa29af032676bec71296a2dd1a24d0deec90e90ff6cff6be441d306f14b0c5c680e5710fe474311d7780a25723135a2307307f7f9694166f5fd1c0ababb1e4ac9fbf0cc42d552c491370e717f5fc8161fac6a2476a90f0dc755312e62c56828e41156bee03cff87712266171d8baf9652ae9d6924ab9e5471e0def00d6374819a8acc27342ce78ba315567bc4e5efb90e105b111707ab739b096d062963b5eec859e49680f4c1a31b53bfbd4d5e08c2ed5125af6f1b4cba8c32733c2cb99fabff11b6256c2cdfd53d86d9d8aebdd9dac715765775673a21c8dc437860d60bb0a0d474ae867ff48dba68a505f7150ffd426f53900c28af194d14e7cca182412417a29b0c09b22f8fd0918d798a074de29473c7489ca096f2ce1c0fa5b7c2ae68f86f5ef82f4c01c8a7f622069ee329eb50109a67a06243626d5962dc8cb7b0de6e092842f3ccce95593c6321448f5f5ac976ad3c5071b0c117cf75057011310c02bbaf870ad05d99d52cdd3c364151f3f776d66eecf3c3124b4aef20720584a91cb003d0e5afcaf035baba5e001c27ffd3caab6835f83831726e70f78b61f64d5be339f286e54df6984feae1e0e865934f1e75cb25740572f6198fcf75f707c0762d9585d53fc73d4aa39dabf49dd6336acc5595cc96856af635ceca4669eb2f8703edbd3a64d2f21a370b87ca12e67c242c454d2ae329af1843d6074a16823879ebbfdad66786deba3cbb858247b314fc063eaddeb40d9b5699f2dcf51dfbcd6c1fe36b26358fe7daa35ed97ea4e259d44ec59eb7ddf15d69838533840181521e54b399e68846c6e06d9e4d4d7ff0083021df5f51c541a574f3724ae9b5d26efd6466ef93cc5e31ea71fd46b7bd2f1fc5015c9ef3fa3c41dbb833de87329dc9f25e97c4b620159a8a55605161a7b7c51c14a80d3a2706b0ed51b575092e66f1ebd496ee4d88bcd96870dff047538805f9b607b0ab95f3155bc96e4da7590149b495dd65f824fb86956c209d4b158d5a6f1386ca316384392e2993ab0f792f70ce36f389b2a41228804ca183a02622f94fe21504c4e5e87dfb773d34eb8ff1aec618b2c631fc9634f2c7f1235552d96f89af8b2ef6231203012d78e84f21e3b226b23b9acabe893b122072918acef8b2e2d27768d2605748c41e1bcfaf8a65832e48fd4c0eac5bbbb61e998c4883fec3b171f4cfc285a183dbd83a4fdf9ea407aacb2dd91181452236f27cfc4237a866d2c4ad03902acf1c4dfa17a5095626177f24098beaf5b2e447fdced2b1a12dedea8cb64836f99272f3fd21fd09128615ce44679bc9f8cc6fed4082f9f4587930789900f75ffe59c498ed865011885f8ac1993d1281092fc84238f5949f094d08c08b04ba59cb3746c1748ca2a2dfce9a0a72e47c69fc53c9e3e87793c73769033b69af3981fae5948701443cf5a6737edc79d4abfa12ec70bde6592e1d411330cd4bd3d83a476f8c4e8297771a6d135f9d2f35605ecd606ca69ed97d8625555e7e8c47f82150198f70d0eac8fb75fe7fb6d09fb1cda552617fcfa5e5d2860689bf7396183f285b73ff9c15e392cacc68bf715ccb2749546bc0976dbc8782a3901de9690c8d2f1cabcc29cf621a4df50486c62fd3391012a9bfacc39649eba00a5644b2b159ec532c77cd3142d443033c429e26acd07db082e0924a6f6d091ab6479d93c9611b9e31535f9b7cbfd6c77694df88a4c3be30444696243e0d3098249c1e38210ccd5afb7086077cd72cd33f57584fbaea6f65c1ac21c5ee4a5a94dabeb2702e9370ad412ba96d80c23e3944d7c257ecc23ec45e1566f19b807dac6d34e42a8031ed28384a2c3400772e9ac7d69ab1dc0d35cdf4e87f2fe28c97b7826313e966c3d2f68e963a49e8e6a596139562060a9c4378a9dc12649aef2e6f3e61dbd55497a6135de8bd049165d434cca26239d804c56d5e4bf0bf7b367c3a56183a9042fe494c6589497facde6b34da42497433bb166a2ecc3ecb5a3102f0e7e6fe2ef2439068d6c7db7c7320bf7ede535390c16db598093b015989d6c306c4be376df92272019c5b1ad21a0e1110c5817576b55ab63dd523d04beda4584daa3b41e318df82ca8e4e6e4b2d942348174895aa2326cfb192f93f58c92df51abdcc0da086b47ce259cede2edf00d070631f264e4a276fd09a91bea361e93b6ea1ede8b9b7eb1bf36d3b9bb70313e0087e0671f6bb9951b57a613fc0c319b4275b52db450b97347c9f697511c2b24b31c1f55790535327acea671dde01105fa8c18d349b97f571d80fab105f5a4152ad4bb84677cf778426d13431db11e28914f218864a642f6451abe0d367c9d859cbc7854daaff105eb5f30462b6f5d233c9b3568a31a583d4a5db0fb707c6c02f82b7b876afeca79601d8a66db15f0927492e41e97bcff9c92997a540f4ec44a33bb6360b02854286ddc223c8d7699ca1a12eaefa7203d46751f9fef332662b996cc4605b251c28e23c8a3b12049519442dae6c0b56f40f89ec29602a822d0c21316d5bf2aa70f4650fc2fc094d8be82b86b7f0b2efbf55b59133ea2d2b6338a0a20371668d7d662b604a035fd9c433bc14949c4ea30388e45d35f078bc97ffecf38eb3a2963f7afd0628b13f636c1d5725f074757623c3f078c883d49e903f49a48093e5216dc6c9dfed769cbbefd7fdcfd22fe2c6a9bc9fcc610d684252407d50eb9cca524799fd694a1b00b5f4618fdc3eeb6eb46ec216dd4c2d4e4badab68575f256c84dde90c7e71fd6451e6e53f6de4838ddb4792caf3ea95ab0f27233df3eb907bb170955717758864cc2b587f0953f0d65df0de9efc671ba375a5c4d17be378232e2d2a3e962e38ca5d63792c8153c29f5d68bc81b8f455a785254498127101fcccc4a9a793173ab9a468f002f5efa4b9ebdcf2f5f15aedce134b9cf8f1182d77783a65939ac504360acfcb764add45647f5d0030a9aea84e8d7de78bd36d3a3661c9d33a8756754931ea8d0aaabf8c54294aac6d56c4f6d01e743c8dba3516c2cf9d93a49b0a77373677dbadeb82695dad0c79ca370b892dafcfcfe06bc644269e6ffb621a3da0ce3b5c1677c8b3c6e1d5f98c168cc2cf3cd3783f9351d1867bc207967ef1445a0b5f5c0d4439e493c0f48a5fc11c29924cce9349827b162afb5d42cbb99c382c70bce1b048301c71eadfe0e4f6f2f858f02e948524468ea19bc56e4f8481f0c9d2a947d99e84d27da9c8b201c019a5e530811d92fbd439da627c050ece6a5f6217068e5c8dc6646a7dbcb68dd34f38682fa5f91c2bc92beab74f2e63c0c82523b527bfed4e1790029f7b4ca1c79d89c846ac3669284abb387a70a83f4cbad4b0acd3a6b2153a3f68812a7153cf63f78107763e1bce77f6b236c51dbfbc2042de346bf69fc345baf80672155324e87527a29a6f188da16ce8e6db0327ea043a6b62e1d38be4750804f73a275458a80aa65d662b3909f67c566d1140e6823f3e023298f0cf5583c656fc9f96080f478518e8ab9ea5a1d4cdc9b52ebb542fbe82b64e3c96811964aaf8f1a519e2882aa9a07ed30d5f1133dcd6d43279de4e311e091ee49024615321fd560a97752cd0af4f057044a030edba3f0287a1ce8042070a4727665cf0e067c7b5aa1ecff2b9000a614e39bc506956d02bee521da548d79d245b0e78158fca0238a81dbd5037d3c8995afc8169319fc330cc958b47e5c64415ba1552ea8c0d4a95d33d39f831108c35d2183ed4963c3c3545d428e6e69eb13560664101ae1cb09e13b803b1070e10e18008ef80db63226040e7b8edf9fcbb327255e5636ae6c16843eb43d188bc88e8d0d96f5f41bf3e76c11d61dbaf1d43e837f335e3c972d07fa7cdae3d57361e10a6d58e899aaa99169a234a9319cebc5f60773c91243e2b66b1a8859b2b37a0561e0c86fcdfb8d19761907bfcc5cb67dbcae97527c4fabeaccdbe805b11004aec8724237632d99dbf6da11676712aba9e617d98ea15817b239cd762daa9d453d8da70f8c8071b5324f875d86c2ae580b752fe71fc6ceb41b00cd349009d91c7cbc8d022be942165d7a6f7a24f5101a661d1349b163baf398be2de65a4edcb06d5334d112724567fc69ae1fba457a32792c42e95f53900a9e8fbd3a7681f4ece572e7c921a3d98c40fcc7788cbd63ac348a16d570720de029dbce2af4677b2335768db7e301e935142008327feb639595c9f92fe999eaa4068e814dcc5d32014ca1643b1adda7bb9959d6779de70257a8a074698c43492a10b3bed582318316146ce78f4de0e1d24f679e98289c596aa9239a9e10bf4e4a01bbeb5f923f76c18cdf703e36ba42b67dffda440cf992332e3dd5689b74c99d63d4565b05dfb9a13562d172f6da7df3699eee0f7216d6022807f6b8a5d73001cf83eeb0df305db5453b4a21fa5c933bf7439db218a2ea6b0bc5bed4175d08177707f1c2472ee901716b6816588c07ab1c13db15ea7bbf8023e3b803df19eec0c29d55ad4b4a4521465cc807f0f5c192c984b0978f04fbc731965a69211e43fd17c1d89d7c09f9ec42e4522d68896e40edf33483a851ccbc7ed6cbbc5fa3d5929348f3a8b591f327f3b64ce6794d5cadf864d10fbb3648455853067456fba9b19cd5d911880ec9116fa92f6d774375702e1e2f4db421fd373d39ca3ec5fc4df7568d1bdcb0b465e8f8b6ba90922bb335b6129109198314b4450c12ce7bcee749b1f9dabe19805b733d9b95bd01451d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x8c, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x56, 0x6, "1859295ada92e78945f6b7b0a4bae4e98a09c088c0fd0ecaf3448451ce201049fbdc70f9a251967644e7cdbea9dd9397b840a169207783bf9886536435a077863cfc938c24600a552d0491237d07ff1ad98e"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x104, 0x1f, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x4, 0x1, 0x9, 0x5}}]}, {0xbe, 0x6, "c437605e664c856156aa472dac238981a3877178a61bd70314b20521004b702d0fc6db8b310fb7dfea7fcd237a650c0c9bfe1b4fe41b903a00fea7df26d4eb650563491dedf3fd74bae3320957e000847ee216399cf65bd5d609e5a36a01e35ab964ad1d38e3fc10f5b8fb3bd135a30d59d3f9fc1f978ae9040583991bb5539ea3fef9da0ccdaee88de0973e4361f9a0203049d0e38bd42b3c4293b0e45b7baca76949832b7c8d96cc736c859198ce991bdb30c4099106251dc7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xa8, 0x16, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xa}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x3, 0x2, 0x2, 0xa9b}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xe}}]}, {0x31, 0x6, "7e58a02fb9f76a99706bc7e7e9885cea60c26439be0361944dcb5380758e6903917f1bbc22b073eff2d36c093a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x74, 0x6, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x44, 0x6, "120c4ec799a8861c86d649adb56c6e485db5138417d480c9d0805c1d8bf6b451364f3fe0a2b16220f48a834004195b0b6523b5a687174ad1e957b678d6a8c16b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2104}}, 0x20004084) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) 945.077828ms ago: executing program 0 (id=297): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f0000001640)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xfffc, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 440.335485ms ago: executing program 0 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x10, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 369.729909ms ago: executing program 0 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0xf500) fcntl$setpipe(r0, 0x407, 0x2000000) brk(0x55555ede5ffe) 276.373737ms ago: executing program 5 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x7, 0x8, 0x6, 0x3, 0x12, "aae5eafb3bd6788e0376d0edfc116063255a5c"}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) syz_genetlink_get_family_id$nfc(0x0, r3) 0s ago: executing program 0 (id=301): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6000800000000000290000000b000000000800e067315aecb6851f34c7000000a90bc910fe880000000000000000000000000001c910ff0200000000000000000000000000010720000000000600"/96], 0x60}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002440), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)={0x9, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x0, 0x2, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x240040c4}, 0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04040a0000000000"], 0xd) syz_emit_vhci(&(0x7f00000047c0)=ANY=[@ANYBLOB="042c1100"], 0x14) kernel console output (not intermixed with test programs): (bridge_slave_1) entered forwarding state [ 56.220021][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.242026][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.249130][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.257406][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.264475][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.321541][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.333714][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.360288][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.391100][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.403937][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 56.403951][ T30] audit: type=1400 audit(1742137227.440:111): avc: denied { sys_module } for pid=5820 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.446988][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.463403][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.480824][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.487878][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.525326][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.532432][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.545413][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.578834][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.588490][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.595601][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.617277][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.624364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.635556][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.665894][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.673039][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.695300][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.705384][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.712483][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.738801][ T5820] veth0_vlan: entered promiscuous mode [ 56.777023][ T5820] veth1_vlan: entered promiscuous mode [ 56.796437][ T5821] veth0_vlan: entered promiscuous mode [ 56.818573][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.873634][ T5821] veth1_vlan: entered promiscuous mode [ 56.907781][ T5821] veth0_macvtap: entered promiscuous mode [ 56.917432][ T5820] veth0_macvtap: entered promiscuous mode [ 56.931903][ T5821] veth1_macvtap: entered promiscuous mode [ 56.941180][ T5820] veth1_macvtap: entered promiscuous mode [ 56.962571][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.975808][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.987457][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.998464][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.012566][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.035218][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.050469][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.070438][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.086935][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.107349][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.121598][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.132355][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.142716][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.153985][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.166296][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.177978][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.187165][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.195922][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.241982][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.326290][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.326328][ T5830] veth0_vlan: entered promiscuous mode [ 57.341757][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.355164][ T5830] veth1_vlan: entered promiscuous mode [ 57.374601][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.381215][ T5817] veth0_vlan: entered promiscuous mode [ 57.388447][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.423250][ T5823] veth0_vlan: entered promiscuous mode [ 57.432528][ T5823] veth1_vlan: entered promiscuous mode [ 57.443539][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.444095][ T5817] veth1_vlan: entered promiscuous mode [ 57.464209][ T5830] veth0_macvtap: entered promiscuous mode [ 57.470473][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.501184][ T5830] veth1_macvtap: entered promiscuous mode [ 57.513195][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.522698][ T5823] veth0_macvtap: entered promiscuous mode [ 57.535429][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.544534][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.555954][ T30] audit: type=1400 audit(1742137228.580:112): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.69HTaj/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.579564][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.591606][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.602321][ T30] audit: type=1400 audit(1742137228.580:113): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.602336][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.603714][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.627984][ T30] audit: type=1400 audit(1742137228.580:114): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.69HTaj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.644167][ T5817] veth0_macvtap: entered promiscuous mode [ 57.679856][ T30] audit: type=1400 audit(1742137228.580:115): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.711519][ T5823] veth1_macvtap: entered promiscuous mode [ 57.719694][ T30] audit: type=1400 audit(1742137228.590:116): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.69HTaj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.721893][ T5833] Bluetooth: hci2: command tx timeout [ 57.747333][ T30] audit: type=1400 audit(1742137228.590:117): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.69HTaj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.793703][ T5817] veth1_macvtap: entered promiscuous mode [ 57.800040][ T5833] Bluetooth: hci1: command tx timeout [ 57.801060][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.806952][ T30] audit: type=1400 audit(1742137228.590:118): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.845908][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.856472][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.867828][ T30] audit: type=1400 audit(1742137228.670:119): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 57.891214][ T5833] Bluetooth: hci4: command tx timeout [ 57.896623][ T5833] Bluetooth: hci3: command tx timeout [ 57.896700][ T55] Bluetooth: hci0: command tx timeout [ 57.902231][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.918067][ T30] audit: type=1400 audit(1742137228.670:120): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="gadgetfs" ino=6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 57.940540][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.951980][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.990821][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.016692][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.039243][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.060126][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.060174][ T5902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.070821][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.102177][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.114769][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.126168][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.136853][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.147169][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.157979][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.168040][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.180083][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.190533][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.205140][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.217650][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.239295][ T5905] Invalid logical block size (2047) [ 58.243654][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.293802][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.303435][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.315520][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.393384][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.434264][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.473421][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.499082][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.535600][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.555351][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.566404][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.587935][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.603051][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.612919][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.627573][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.637425][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.654176][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.665074][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.684322][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.697478][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.705529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.749909][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.765353][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.799659][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.819285][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.832550][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.852310][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.866492][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.877436][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.034527][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.056315][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.122605][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.143946][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.218887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.239262][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.245945][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.256045][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.363235][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.389685][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.417187][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.439287][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.479454][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 59.896745][ T5822] Bluetooth: hci1: command tx timeout [ 59.960658][ T55] Bluetooth: hci3: command tx timeout [ 59.966174][ T55] Bluetooth: hci4: command tx timeout [ 59.973256][ T5822] Bluetooth: hci0: command tx timeout [ 60.606466][ T5944] openvswitch: netlink: IPv4 tunnel dst address is zero [ 60.658331][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 60.668364][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 60.684443][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 60.697741][ T5946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 60.742676][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 60.912179][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 61.119243][ T5833] Bluetooth: hci2: command tx timeout [ 61.560226][ T974] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.600592][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 61.608756][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 61.616889][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 61.624657][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 61.632401][ T5937] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 61.648881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.854418][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 61.949437][ T974] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 61.958447][ T974] usb 4-1: config 0 has no interface number 0 [ 61.965005][ T5833] Bluetooth: hci1: command tx timeout [ 61.993640][ T5947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11'. [ 62.000082][ T974] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0018, bcdDevice=c6.bb [ 62.029087][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.037204][ T974] usb 4-1: Product: syz [ 62.041461][ T5833] Bluetooth: hci0: command tx timeout [ 62.041497][ T5833] Bluetooth: hci4: command tx timeout [ 62.041535][ T5833] Bluetooth: hci3: command tx timeout [ 62.051745][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 62.051756][ T30] audit: type=1400 audit(1742137233.080:176): avc: denied { execute } for pid=5945 comm="syz.4.11" path="/1/file0/bus" dev="ramfs" ino=9230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 62.059037][ T974] usb 4-1: Manufacturer: syz [ 62.091545][ T974] usb 4-1: SerialNumber: syz [ 62.129922][ T974] usb 4-1: config 0 descriptor?? [ 62.157874][ T974] kvaser_usb 4-1:0.92: error -ENODEV: Cannot get usb endpoint(s) [ 62.187245][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 62.476976][ T30] audit: type=1400 audit(1742137233.510:177): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 62.504004][ T974] usb 4-1: USB disconnect, device number 2 [ 62.507403][ T30] audit: type=1400 audit(1742137233.520:178): avc: denied { ioctl } for pid=5943 comm="syz.3.10" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 62.643480][ T30] audit: type=1400 audit(1742137233.680:179): avc: denied { create } for pid=5966 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.031807][ T30] audit: type=1400 audit(1742137234.060:180): avc: denied { create } for pid=5966 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.146119][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.309118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.355732][ T30] audit: type=1400 audit(1742137234.070:181): avc: denied { write } for pid=5966 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.389822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.479679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.623184][ T30] audit: type=1400 audit(1742137234.070:182): avc: denied { mount } for pid=5966 comm="syz.4.14" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 63.651352][ T30] audit: type=1400 audit(1742137234.070:183): avc: denied { remount } for pid=5966 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 63.671144][ T30] audit: type=1400 audit(1742137234.250:184): avc: denied { mount } for pid=5974 comm="syz.2.16" name="/" dev="rpc_pipefs" ino=8239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 63.772270][ T30] audit: type=1400 audit(1742137234.280:185): avc: denied { unmount } for pid=5974 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 64.529073][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.579085][ T5914] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.639153][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 64.699210][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.749107][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 64.761288][ T5995] ALSA: mixer_oss: invalid OSS volume '' [ 64.778648][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.789066][ T10] usb 2-1: device descriptor read/64, error -71 [ 64.812603][ T5914] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.829091][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.847504][ T5914] usb 1-1: Product: syz [ 64.851949][ T5914] usb 1-1: Manufacturer: syz [ 64.856551][ T5914] usb 1-1: SerialNumber: syz [ 64.874880][ T5914] usb 1-1: config 0 descriptor?? [ 64.891436][ T5987] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 64.930800][ T5822] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 64.939110][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 65.031492][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 65.049023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 65.069196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.219109][ T9] usb 4-1: device descriptor read/64, error -71 [ 65.239648][ T5818] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.279140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.289466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.335177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.388607][ T9] usb usb4-port1: attempt power cycle [ 65.459834][ T10] usb 2-1: device descriptor read/64, error -71 [ 65.559152][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 65.569252][ T10] usb usb2-port1: attempt power cycle [ 65.573472][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.586842][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 65.616526][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 65.648632][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 65.663218][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 65.673640][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 65.691953][ T5818] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 65.702700][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 65.714215][ T5818] usb 3-1: Product: syz [ 65.726569][ T5818] usb 3-1: Manufacturer: syz [ 65.735319][ T5818] usb 3-1: SerialNumber: syz [ 65.739271][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 65.746356][ T5818] usb 3-1: config 0 descriptor?? [ 65.780025][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.962102][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 65.992593][ T5818] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 66.021292][ T5818] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 66.073466][ T10] usb 2-1: device descriptor read/8, error -71 [ 66.109176][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 66.196206][ T5818] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 66.216091][ T9] usb 4-1: device descriptor read/8, error -71 [ 66.216259][ T5818] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 66.240112][ T5818] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 66.361841][ T9] usb usb4-port1: unable to enumerate USB device [ 66.389148][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 66.396291][ T5818] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 66.429437][ T10] usb 2-1: device descriptor read/8, error -71 [ 66.549989][ T10] usb usb2-port1: unable to enumerate USB device [ 66.640883][ T6013] netlink: 80 bytes leftover after parsing attributes in process `syz.3.27'. [ 66.847515][ T10] usb 1-1: USB disconnect, device number 2 [ 66.999277][ T52] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 67.166610][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 67.185318][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.244085][ T52] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 67.254367][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.262520][ T52] usb 4-1: Product: syz [ 67.269208][ T52] usb 4-1: Manufacturer: syz [ 67.273873][ T52] usb 4-1: SerialNumber: syz [ 67.305263][ T52] usb 4-1: config 0 descriptor?? [ 67.334795][ T52] gspca_main: t613-2.14.0 probing 17a1:0128 [ 67.432811][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 67.432826][ T30] audit: type=1400 audit(1742137238.470:244): avc: denied { create } for pid=6018 comm="syz.0.29" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.510272][ T5818] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 67.517839][ T30] audit: type=1400 audit(1742137238.470:245): avc: denied { write } for pid=5996 comm="syz.2.23" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.599450][ T5818] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 67.629322][ T52] gspca_t613: unknown sensor 0000 [ 67.699440][ T52] t613 4-1:0.0: probe with driver t613 failed with error -22 [ 67.876068][ T52] usb 4-1: USB disconnect, device number 7 [ 67.893010][ T5818] usb 3-1: USB disconnect, device number 2 [ 67.931184][ T30] audit: type=1400 audit(1742137238.470:246): avc: denied { ioctl } for pid=5996 comm="syz.2.23" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.990347][ T6019] sctp: [Deprecated]: syz.0.29 (pid 6019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.990347][ T6019] Use struct sctp_sack_info instead [ 68.016039][ T30] audit: type=1400 audit(1742137238.470:247): avc: denied { map } for pid=6018 comm="syz.0.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.163538][ T30] audit: type=1400 audit(1742137238.470:248): avc: denied { read write } for pid=6018 comm="syz.0.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.216486][ T30] audit: type=1400 audit(1742137238.510:249): avc: denied { create } for pid=6018 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.252375][ T30] audit: type=1400 audit(1742137238.520:250): avc: denied { map_create } for pid=5996 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.318106][ T30] audit: type=1400 audit(1742137238.560:251): avc: denied { setopt } for pid=6018 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.337787][ T30] audit: type=1400 audit(1742137238.570:252): avc: denied { accept } for pid=6018 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.357441][ T30] audit: type=1400 audit(1742137238.600:253): avc: denied { getopt } for pid=6020 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.368785][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33'. [ 68.594522][ T6042] ALSA: mixer_oss: invalid OSS volume '' [ 68.798856][ T6049] validate_nla: 44 callbacks suppressed [ 68.798872][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 68.812906][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 68.815017][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 68.834302][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 68.844574][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 68.853328][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 68.861248][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 69.199386][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 69.213900][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 69.225562][ T6054] input: syz0 as /devices/virtual/input/input5 [ 69.352856][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 69.368904][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 69.433966][ T6049] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 69.693144][ T6059] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.703716][ T6059] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 70.439881][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 70.570964][ T6086] FAULT_INJECTION: forcing a failure. [ 70.570964][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.585920][ T6086] CPU: 1 UID: 0 PID: 6086 Comm: syz.2.47 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 70.585941][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.585951][ T6086] Call Trace: [ 70.585957][ T6086] [ 70.585963][ T6086] dump_stack_lvl+0x16c/0x1f0 [ 70.585983][ T6086] should_fail_ex+0x50a/0x650 [ 70.586002][ T6086] _copy_to_user+0x32/0xd0 [ 70.586014][ T6086] simple_read_from_buffer+0xd0/0x160 [ 70.586030][ T6086] proc_fail_nth_read+0x198/0x270 [ 70.586046][ T6086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.586061][ T6086] ? rw_verify_area+0xcf/0x680 [ 70.586075][ T6086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.586089][ T6086] vfs_read+0x1df/0xbf0 [ 70.586104][ T6086] ? __fget_files+0x1fc/0x3a0 [ 70.586114][ T6086] ? __pfx___mutex_lock+0x10/0x10 [ 70.586127][ T6086] ? __pfx_vfs_read+0x10/0x10 [ 70.586146][ T6086] ? __fget_files+0x206/0x3a0 [ 70.586159][ T6086] ksys_read+0x12b/0x250 [ 70.586173][ T6086] ? __pfx_ksys_read+0x10/0x10 [ 70.586192][ T6086] do_syscall_64+0xcd/0x250 [ 70.586206][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.586221][ T6086] RIP: 0033:0x7febf1b8bb7c [ 70.586229][ T6086] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.586239][ T6086] RSP: 002b:00007febf2a12030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.586248][ T6086] RAX: ffffffffffffffda RBX: 00007febf1da5fa0 RCX: 00007febf1b8bb7c [ 70.586254][ T6086] RDX: 000000000000000f RSI: 00007febf2a120a0 RDI: 0000000000000004 [ 70.586259][ T6086] RBP: 00007febf2a12090 R08: 0000000000000000 R09: 0000000000000000 [ 70.586264][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.586270][ T6086] R13: 0000000000000000 R14: 00007febf1da5fa0 R15: 00007fff7eb07ca8 [ 70.586281][ T6086] [ 70.772817][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.949424][ T52] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 70.996576][ T6091] can0: slcan on ttyS3. [ 71.006613][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.282377][ T6091] sp0: Synchronizing with TNC [ 71.586238][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.601238][ T1293] can0 selects TX queue 0, but real number of TX queues is 0 [ 71.659112][ T6094] can0 (unregistered): slcan off ttyS3. [ 71.666336][ T6090] [U] č [ 71.755400][ T52] usb 4-1: not running at top speed; connect to a high speed hub [ 71.765847][ T52] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 71.775429][ T52] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.811347][ T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.850723][ T52] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.894510][ T6102] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 71.895823][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.949046][ T52] usb 4-1: Product: syz [ 71.965401][ T52] usb 4-1: Manufacturer: syz [ 71.986120][ T52] usb 4-1: SerialNumber: syz [ 71.992856][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.53'. [ 72.012736][ T6107] misc userio: Invalid payload size [ 72.019816][ T6102] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.028473][ T6102] bond0: (slave team0): Enslaving as an active interface with an up link [ 72.047738][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.51'. [ 72.192924][ T6102] trusted_key: syz.4.51 sent an empty control message without MSG_MORE. [ 72.573897][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.728924][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.818920][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 72.818934][ T30] audit: type=1400 audit(1742137243.850:317): avc: denied { connect } for pid=6076 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.898554][ T52] usb 4-1: 0:2 : does not exist [ 72.956328][ T52] usb 4-1: USB disconnect, device number 8 [ 73.159526][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.197965][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 73.274977][ T30] audit: type=1400 audit(1742137244.310:318): avc: denied { map } for pid=6120 comm="syz.2.55" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.365001][ T30] audit: type=1400 audit(1742137244.400:319): avc: denied { connect } for pid=6121 comm="syz.4.58" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.390920][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 73.419261][ T30] audit: type=1400 audit(1742137244.400:320): avc: denied { read } for pid=6121 comm="syz.4.58" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.473319][ T30] audit: type=1400 audit(1742137244.450:321): avc: denied { write } for pid=6121 comm="syz.4.58" laddr=fe80::a09c:eaff:fef5:3cc6 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.640835][ T30] audit: type=1400 audit(1742137244.600:322): avc: denied { map } for pid=6127 comm="syz.0.59" path="socket:[9522]" dev="sockfs" ino=9522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 73.668629][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 73.675080][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.699077][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 73.710014][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 73.721725][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 73.731039][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.937168][ T9] usb 2-1: config 0 descriptor?? [ 73.946341][ T6117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.699392][ T30] audit: type=1400 audit(1742137245.100:323): avc: denied { connect } for pid=6134 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.788015][ T9] hub 2-1:0.0: USB hub found [ 74.851071][ T9] hub 2-1:0.0: 1 port detected [ 74.916602][ T30] audit: type=1400 audit(1742137245.950:324): avc: denied { getopt } for pid=6138 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.079453][ T30] audit: type=1400 audit(1742137246.120:325): avc: denied { bind } for pid=6146 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.337011][ T30] audit: type=1326 audit(1742137246.140:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb431b8d169 code=0x7ffc0000 [ 75.398079][ T6147] syzkaller1: entered promiscuous mode [ 75.478103][ T6147] syzkaller1: entered allmulticast mode [ 75.909180][ T9] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 76.130585][ T26] cfg80211: failed to load regulatory.db [ 76.138517][ T6165] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 76.321674][ T6173] ubi31: attaching mtd0 [ 76.327006][ T6173] warning: `syz.4.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.433745][ T6179] syz.4.74 uses obsolete (PF_INET,SOCK_PACKET) [ 76.561333][ T6184] Zero length message leads to an empty skb [ 76.593871][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.700117][ T5914] usb 2-1: USB disconnect, device number 6 [ 76.727255][ T6191] @: renamed from vlan0 (while UP) [ 76.772428][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 76.785271][ T10] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 76.824925][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 76.856884][ T6188] could not allocate digest TFM handle crc32-pclmul [ 76.864018][ T10] usb 1-1: Product: syz [ 76.864040][ T10] usb 1-1: Manufacturer: syz [ 76.864055][ T10] usb 1-1: SerialNumber: syz [ 76.886938][ T10] usb 1-1: config 0 descriptor?? [ 77.257000][ T6201] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 77.279120][ T5818] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 77.309184][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 77.412254][ T6176] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 77.429027][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 77.439257][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.459130][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.459191][ T9] usb 2-1: device descriptor read/64, error -71 [ 77.479097][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.499040][ T5818] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 77.517389][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.547592][ T5818] usb 4-1: config 0 descriptor?? [ 77.555228][ T6197] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.567465][ T5818] hub 4-1:0.0: USB hub found [ 77.740222][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 77.760045][ T10] usb 1-1: USB disconnect, device number 3 [ 77.812574][ T5818] hub 4-1:0.0: 1 port detected [ 77.938261][ T9] usb 2-1: device descriptor read/64, error -71 [ 78.049218][ T9] usb usb2-port1: attempt power cycle [ 78.145239][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.386254][ T6213] FAULT_INJECTION: forcing a failure. [ 78.386254][ T6213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.402232][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 78.402246][ T30] audit: type=1400 audit(1742137249.440:364): avc: denied { create } for pid=6214 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.435975][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 78.439260][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.4.86 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 78.439279][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.439287][ T6213] Call Trace: [ 78.439291][ T6213] [ 78.439296][ T6213] dump_stack_lvl+0x16c/0x1f0 [ 78.439319][ T6213] should_fail_ex+0x50a/0x650 [ 78.439342][ T6213] _copy_from_user+0x2e/0xd0 [ 78.439357][ T6213] video_usercopy+0xedb/0x1620 [ 78.439378][ T6213] ? __pfx___video_do_ioctl+0x10/0x10 [ 78.439393][ T6213] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 78.439417][ T6213] ? __pfx_video_usercopy+0x10/0x10 [ 78.439444][ T6213] v4l2_ioctl+0x1ba/0x250 [ 78.439458][ T6213] ? __pfx_v4l2_ioctl+0x10/0x10 [ 78.439473][ T6213] __x64_sys_ioctl+0x190/0x200 [ 78.439494][ T6213] do_syscall_64+0xcd/0x250 [ 78.439513][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.439531][ T6213] RIP: 0033:0x7fe93938d169 [ 78.439543][ T6213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.439555][ T6213] RSP: 002b:00007fe93a214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.439568][ T6213] RAX: ffffffffffffffda RBX: 00007fe9395a5fa0 RCX: 00007fe93938d169 [ 78.439577][ T6213] RDX: 0000400000000200 RSI: 00000000c0045627 RDI: 0000000000000004 [ 78.439585][ T6213] RBP: 00007fe93a214090 R08: 0000000000000000 R09: 0000000000000000 [ 78.439593][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.439605][ T6213] R13: 0000000000000000 R14: 00007fe9395a5fa0 R15: 00007ffc6386c928 [ 78.439622][ T6213] [ 78.534307][ T30] audit: type=1400 audit(1742137249.440:365): avc: denied { connect } for pid=6214 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.632695][ T9] usb 2-1: device descriptor read/8, error -71 [ 78.790982][ T30] audit: type=1400 audit(1742137249.440:366): avc: denied { setopt } for pid=6214 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.838754][ T30] audit: type=1400 audit(1742137249.600:367): avc: denied { view } for pid=6216 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 78.877973][ T30] audit: type=1400 audit(1742137249.730:368): avc: denied { name_bind } for pid=6219 comm="syz.4.89" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.899962][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 78.912985][ T30] audit: type=1400 audit(1742137249.730:369): avc: denied { node_bind } for pid=6219 comm="syz.4.89" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 78.937029][ T9] usb 2-1: device descriptor read/8, error -71 [ 78.943577][ T30] audit: type=1400 audit(1742137249.810:370): avc: denied { read } for pid=6219 comm="syz.4.89" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 78.967714][ T30] audit: type=1400 audit(1742137249.810:371): avc: denied { open } for pid=6219 comm="syz.4.89" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 78.998701][ T30] audit: type=1400 audit(1742137249.970:372): avc: denied { mount } for pid=6224 comm="syz.2.91" name="/" dev="autofs" ino=9190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 79.050455][ T9] usb usb2-port1: unable to enumerate USB device [ 79.112331][ T5818] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.115877][ T9] usb 4-1: USB disconnect, device number 9 [ 79.120641][ T26] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 79.168356][ T26] usb 4-1-port1: connect-debounce failed [ 79.552799][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.563218][ T5818] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 79.575703][ T5818] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 79.585111][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.599390][ T5818] usb 1-1: config 0 descriptor?? [ 79.677244][ T6234] Bluetooth: MGMT ver 1.23 [ 80.889080][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.076698][ T6258] FAULT_INJECTION: forcing a failure. [ 81.076698][ T6258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.090106][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 81.117963][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 81.136377][ T10] usb 3-1: config 0 has no interface number 0 [ 81.160779][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.177335][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: syz.3.99 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 81.177353][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.177360][ T6258] Call Trace: [ 81.177363][ T6258] [ 81.177367][ T6258] dump_stack_lvl+0x16c/0x1f0 [ 81.177385][ T6258] should_fail_ex+0x50a/0x650 [ 81.177403][ T6258] _copy_from_iter+0x2a1/0x1560 [ 81.177413][ T6258] ? trace_lock_acquire+0x14e/0x1f0 [ 81.177426][ T6258] ? __alloc_skb+0x1fe/0x380 [ 81.177440][ T6258] ? __pfx__copy_from_iter+0x10/0x10 [ 81.177450][ T6258] ? __virt_addr_valid+0x1a4/0x590 [ 81.177463][ T6258] ? __virt_addr_valid+0x5e/0x590 [ 81.177473][ T6258] ? __phys_addr_symbol+0x30/0x80 [ 81.177482][ T6258] ? __check_object_size+0x488/0x710 [ 81.177495][ T6258] netlink_sendmsg+0x813/0xd70 [ 81.177512][ T6258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.177529][ T6258] ____sys_sendmsg+0xaaf/0xc90 [ 81.177541][ T6258] ? copy_msghdr_from_user+0x10b/0x160 [ 81.177557][ T6258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.177572][ T6258] ___sys_sendmsg+0x135/0x1e0 [ 81.177588][ T6258] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.177606][ T6258] ? __pfx_lock_release+0x10/0x10 [ 81.177620][ T6258] ? trace_lock_acquire+0x14e/0x1f0 [ 81.177635][ T6258] ? __fget_files+0x206/0x3a0 [ 81.177647][ T6258] __sys_sendmsg+0x16e/0x220 [ 81.177662][ T6258] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.177683][ T6258] do_syscall_64+0xcd/0x250 [ 81.177697][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.177711][ T6258] RIP: 0033:0x7fb431b8d169 [ 81.177720][ T6258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.177729][ T6258] RSP: 002b:00007fb432a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.177739][ T6258] RAX: ffffffffffffffda RBX: 00007fb431da5fa0 RCX: 00007fb431b8d169 [ 81.177745][ T6258] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 81.177751][ T6258] RBP: 00007fb432a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.177756][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.177761][ T6258] R13: 0000000000000000 R14: 00007fb431da5fa0 R15: 00007ffc975c6a28 [ 81.177772][ T6258] [ 81.400834][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 81.430429][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 81.439519][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.447491][ T10] usb 3-1: Product: syz [ 81.451676][ T10] usb 3-1: Manufacturer: syz [ 81.456239][ T10] usb 3-1: SerialNumber: syz [ 81.463047][ T10] usb 3-1: config 0 descriptor?? [ 81.840604][ T9] usb 1-1: USB disconnect, device number 4 [ 81.869106][ T5879] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 81.921848][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.931988][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.954661][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.970911][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.987703][ T10] appletouch 3-1:0.85: Geyser mode initialized. [ 81.997060][ T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6 [ 82.019276][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 82.031190][ T5879] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 82.373758][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.393122][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.393545][ T5879] usb 4-1: Product: syz [ 82.424123][ T5879] usb 4-1: Manufacturer: syz [ 82.424924][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.433825][ T5879] usb 4-1: SerialNumber: syz [ 82.469546][ T5879] usb 4-1: config 0 descriptor?? [ 82.490085][ T10] usb 3-1: USB disconnect, device number 3 [ 82.578463][ T10] appletouch 3-1:0.85: input: appletouch disconnected [ 82.826873][ T5879] ath6kl: Failed to submit usb control message: -71 [ 82.833920][ T5879] ath6kl: unable to send the bmi data to the device: -71 [ 82.865299][ T5879] ath6kl: Unable to send get target info: -71 [ 82.921959][ T5879] ath6kl: Failed to init ath6kl core: -71 [ 82.935598][ T5879] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 82.960098][ T5879] usb 4-1: USB disconnect, device number 10 [ 83.893485][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 83.893500][ T30] audit: type=1326 audit(1742137254.930:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.2.107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febf1b8d169 code=0x0 [ 84.125651][ T6291] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 84.132347][ T6291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.194466][ T6291] vhci_hcd vhci_hcd.0: Device attached [ 84.219244][ T5818] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 84.353473][ T30] audit: type=1400 audit(1742137255.390:392): avc: denied { ioctl } for pid=6292 comm="syz.4.109" path="socket:[9885]" dev="sockfs" ino=9885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.438512][ T6296] vhci_hcd: connection closed [ 84.449103][ T974] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 84.465153][ T12] vhci_hcd: stop threads [ 84.472716][ T12] vhci_hcd: release socket [ 84.479742][ T5818] usb 3-1: device descriptor read/64, error -71 [ 84.550777][ T6305] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 84.627818][ T12] vhci_hcd: disconnect device [ 84.920253][ T5879] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 85.083075][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.131501][ T5879] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=84.62 [ 85.147120][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 85.154772][ T5818] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 85.159196][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.171851][ T5879] usb 4-1: Product: syz [ 85.176081][ T5879] usb 4-1: Manufacturer: syz [ 85.181234][ T5879] usb 4-1: SerialNumber: syz [ 85.187623][ T5879] usb 4-1: config 0 descriptor?? [ 85.299056][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 85.299103][ T5818] usb 3-1: device descriptor read/64, error -71 [ 85.306837][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 85.315590][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 85.335013][ T26] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 85.343524][ T26] usb 2-1: config 0 has no interface number 0 [ 85.350816][ T26] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03 [ 85.364116][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.372513][ T26] usb 2-1: SerialNumber: syz [ 85.383426][ T26] usb 2-1: config 0 descriptor?? [ 85.399776][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.421410][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.430964][ T5879] gspca_main: spca506-2.14.0 probing 0734:043b [ 85.437451][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.443227][ T5818] usb usb3-port1: attempt power cycle [ 85.445666][ T10] usb 1-1: Product: syz [ 85.455203][ T10] usb 1-1: Manufacturer: syz [ 85.460053][ T10] usb 1-1: SerialNumber: syz [ 85.468769][ T10] usb 1-1: config 0 descriptor?? [ 85.476723][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.487006][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 85.501865][ T30] audit: type=1400 audit(1742137256.540:393): avc: denied { create } for pid=6313 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.528399][ T30] audit: type=1400 audit(1742137256.550:394): avc: denied { bind } for pid=6313 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.593514][ T5879] usb 4-1: USB disconnect, device number 11 [ 85.598023][ T26] ftdi_sio 2-1:0.154: FTDI USB Serial Device converter detected [ 85.621482][ T26] usb 2-1: Detected SIO [ 85.655040][ T26] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 85.715771][ T26] usb 2-1: USB disconnect, device number 11 [ 85.777733][ T26] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 85.816616][ T26] ftdi_sio 2-1:0.154: device disconnected [ 85.822636][ T5818] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 85.849447][ T5818] usb 3-1: device descriptor read/8, error -71 [ 85.856481][ T30] audit: type=1326 audit(1742137256.890:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.4.118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93938d169 code=0x0 [ 85.972319][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.997110][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.008130][ T30] audit: type=1400 audit(1742137257.040:396): avc: denied { create } for pid=6321 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.036362][ T30] audit: type=1400 audit(1742137257.040:397): avc: denied { connect } for pid=6309 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.057438][ T30] audit: type=1400 audit(1742137257.040:398): avc: denied { write } for pid=6321 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.100883][ T5818] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 86.119540][ T5818] usb 3-1: device descriptor read/8, error -71 [ 86.228238][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 86.241213][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 86.243831][ T5818] usb usb3-port1: unable to enumerate USB device [ 86.274100][ T30] audit: type=1400 audit(1742137257.310:399): avc: denied { write } for pid=6328 comm="syz.1.121" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.054015][ T30] audit: type=1400 audit(1742137258.090:400): avc: denied { getopt } for pid=6336 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.073323][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.104791][ T6332] autofs: Unknown parameter '0x0000000000000000' [ 88.078839][ T10] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 88.095934][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 88.115641][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 88.199317][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 88.213305][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 88.331351][ T6348] 9pnet_fd: Insufficient options for proto=fd [ 88.808086][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 88.834763][ T10] usb 1-1: USB disconnect, device number 5 [ 88.989117][ T26] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 89.239193][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 89.256240][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 89.256253][ T30] audit: type=1400 audit(1742137260.290:403): avc: denied { write } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.477413][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 89.697472][ T10] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 89.801547][ T26] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.812250][ T10] usb 1-1: config 0 has no interface number 0 [ 89.813802][ T26] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.827376][ T30] audit: type=1400 audit(1742137260.290:404): avc: denied { remove_name } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.827406][ T30] audit: type=1400 audit(1742137260.290:405): avc: denied { rename } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.827431][ T30] audit: type=1400 audit(1742137260.290:406): avc: denied { add_name } for pid=5177 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.851264][ T26] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.873034][ T30] audit: type=1400 audit(1742137260.290:407): avc: denied { unlink } for pid=5177 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.894769][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.945543][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 89.955200][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.963466][ T10] usb 1-1: Product: syz [ 89.968272][ T10] usb 1-1: Manufacturer: syz [ 89.972923][ T10] usb 1-1: SerialNumber: syz [ 90.015790][ T974] vhci_hcd: vhci_device speed not set [ 90.021631][ T26] usb 4-1: Product: syz [ 90.025881][ T26] usb 4-1: Manufacturer: syz [ 90.034153][ T26] usb 4-1: SerialNumber: syz [ 90.058294][ T10] usb 1-1: config 0 descriptor?? [ 90.074923][ T26] usb 4-1: config 0 descriptor?? [ 90.086062][ T30] audit: type=1400 audit(1742137260.290:408): avc: denied { create } for pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.105297][ T6351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.117242][ T30] audit: type=1400 audit(1742137260.390:409): avc: denied { create } for pid=6358 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.264044][ T30] audit: type=1400 audit(1742137260.390:410): avc: denied { getopt } for pid=6358 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.707338][ T10] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 90.746912][ T10] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 90.788232][ T10] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 90.814818][ T10] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 90.895245][ T10] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 90.965782][ T10] usb 1-1: USB disconnect, device number 6 [ 91.150444][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 91.169071][ T30] audit: type=1400 audit(1742137262.190:411): avc: denied { create } for pid=6383 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.221514][ T30] audit: type=1400 audit(1742137262.190:412): avc: denied { setopt } for pid=6383 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.240798][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.318813][ T10] keyspan 1-1:0.133: device disconnected [ 91.729144][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 91.889594][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.899268][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 91.904721][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.073597][ T974] usb 4-1: USB disconnect, device number 12 [ 92.085837][ T26] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 92.100190][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.128557][ T26] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.143544][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.169312][ T26] usb 3-1: Product: syz [ 92.177909][ T26] usb 3-1: Manufacturer: syz [ 92.196701][ T26] usb 3-1: SerialNumber: syz [ 92.213842][ T26] usb 3-1: config 0 descriptor?? [ 92.235714][ T26] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.260647][ T6405] ======================================================= [ 92.260647][ T6405] WARNING: The mand mount option has been deprecated and [ 92.260647][ T6405] and is ignored by this kernel. Remove the mand [ 92.260647][ T6405] option from the mount to silence this warning. [ 92.260647][ T6405] ======================================================= [ 92.382463][ T26] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 92.448890][ T6405] overlayfs: failed to set uuid (32/file1, err=-1); falling back to uuid=null. [ 92.472791][ T6405] overlayfs: failed to verify upper root origin [ 92.718693][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 92.733119][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.999290][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.379287][ T26] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 93.400783][ T26] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 94.313276][ T6438] SELinux: Context system_u:object_r:dri_device_t:s0 is not valid (left unmapped). [ 94.329623][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 94.329638][ T30] audit: type=1400 audit(1742137265.370:417): avc: denied { read write } for pid=6439 comm="syz.0.152" name="sg0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.372852][ T30] audit: type=1400 audit(1742137265.380:418): avc: denied { relabelto } for pid=6437 comm="syz.1.151" name="34" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 94.517198][ T30] audit: type=1400 audit(1742137265.380:419): avc: denied { associate } for pid=6437 comm="syz.1.151" name="34" dev="tmpfs" ino=201 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dri_device_t:s0" [ 94.630507][ T6443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.666128][ T30] audit: type=1400 audit(1742137265.380:420): avc: denied { write } for pid=6437 comm="syz.1.151" name="34" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 94.749127][ T26] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 94.762134][ T30] audit: type=1400 audit(1742137265.380:421): avc: denied { add_name } for pid=6437 comm="syz.1.151" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 94.788808][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.795281][ T30] audit: type=1400 audit(1742137265.380:422): avc: denied { create } for pid=6437 comm="syz.1.151" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.824617][ T30] audit: type=1400 audit(1742137265.380:423): avc: denied { associate } for pid=6437 comm="syz.1.151" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.875365][ T30] audit: type=1400 audit(1742137265.380:424): avc: denied { read append open } for pid=6437 comm="syz.1.151" path="/34/blkio.bfq.io_wait_time_recursive" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.907482][ T30] audit: type=1400 audit(1742137265.380:425): avc: denied { map } for pid=6437 comm="syz.1.151" path="/34/blkio.bfq.io_wait_time_recursive" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.128012][ T6460] Invalid source name [ 95.134923][ T6460] program syz.4.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.300596][ T30] audit: type=1400 audit(1742137265.380:426): avc: denied { write } for pid=6437 comm="syz.1.151" path="/34/blkio.bfq.io_wait_time_recursive" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.635112][ T26] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 95.650313][ T26] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 95.667570][ T26] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 95.763105][ T26] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 95.778435][ T26] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 95.785615][ T26] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 95.820164][ T26] usb 3-1: USB disconnect, device number 8 [ 95.940009][ T6470] process 'syz.4.160' launched '/dev/fd/4' with NULL argv: empty string added [ 96.375389][ T5820] cgroup: fork rejected by pids controller in /syz3 [ 97.645370][ T4375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.244883][ T6515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.176'. [ 98.254386][ T4375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.412065][ T6521] validate_nla: 45 callbacks suppressed [ 98.412084][ T6521] netlink: 'syz.2.178': attribute type 4 has an invalid length. [ 98.427323][ T55] Bluetooth: hci4: unexpected event for opcode 0x043d [ 98.443226][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.455880][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.476516][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.483713][ T4375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.509577][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.529979][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.538616][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.559258][ T5818] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 98.590405][ T4375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.741351][ T5818] usb 2-1: not running at top speed; connect to a high speed hub [ 98.770635][ T5818] usb 2-1: config 7 interface 0 has no altsetting 0 [ 98.789207][ T5818] usb 2-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 98.803563][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.811907][ T5818] usb 2-1: Product: syz [ 98.816157][ T5818] usb 2-1: Manufacturer: syz [ 98.821408][ T5818] usb 2-1: SerialNumber: syz [ 98.883535][ T4375] bridge_slave_1: left allmulticast mode [ 98.901486][ T4375] bridge_slave_1: left promiscuous mode [ 98.918754][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.970554][ T4375] bridge_slave_0: left allmulticast mode [ 98.976235][ T4375] bridge_slave_0: left promiscuous mode [ 98.994281][ T6539] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 99.005580][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.039865][ T5818] usb 2-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 99.050681][ T5818] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 99.076431][ T5818] usb 2-1: USB disconnect, device number 12 [ 99.179182][ T5914] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.329245][ T5914] usb 5-1: device descriptor read/64, error -71 [ 99.719686][ T5914] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.756522][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 99.756533][ T30] audit: type=1400 audit(1742137270.790:468): avc: denied { remove_name } for pid=6555 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2593 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.785987][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.810026][ T30] audit: type=1400 audit(1742137270.830:469): avc: denied { unlink } for pid=6555 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2593 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.832962][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.859057][ T5914] usb 5-1: device descriptor read/64, error -71 [ 99.956247][ T30] audit: type=1400 audit(1742137270.980:470): avc: denied { connect } for pid=6560 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.969396][ T5914] usb usb5-port1: attempt power cycle [ 100.118708][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.133167][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.146343][ T4375] bond0 (unregistering): Released all slaves [ 100.161907][ T6518] chnl_net:caif_netlink_parms(): no params data found [ 100.187791][ T6551] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 100.209348][ T6551] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 100.227447][ T6551] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 100.237090][ T6551] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 100.245820][ T6551] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 100.257547][ T6551] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 100.265530][ T6551] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 100.273621][ T6551] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 100.281568][ T6551] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 100.360397][ T5914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.405918][ T5914] usb 5-1: device descriptor read/8, error -71 [ 100.614468][ T5822] Bluetooth: hci1: command tx timeout [ 100.739264][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.859801][ T5914] usb 5-1: device descriptor read/8, error -71 [ 100.895073][ T30] audit: type=1400 audit(1742137271.930:471): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.961364][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.971504][ T5914] usb usb5-port1: unable to enumerate USB device [ 100.984897][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.004899][ T6518] bridge_slave_0: entered allmulticast mode [ 101.030287][ T6518] bridge_slave_0: entered promiscuous mode [ 101.044305][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.053695][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.061454][ T6518] bridge_slave_1: entered allmulticast mode [ 101.068514][ T6518] bridge_slave_1: entered promiscuous mode [ 101.355594][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.496576][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.811607][ T6518] team0: Port device team_slave_0 added [ 101.851979][ T4375] hsr_slave_0: left promiscuous mode [ 101.886367][ T4375] hsr_slave_1: left promiscuous mode [ 101.919534][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.937225][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.983814][ T6601] overlayfs: failed to resolve './file0': -2 [ 101.994051][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.030567][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.105801][ T4375] veth1_macvtap: left promiscuous mode [ 102.130494][ T4375] veth0_macvtap: left promiscuous mode [ 102.136091][ T4375] veth1_vlan: left promiscuous mode [ 102.163412][ T4375] veth0_vlan: left promiscuous mode [ 102.310035][ T30] audit: type=1400 audit(1742137273.350:472): avc: denied { setopt } for pid=6607 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.549166][ T5914] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.627699][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.644727][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.681586][ T5833] Bluetooth: hci1: command tx timeout [ 102.695817][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.703592][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.712239][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.719550][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.290224][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 103.313215][ T5914] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.321345][ T5914] usb 5-1: config 0 has no interface number 0 [ 103.327627][ T5914] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.346398][ T5914] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.424979][ T5914] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 103.434612][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.446379][ T5914] usb 5-1: config 0 descriptor?? [ 104.295031][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 104.346973][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 104.428855][ T5914] uclogic 0003:28BD:0094.0001: pen parameters not found [ 104.438208][ T5914] uclogic 0003:28BD:0094.0001: interface is invalid, ignoring [ 104.508295][ T5914] usb 5-1: USB disconnect, device number 6 [ 104.761221][ T55] Bluetooth: hci1: command tx timeout [ 105.340023][ T55] Bluetooth: hci2: command tx timeout [ 105.427863][ T6518] team0: Port device team_slave_1 added [ 105.587080][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.602852][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.629974][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.667340][ T30] audit: type=1400 audit(1742137276.700:473): avc: denied { ioctl } for pid=6628 comm="syz.4.202" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.267396][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.307833][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.368357][ T6638] FAULT_INJECTION: forcing a failure. [ 106.368357][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 106.394373][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.417632][ T6638] CPU: 1 UID: 0 PID: 6638 Comm: syz.4.205 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 106.417653][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.417662][ T6638] Call Trace: [ 106.417667][ T6638] [ 106.417673][ T6638] dump_stack_lvl+0x16c/0x1f0 [ 106.417699][ T6638] should_fail_ex+0x50a/0x650 [ 106.417726][ T6638] should_failslab+0xc2/0x120 [ 106.417745][ T6638] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 106.417761][ T6638] ? skb_clone+0x190/0x3f0 [ 106.417785][ T6638] skb_clone+0x190/0x3f0 [ 106.417807][ T6638] netlink_deliver_tap+0xabd/0xd30 [ 106.417831][ T6638] netlink_unicast+0x5e1/0x7f0 [ 106.417854][ T6638] ? __pfx_netlink_unicast+0x10/0x10 [ 106.417880][ T6638] netlink_sendmsg+0x8b8/0xd70 [ 106.417904][ T6638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.417930][ T6638] ____sys_sendmsg+0xaaf/0xc90 [ 106.417948][ T6638] ? copy_msghdr_from_user+0x10b/0x160 [ 106.417968][ T6638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.417994][ T6638] ___sys_sendmsg+0x135/0x1e0 [ 106.418015][ T6638] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.418055][ T6638] ? __pfx_lock_release+0x10/0x10 [ 106.418076][ T6638] ? trace_lock_acquire+0x14e/0x1f0 [ 106.418100][ T6638] ? __fget_files+0x206/0x3a0 [ 106.418121][ T6638] __sys_sendmsg+0x16e/0x220 [ 106.418145][ T6638] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.418181][ T6638] do_syscall_64+0xcd/0x250 [ 106.418203][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.418225][ T6638] RIP: 0033:0x7fe93938d169 [ 106.418238][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.418251][ T6638] RSP: 002b:00007fe93a214038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.418266][ T6638] RAX: ffffffffffffffda RBX: 00007fe9395a5fa0 RCX: 00007fe93938d169 [ 106.418275][ T6638] RDX: 0000000000000000 RSI: 00004000000016c0 RDI: 0000000000000003 [ 106.418284][ T6638] RBP: 00007fe93a214090 R08: 0000000000000000 R09: 0000000000000000 [ 106.418293][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.418301][ T6638] R13: 0000000000000000 R14: 00007fe9395a5fa0 R15: 00007ffc6386c928 [ 106.418321][ T6638] [ 106.479086][ T5914] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.656704][ T30] audit: type=1400 audit(1742137277.690:474): avc: denied { bind } for pid=6642 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.688205][ T30] audit: type=1400 audit(1742137277.690:475): avc: denied { name_bind } for pid=6642 comm="syz.4.206" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 106.716951][ T30] audit: type=1400 audit(1742137277.720:476): avc: denied { node_bind } for pid=6642 comm="syz.4.206" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 106.768207][ T30] audit: type=1400 audit(1742137277.720:477): avc: denied { listen } for pid=6642 comm="syz.4.206" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.803456][ T30] audit: type=1400 audit(1742137277.720:478): avc: denied { write } for pid=6642 comm="syz.4.206" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.839872][ T55] Bluetooth: hci1: command tx timeout [ 106.980112][ T6518] hsr_slave_0: entered promiscuous mode [ 106.990898][ T6518] hsr_slave_1: entered promiscuous mode [ 107.013123][ T6643] CĂ: renamed from team_slave_0 (while UP) [ 107.032593][ T6643] validate_nla: 44 callbacks suppressed [ 107.032608][ T6643] netlink: 'syz.4.206': attribute type 3 has an invalid length. [ 107.070712][ T6643] netlink: 152 bytes leftover after parsing attributes in process `syz.4.206'. [ 107.082404][ T30] audit: type=1400 audit(1742137277.720:479): avc: denied { connect } for pid=6642 comm="syz.4.206" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.103041][ T30] audit: type=1400 audit(1742137277.720:480): avc: denied { name_connect } for pid=6642 comm="syz.4.206" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 107.125770][ T6643] A link change request failed with some changes committed already. Interface CĂ may have been left with an inconsistent configuration, please check. [ 107.145143][ T30] audit: type=1400 audit(1742137277.980:481): avc: denied { read } for pid=6639 comm="syz.2.203" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.173788][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 107.188534][ T5914] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 107.199775][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.207863][ T30] audit: type=1400 audit(1742137277.980:482): avc: denied { open } for pid=6639 comm="syz.2.203" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.232864][ T5914] usb 1-1: Product: syz [ 107.237515][ T5914] usb 1-1: Manufacturer: syz [ 107.242217][ T5914] usb 1-1: SerialNumber: syz [ 107.248807][ T5914] usb 1-1: config 0 descriptor?? [ 107.269204][ T5914] hub 1-1:0.0: bad descriptor, ignoring hub [ 107.285692][ T5914] hub 1-1:0.0: probe with driver hub failed with error -5 [ 107.363954][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 107.400006][ T55] Bluetooth: hci2: command tx timeout [ 107.494735][ T4375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.540315][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 107.596226][ T4375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.619127][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 107.706809][ T4375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.784333][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.796856][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.807151][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.814535][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.822100][ T6613] bridge_slave_0: entered allmulticast mode [ 107.828057][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.830084][ T6613] bridge_slave_0: entered promiscuous mode [ 107.849949][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.864445][ T4375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.866202][ T9] usb 5-1: config 0 descriptor?? [ 107.942514][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.953940][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.961272][ T6613] bridge_slave_1: entered allmulticast mode [ 107.968107][ T6613] bridge_slave_1: entered promiscuous mode [ 107.998454][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.043418][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.094180][ T6613] team0: Port device team_slave_0 added [ 108.101598][ T6613] team0: Port device team_slave_1 added [ 108.162095][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.172149][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.199794][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.223579][ T4375] bridge_slave_1: left allmulticast mode [ 108.229491][ T4375] bridge_slave_1: left promiscuous mode [ 108.235229][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.244764][ T4375] bridge_slave_0: left allmulticast mode [ 108.251686][ T4375] bridge_slave_0: left promiscuous mode [ 108.257410][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.290110][ T5818] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.454541][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.465128][ T5818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.475142][ T5818] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.484485][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.492973][ T5818] usb 3-1: SerialNumber: syz [ 108.515289][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.527075][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.537950][ T4375] bond0 (unregistering): Released all slaves [ 108.547459][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.558285][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.619177][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.709873][ T26] usb 1-1: USB disconnect, device number 7 [ 108.725320][ T6613] hsr_slave_0: entered promiscuous mode [ 108.726864][ T5818] usb 3-1: skipping empty audio interface (v1) [ 108.731651][ T6613] hsr_slave_1: entered promiscuous mode [ 108.746612][ T6613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.768660][ T6613] Cannot create hsr debugfs directory [ 108.784906][ T5818] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.804288][ T6518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.815558][ T6518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.819932][ T5818] usb 3-1: USB disconnect, device number 9 [ 108.866881][ T6518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.040176][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.047755][ T6692] capability: warning: `syz.0.210' uses deprecated v2 capabilities in a way that may be insecure [ 109.316788][ T6518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.397221][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 109.465949][ T4375] hsr_slave_0: left promiscuous mode [ 109.475012][ T4375] hsr_slave_1: left promiscuous mode [ 109.480448][ T55] Bluetooth: hci2: command tx timeout [ 109.489780][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.497195][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.505882][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.513338][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.525958][ T4375] veth1_macvtap: left promiscuous mode [ 109.533031][ T4375] veth0_macvtap: left promiscuous mode [ 109.538534][ T4375] veth1_vlan: left promiscuous mode [ 109.543954][ T4375] veth0_vlan: left promiscuous mode [ 109.660393][ T5818] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 109.804523][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 109.823706][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.839761][ T5818] usb 3-1: config 0 has no interfaces? [ 109.851814][ T5818] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 109.861107][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.872517][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 109.882024][ T5818] usb 3-1: config 0 descriptor?? [ 110.241187][ T6613] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.263368][ T6613] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.299089][ T6613] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.317473][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.335338][ T6613] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.364944][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.390211][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.397377][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.413428][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.420534][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.459059][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.520218][ T5914] usb 5-1: USB disconnect, device number 7 [ 110.557178][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.602562][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.629274][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 110.642433][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.646962][ T6716] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 110.649548][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.670147][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.674654][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 110.677208][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.698797][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 110.718599][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.740729][ T9] usb 1-1: config 0 descriptor?? [ 110.867319][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.060232][ T6728] xt_policy: output policy not valid in PREROUTING and INPUT [ 111.061958][ T6518] veth0_vlan: entered promiscuous mode [ 111.286797][ T6518] veth1_vlan: entered promiscuous mode [ 111.313336][ T9] mcp2200 0003:04D8:00DF.0002: USB HID v1.ff Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 111.375135][ T6518] veth0_macvtap: entered promiscuous mode [ 111.384268][ T6518] veth1_macvtap: entered promiscuous mode [ 111.417337][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.423553][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.443728][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.491559][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.516617][ T26] usb 1-1: USB disconnect, device number 8 [ 111.542705][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.559032][ T55] Bluetooth: hci2: command tx timeout [ 111.572626][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.601694][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.645448][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.674254][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.690150][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.705082][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.715415][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.727675][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.738676][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.756316][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.770601][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 111.770613][ T30] audit: type=1400 audit(1742137282.810:491): avc: granted { setsecparam } for pid=6747 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 111.805709][ T6518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.842945][ T6518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.870132][ T6518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.878866][ T6518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.887871][ T30] audit: type=1400 audit(1742137282.810:492): avc: granted { setsecparam } for pid=6747 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 111.948363][ T30] audit: type=1400 audit(1742137282.810:493): avc: granted { setsecparam } for pid=6747 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.042777][ T30] audit: type=1400 audit(1742137282.950:494): avc: denied { setopt } for pid=6756 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.124992][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.126563][ T30] audit: type=1400 audit(1742137282.950:495): avc: denied { mounton } for pid=6756 comm="syz.4.219" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 112.178185][ T30] audit: type=1400 audit(1742137282.980:496): avc: denied { mount } for pid=6756 comm="syz.4.219" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 112.185831][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.251421][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.269214][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.300905][ T30] audit: type=1400 audit(1742137283.330:497): avc: denied { mounton } for pid=6518 comm="syz-executor" path="/root/syzkaller.OZRuGX/syz-tmp" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 112.350972][ T6613] veth0_vlan: entered promiscuous mode [ 112.392699][ T6613] veth1_vlan: entered promiscuous mode [ 112.413924][ T30] audit: type=1400 audit(1742137283.330:498): avc: denied { mount } for pid=6518 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.428523][ T6613] veth0_macvtap: entered promiscuous mode [ 112.448275][ T9] usb 3-1: USB disconnect, device number 10 [ 112.497065][ T6613] veth1_macvtap: entered promiscuous mode [ 112.542837][ T30] audit: type=1400 audit(1742137283.370:499): avc: denied { mount } for pid=6518 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.554010][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.649009][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.653838][ T30] audit: type=1400 audit(1742137283.370:500): avc: denied { mounton } for pid=6518 comm="syz-executor" path="/root/syzkaller.OZRuGX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 112.669828][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.731659][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.745483][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.757916][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.787587][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.855101][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.871795][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.885137][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.905449][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.928479][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.959154][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.979437][ T6613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.999004][ T6613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.019676][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.030426][ T5914] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 113.057312][ T6613] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.079955][ T6613] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.088673][ T6613] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.119121][ T6613] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.187939][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.210412][ T5914] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 113.276309][ T5914] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 113.287488][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.352179][ T5914] usb 1-1: config 4 has no interface number 0 [ 113.358306][ T5914] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.372934][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.449109][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.498638][ T5914] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 113.507930][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.538182][ T5914] usb 1-1: Product: syz [ 113.548316][ T5914] usb 1-1: Manufacturer: syz [ 113.558420][ T5914] usb 1-1: SerialNumber: syz [ 114.279210][ T5914] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 114.311452][ T5914] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 114.329574][ T5914] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 114.336851][ T5914] usb 1-1: media controller created [ 114.362385][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.454088][ T5914] DVB: Unable to find symbol dib7000p_attach() [ 114.473131][ T5914] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 114.669151][ T5914] rc_core: IR keymap rc-dib0700-rc5 not found [ 114.685586][ T5914] Registered IR keymap rc-empty [ 114.723542][ T5914] dvb-usb: could not initialize remote control. [ 114.751550][ T5914] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 115.487395][ T5914] usb 1-1: USB disconnect, device number 9 [ 115.557204][ T5914] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 115.557241][ T6865] netlink: 44 bytes leftover after parsing attributes in process `syz.5.231'. [ 115.749670][ T5818] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 116.110823][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.257479][ T6892] lo speed is unknown, defaulting to 1000 [ 116.263718][ T6892] lo speed is unknown, defaulting to 1000 [ 116.269886][ T6892] lo speed is unknown, defaulting to 1000 [ 116.281362][ T6892] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.297671][ T6892] lo speed is unknown, defaulting to 1000 [ 116.304398][ T6892] lo speed is unknown, defaulting to 1000 [ 116.310995][ T6892] lo speed is unknown, defaulting to 1000 [ 116.317524][ T6892] lo speed is unknown, defaulting to 1000 [ 116.323992][ T6892] lo speed is unknown, defaulting to 1000 [ 116.412114][ T5818] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 116.425540][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.435760][ T5818] usb 3-1: Product: syz [ 116.440938][ T5818] usb 3-1: Manufacturer: syz [ 116.445637][ T5818] usb 3-1: SerialNumber: syz [ 116.462565][ T5818] usb 3-1: config 0 descriptor?? [ 116.484748][ T5818] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 116.683595][ T5818] usb 3-1: USB disconnect, device number 11 [ 117.288904][ T5914] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.707862][ T6928] overlayfs: failed to resolve './file1': -2 [ 117.765923][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 117.765939][ T30] audit: type=1400 audit(1742137288.740:514): avc: denied { mount } for pid=6914 comm="syz.4.243" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 117.859055][ T974] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 117.936239][ T30] audit: type=1400 audit(1742137288.960:515): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 117.939120][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 118.012981][ T5914] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.033443][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.049995][ T5914] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 118.059235][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 118.091794][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.110092][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 118.130651][ T974] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 118.169077][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.179861][ T974] usb 3-1: Product: syz [ 118.180918][ T5914] usb 1-1: config 0 descriptor?? [ 118.192480][ T974] usb 3-1: Manufacturer: syz [ 118.219089][ T10] usb 6-1: device descriptor read/64, error -71 [ 118.223840][ T974] usb 3-1: SerialNumber: syz [ 118.276609][ T974] usb 3-1: config 0 descriptor?? [ 118.302746][ T974] hub 3-1:0.0: bad descriptor, ignoring hub [ 118.319107][ T974] hub 3-1:0.0: probe with driver hub failed with error -5 [ 118.479642][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 118.542337][ T30] audit: type=1400 audit(1742137289.570:516): avc: denied { ioctl } for pid=6922 comm="syz.2.245" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 118.624046][ T10] usb 6-1: device descriptor read/64, error -71 [ 118.725819][ T5818] usb 3-1: USB disconnect, device number 12 [ 118.942785][ T6955] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 118.951503][ T6955] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 118.960063][ T6955] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 119.258685][ T30] audit: type=1400 audit(1742137289.770:517): avc: denied { map } for pid=6952 comm="syz.3.247" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.291670][ T5914] steelseries 0003:1038:12B6.0003: item fetching failed at offset 2/5 [ 119.300409][ T10] usb usb6-port1: attempt power cycle [ 119.307136][ T5914] steelseries 0003:1038:12B6.0003: probe with driver steelseries failed with error -22 [ 119.321406][ T30] audit: type=1400 audit(1742137289.770:518): avc: denied { execute } for pid=6952 comm="syz.3.247" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.557440][ T6967] lo speed is unknown, defaulting to 1000 [ 119.617804][ T6970] netlink: 'syz.3.249': attribute type 2 has an invalid length. [ 119.659153][ T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 119.709198][ T5818] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.726510][ T10] usb 6-1: device descriptor read/8, error -71 [ 119.840423][ T30] audit: type=1400 audit(1742137290.860:519): avc: denied { create } for pid=6966 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.942737][ T5818] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 120.025842][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.142762][ T30] audit: type=1400 audit(1742137290.870:520): avc: denied { read } for pid=6966 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.206233][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.252904][ T6984] 9pnet_fd: Insufficient options for proto=fd [ 120.262989][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.275690][ T30] audit: type=1400 audit(1742137290.940:521): avc: denied { create } for pid=6978 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 120.299395][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.303560][ T6987] FAULT_INJECTION: forcing a failure. [ 120.303560][ T6987] name failslab, interval 1, probability 0, space 0, times 0 [ 120.312616][ T5818] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.335632][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.344446][ T6987] CPU: 1 UID: 0 PID: 6987 Comm: syz.2.253 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 120.344468][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.344479][ T6987] Call Trace: [ 120.344484][ T6987] [ 120.344490][ T6987] dump_stack_lvl+0x16c/0x1f0 [ 120.344516][ T6987] should_fail_ex+0x50a/0x650 [ 120.344541][ T6987] ? fs_reclaim_acquire+0xae/0x150 [ 120.344564][ T6987] ? tomoyo_encode2+0x100/0x3e0 [ 120.344583][ T6987] should_failslab+0xc2/0x120 [ 120.344601][ T6987] __kmalloc_noprof+0xcb/0x510 [ 120.344616][ T6987] ? d_absolute_path+0x137/0x1b0 [ 120.344632][ T6987] ? rcu_is_watching+0x12/0xc0 [ 120.344652][ T6987] tomoyo_encode2+0x100/0x3e0 [ 120.344677][ T6987] tomoyo_encode+0x29/0x50 [ 120.344695][ T6987] tomoyo_realpath_from_path+0x19d/0x720 [ 120.344721][ T6987] tomoyo_path_number_perm+0x248/0x590 [ 120.344737][ T6987] ? tomoyo_path_number_perm+0x235/0x590 [ 120.344756][ T6987] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.344794][ T6987] ? __pfx_lock_release+0x10/0x10 [ 120.344813][ T6987] ? trace_lock_acquire+0x14e/0x1f0 [ 120.344832][ T6987] ? lock_acquire+0x2f/0xb0 [ 120.344850][ T6987] ? __fget_files+0x40/0x3a0 [ 120.344867][ T6987] ? __fget_files+0x206/0x3a0 [ 120.344884][ T6987] security_file_ioctl+0x9b/0x240 [ 120.344906][ T6987] __x64_sys_ioctl+0xb7/0x200 [ 120.344935][ T6987] do_syscall_64+0xcd/0x250 [ 120.344956][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.344975][ T6987] RIP: 0033:0x7febf1b8d169 [ 120.344988][ T6987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.345001][ T6987] RSP: 002b:00007febf2a12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.345016][ T6987] RAX: ffffffffffffffda RBX: 00007febf1da5fa0 RCX: 00007febf1b8d169 [ 120.345025][ T6987] RDX: 0000400000000040 RSI: 0000000000003b83 RDI: 0000000000000003 [ 120.345034][ T6987] RBP: 00007febf2a12090 R08: 0000000000000000 R09: 0000000000000000 [ 120.345042][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.345050][ T6987] R13: 0000000000000000 R14: 00007febf1da5fa0 R15: 00007fff7eb07ca8 [ 120.345068][ T6987] [ 120.345083][ T6987] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.580511][ T5818] usb 5-1: config 0 descriptor?? [ 120.619747][ T6965] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 120.708755][ T30] audit: type=1400 audit(1742137291.740:522): avc: denied { append } for pid=6988 comm="syz.3.254" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.082727][ T5818] usbhid 5-1:0.0: can't add hid device: -71 [ 121.088835][ T5818] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 121.122853][ T5818] usb 5-1: USB disconnect, device number 8 [ 121.197778][ T6997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.279095][ T5914] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 121.318758][ T30] audit: type=1400 audit(1742137292.330:523): avc: granted { setsecparam } for pid=7012 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 121.386542][ T7017] ipip0: entered promiscuous mode [ 121.447002][ T5914] usb 4-1: not running at top speed; connect to a high speed hub [ 121.457803][ T5914] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 121.466990][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.478350][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.492315][ T5914] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.501856][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.511579][ T5914] usb 4-1: Product: syz [ 121.515760][ T5914] usb 4-1: Manufacturer: syz [ 121.520502][ T5914] usb 4-1: SerialNumber: syz [ 121.692025][ T5879] usb 1-1: USB disconnect, device number 10 [ 121.772482][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.817048][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.870479][ T7038] fuse: Unknown parameter '' [ 121.901549][ T5914] usb 4-1: 0:2 : does not exist [ 121.934555][ T5914] usb 4-1: USB disconnect, device number 13 [ 121.988581][ T7038] input: syz1 as /devices/virtual/input/input10 [ 122.066263][ T7044] netlink: 112 bytes leftover after parsing attributes in process `syz.5.263'. [ 122.269168][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.280591][ T55] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 122.290184][ T55] Bluetooth: hci3: Injecting HCI hardware error event [ 122.298369][ T55] Bluetooth: hci3: hardware error 0x00 [ 122.379185][ T5879] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 122.439326][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 122.472838][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 122.531935][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.633472][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 122.687065][ T7055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44032 sclass=netlink_route_socket pid=7055 comm=syz.2.264 [ 122.700509][ T7055] netlink: 148 bytes leftover after parsing attributes in process `syz.2.264'. [ 122.742262][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 122.761697][ T5879] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 122.777969][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.817599][ T10] usb 1-1: Product: syz [ 122.822901][ T5879] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 123.193117][ T10] usb 1-1: Manufacturer: syz [ 123.197725][ T10] usb 1-1: SerialNumber: syz [ 123.209204][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.404723][ T10] usb 1-1: config 0 descriptor?? [ 123.418089][ T5879] usb 6-1: Product: syz [ 123.434491][ T5879] usb 6-1: Manufacturer: syz [ 123.453884][ T5879] usb 6-1: SerialNumber: syz [ 123.464637][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.495369][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 123.514207][ T5879] usb 6-1: config 0 descriptor?? [ 123.536761][ T7044] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 123.549595][ T5879] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.457047][ T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 124.560277][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 124.560292][ T30] audit: type=1400 audit(1742137295.600:528): avc: granted { setsecparam } for pid=7077 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 124.592790][ T30] audit: type=1400 audit(1742137295.620:529): avc: granted { setsecparam } for pid=7077 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 124.618817][ T30] audit: type=1400 audit(1742137295.630:530): avc: granted { setsecparam } for pid=7077 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 124.647252][ T10] em28xx 1-1:0.0: chip ID is em2874 [ 124.653463][ T5879] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 124.663401][ T26] usb 6-1: USB disconnect, device number 6 [ 124.799070][ T5879] usb 3-1: device descriptor read/64, error -71 [ 125.521441][ T7092] gfs2: gfs2 mount does not exist [ 125.531408][ T5879] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 125.553494][ T10] usb 1-1: USB disconnect, device number 11 [ 125.560421][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 125.597966][ T10] em28xx 1-1:0.0: Freeing device [ 125.700371][ T5879] usb 3-1: device descriptor read/64, error -71 [ 125.876671][ T5879] usb usb3-port1: attempt power cycle [ 126.451714][ T5879] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 126.486441][ T30] audit: type=1400 audit(1742137297.520:531): avc: denied { sys_chroot } for pid=7113 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 126.520816][ T5879] usb 3-1: device descriptor read/8, error -71 [ 126.543806][ T30] audit: type=1400 audit(1742137297.520:532): avc: denied { setgid } for pid=7113 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 126.566025][ T30] audit: type=1400 audit(1742137297.520:533): avc: denied { setrlimit } for pid=7113 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 126.802410][ T7119] kvm: pic: single mode not supported [ 126.802485][ T7119] kvm: pic: level sensitive irq not supported [ 127.435277][ T5879] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 127.457706][ T30] audit: type=1400 audit(1742137298.060:534): avc: denied { write } for pid=7117 comm="syz.3.275" path="socket:[14216]" dev="sockfs" ino=14216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.480755][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.503642][ T7126] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 127.951167][ T5879] usb 3-1: device not accepting address 16, error -71 [ 127.969639][ T5879] usb usb3-port1: unable to enumerate USB device [ 127.984335][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 128.025816][ T30] audit: type=1400 audit(1742137299.020:535): avc: denied { nlmsg_read } for pid=7135 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.128012][ T30] audit: type=1400 audit(1742137299.160:536): avc: denied { setopt } for pid=7115 comm="syz.5.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.153152][ T7137] lo: entered promiscuous mode [ 128.604747][ T7145] lo speed is unknown, defaulting to 1000 [ 128.625400][ T7135] lo: left promiscuous mode [ 128.789138][ T30] audit: type=1400 audit(1742137299.820:537): avc: granted { setsecparam } for pid=7152 comm="syz.5.280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 128.969055][ T26] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 128.996527][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.283'. [ 129.144779][ T26] usb 5-1: not running at top speed; connect to a high speed hub [ 129.158471][ T26] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 129.167962][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.180226][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.194092][ T26] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.203687][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.212012][ T26] usb 5-1: Product: syz [ 129.216327][ T26] usb 5-1: Manufacturer: syz [ 129.221323][ T26] usb 5-1: SerialNumber: syz [ 129.302682][ T7178] netlink: 48 bytes leftover after parsing attributes in process `syz.5.288'. [ 129.336106][ T974] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 129.569518][ T7183] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.577496][ T7183] overlayfs: failed to set xattr on upper [ 129.578152][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.583985][ T7183] overlayfs: ...falling back to redirect_dir=nofollow. [ 129.595158][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.600873][ T7183] overlayfs: ...falling back to uuid=null. [ 129.627111][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 129.627125][ T30] audit: type=1400 audit(1742137300.660:543): avc: denied { bind } for pid=7182 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.677135][ T974] usb 1-1: not running at top speed; connect to a high speed hub [ 129.687467][ T30] audit: type=1400 audit(1742137300.710:544): avc: denied { listen } for pid=7182 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.692736][ T26] usb 5-1: 0:2 : does not exist [ 129.728624][ T974] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 129.738375][ T974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.803332][ T974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.881895][ T26] usb 5-1: USB disconnect, device number 9 [ 129.895493][ T974] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.939110][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.951216][ T974] usb 1-1: Product: syz [ 129.956246][ T974] usb 1-1: Manufacturer: syz [ 129.962391][ T974] usb 1-1: SerialNumber: syz [ 130.120269][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.291686][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.587645][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.916806][ T974] usb 1-1: 0:2 : does not exist [ 131.000260][ T974] usb 1-1: USB disconnect, device number 12 [ 131.239646][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.289047][ T30] audit: type=1400 audit(1742137302.310:545): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.649102][ T5914] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 131.656813][ T5879] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 132.230973][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.253726][ T5914] usb 4-1: not running at top speed; connect to a high speed hub [ 132.273492][ T5879] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.295444][ T5914] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 132.317596][ T5879] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 132.327986][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.464412][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.483388][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.683880][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.707052][ T5879] usb 3-1: config 0 descriptor?? [ 132.746021][ T5914] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.775521][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.786640][ T5914] usb 4-1: Product: syz [ 132.794094][ T5914] usb 4-1: Manufacturer: syz [ 132.801755][ T5914] usb 4-1: SerialNumber: syz [ 133.316245][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.344882][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.646746][ T55] BUG: sleeping function called from invalid context at net/core/sock.c:3664 [ 133.655755][ T55] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 55, name: kworker/u9:0 [ 133.664844][ T55] preempt_count: 1, expected: 0 [ 133.669731][ T55] RCU nest depth: 0, expected: 0 [ 133.674653][ T55] 6 locks held by kworker/u9:0/55: [ 133.679767][ T55] #0: ffff88802ad91948 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 133.690258][ T55] #1: ffffc9000120fd18 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 133.701672][ T55] #2: ffff88807ea74078 (&hdev->lock){+.+.}-{4:4}, at: hci_sync_conn_complete_evt+0x118/0x9f0 [ 133.712099][ T55] #3: ffffffff90165608 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_sync_conn_complete_evt+0x32d/0x9f0 [ 133.722973][ T55] #4: ffff88805c2bdc20 (&conn->lock#3){+.+.}-{3:3}, at: sco_connect_cfm+0x2d6/0xd80 [ 133.732503][ T55] #5: ffff88807f4ca258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x3f3/0xd80 [ 133.743755][ T55] Preemption disabled at: [ 133.743763][ T55] [<0000000000000000>] 0x0 [ 133.752569][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 133.752583][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.752591][ T55] Workqueue: hci4 hci_rx_work [ 133.752606][ T55] Call Trace: [ 133.752610][ T55] [ 133.752615][ T55] dump_stack_lvl+0x16c/0x1f0 [ 133.752631][ T55] __might_resched+0x3c0/0x5e0 [ 133.752648][ T55] ? __pfx_lock_release+0x10/0x10 [ 133.752663][ T55] ? __pfx___might_resched+0x10/0x10 [ 133.752679][ T55] ? lock_acquire+0x2f/0xb0 [ 133.752693][ T55] ? sco_connect_cfm+0x3f3/0xd80 [ 133.752711][ T55] lock_sock_nested+0x4b/0xf0 [ 133.752726][ T55] ? sco_connect_cfm+0x3f3/0xd80 [ 133.752741][ T55] sco_connect_cfm+0x3f3/0xd80 [ 133.752757][ T55] ? __pfx_sco_connect_cfm+0x10/0x10 [ 133.752776][ T55] ? __pfx_sco_connect_cfm+0x10/0x10 [ 133.752797][ T55] hci_sync_conn_complete_evt+0x398/0x9f0 [ 133.752814][ T55] hci_event_packet+0x9eb/0x1180 [ 133.752831][ T55] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 133.752847][ T55] ? __pfx_hci_event_packet+0x10/0x10 [ 133.752862][ T55] ? mark_held_locks+0x9f/0xe0 [ 133.752878][ T55] ? kcov_remote_start+0x3cf/0x6e0 [ 133.752895][ T55] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.752912][ T55] hci_rx_work+0x2c5/0x16b0 [ 133.752922][ T55] ? process_one_work+0x921/0x1ba0 [ 133.752939][ T55] process_one_work+0x9c5/0x1ba0 [ 133.752957][ T55] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 133.752972][ T55] ? __pfx_process_one_work+0x10/0x10 [ 133.752990][ T55] ? assign_work+0x1a0/0x250 [ 133.753004][ T55] worker_thread+0x6c8/0xf00 [ 133.753022][ T55] ? __pfx_worker_thread+0x10/0x10 [ 133.753037][ T55] kthread+0x3af/0x750 [ 133.753050][ T55] ? __pfx_kthread+0x10/0x10 [ 133.753061][ T55] ? lock_acquire+0x2f/0xb0 [ 133.753077][ T55] ? __pfx_kthread+0x10/0x10 [ 133.753090][ T55] ret_from_fork+0x45/0x80 [ 133.753104][ T55] ? __pfx_kthread+0x10/0x10 [ 133.753117][ T55] ret_from_fork_asm+0x1a/0x30 [ 133.753136][ T55] [ 133.954377][ T7208] [ 133.956698][ T7208] ====================================================== [ 133.963697][ T7208] WARNING: possible circular locking dependency detected [ 133.970683][ T7208] 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 Tainted: G W [ 133.979232][ T7208] ------------------------------------------------------ [ 133.986215][ T7208] syz.2.296/7208 is trying to acquire lock: [ 133.992072][ T7208] ffff88805c2bdc20 (&conn->lock#3){+.+.}-{3:3}, at: sco_chan_del+0x65/0x1b0 [ 134.000744][ T7208] [ 134.000744][ T7208] but task is already holding lock: [ 134.008075][ T7208] ffff88805d198258 (sk_lock-AF_BLUETOOTH){+.+.}-{0:0}, at: __sco_sock_close+0x15d/0x210 [ 134.017778][ T7208] [ 134.017778][ T7208] which lock already depends on the new lock. [ 134.017778][ T7208] [ 134.028159][ T7208] [ 134.028159][ T7208] the existing dependency chain (in reverse order) is: [ 134.037142][ T7208] [ 134.037142][ T7208] -> #2 (sk_lock-AF_BLUETOOTH){+.+.}-{0:0}: [ 134.045185][ T7208] lock_sock_nested+0x3a/0xf0 [ 134.050361][ T7208] bt_accept_dequeue+0x249/0x600 [ 134.055793][ T7208] __sco_sock_close+0x146/0x210 [ 134.061138][ T7208] sco_sock_release+0x6f/0x2d0 [ 134.066394][ T7208] __sock_release+0xb0/0x270 [ 134.071481][ T7208] sock_close+0x1c/0x30 [ 134.076141][ T7208] __fput+0x3ff/0xb70 [ 134.080628][ T7208] task_work_run+0x14e/0x250 [ 134.085710][ T7208] syscall_exit_to_user_mode+0x27b/0x2a0 [ 134.091847][ T7208] do_syscall_64+0xda/0x250 [ 134.096844][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.103230][ T7208] [ 134.103230][ T7208] -> #1 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 134.112316][ T7208] lock_sock_nested+0x3a/0xf0 [ 134.117486][ T7208] sco_connect_cfm+0x3f3/0xd80 [ 134.122744][ T7208] hci_sync_conn_complete_evt+0x398/0x9f0 [ 134.128963][ T7208] hci_event_packet+0x9eb/0x1180 [ 134.134404][ T7208] hci_rx_work+0x2c5/0x16b0 [ 134.139397][ T7208] process_one_work+0x9c5/0x1ba0 [ 134.144827][ T7208] worker_thread+0x6c8/0xf00 [ 134.149925][ T7208] kthread+0x3af/0x750 [ 134.154486][ T7208] ret_from_fork+0x45/0x80 [ 134.159397][ T7208] ret_from_fork_asm+0x1a/0x30 [ 134.164651][ T7208] [ 134.164651][ T7208] -> #0 (&conn->lock#3){+.+.}-{3:3}: [ 134.172090][ T7208] __lock_acquire+0x249e/0x3c40 [ 134.177434][ T7208] lock_acquire.part.0+0x11b/0x380 [ 134.183040][ T7208] _raw_spin_lock+0x2e/0x40 [ 134.188033][ T7208] sco_chan_del+0x65/0x1b0 [ 134.192943][ T7208] __sco_sock_close+0xab/0x210 [ 134.198201][ T7208] __sco_sock_close+0x16d/0x210 [ 134.203544][ T7208] sco_sock_release+0x6f/0x2d0 [ 134.208801][ T7208] __sock_release+0xb0/0x270 [ 134.213888][ T7208] sock_close+0x1c/0x30 [ 134.218538][ T7208] __fput+0x3ff/0xb70 [ 134.223012][ T7208] task_work_run+0x14e/0x250 [ 134.228096][ T7208] syscall_exit_to_user_mode+0x27b/0x2a0 [ 134.234223][ T7208] do_syscall_64+0xda/0x250 [ 134.239221][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.245616][ T7208] [ 134.245616][ T7208] other info that might help us debug this: [ 134.245616][ T7208] [ 134.255825][ T7208] Chain exists of: [ 134.255825][ T7208] &conn->lock#3 --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> sk_lock-AF_BLUETOOTH [ 134.255825][ T7208] [ 134.270562][ T7208] Possible unsafe locking scenario: [ 134.270562][ T7208] [ 134.277979][ T7208] CPU0 CPU1 [ 134.283313][ T7208] ---- ---- [ 134.288643][ T7208] lock(sk_lock-AF_BLUETOOTH); [ 134.293462][ T7208] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 134.301842][ T7208] lock(sk_lock-AF_BLUETOOTH); [ 134.309180][ T7208] lock(&conn->lock#3); [ 134.313406][ T7208] [ 134.313406][ T7208] *** DEADLOCK *** [ 134.313406][ T7208] [ 134.321517][ T7208] 3 locks held by syz.2.296/7208: [ 134.326507][ T7208] #0: ffff88805b9e8e08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 134.337003][ T7208] #1: ffff88807f4ca258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_sock_release+0x5f/0x2d0 [ 134.348098][ T7208] #2: ffff88805d198258 (sk_lock-AF_BLUETOOTH){+.+.}-{0:0}, at: __sco_sock_close+0x15d/0x210 [ 134.358237][ T7208] [ 134.358237][ T7208] stack backtrace: [ 134.364098][ T7208] CPU: 1 UID: 0 PID: 7208 Comm: syz.2.296 Tainted: G W 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 134.364113][ T7208] Tainted: [W]=WARN [ 134.364116][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.364121][ T7208] Call Trace: [ 134.364125][ T7208] [ 134.364128][ T7208] dump_stack_lvl+0x116/0x1f0 [ 134.364144][ T7208] print_circular_bug+0x490/0x760 [ 134.364159][ T7208] check_noncircular+0x31a/0x400 [ 134.364172][ T7208] ? __pfx_check_noncircular+0x10/0x10 [ 134.364186][ T7208] ? lockdep_lock+0xc6/0x200 [ 134.364196][ T7208] ? __pfx_lockdep_lock+0x10/0x10 [ 134.364207][ T7208] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 134.364219][ T7208] __lock_acquire+0x249e/0x3c40 [ 134.364234][ T7208] ? __pfx___lock_acquire+0x10/0x10 [ 134.364248][ T7208] ? __timer_delete+0xf6/0x1c0 [ 134.364262][ T7208] lock_acquire.part.0+0x11b/0x380 [ 134.364276][ T7208] ? sco_chan_del+0x65/0x1b0 [ 134.364289][ T7208] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 134.364303][ T7208] ? rcu_is_watching+0x12/0xc0 [ 134.364314][ T7208] ? trace_lock_acquire+0x14e/0x1f0 [ 134.364324][ T7208] ? __cancel_work+0x240/0x370 [ 134.364338][ T7208] ? sco_chan_del+0x65/0x1b0 [ 134.364351][ T7208] ? lock_acquire+0x2f/0xb0 [ 134.364364][ T7208] ? sco_chan_del+0x65/0x1b0 [ 134.364376][ T7208] _raw_spin_lock+0x2e/0x40 [ 134.364386][ T7208] ? sco_chan_del+0x65/0x1b0 [ 134.364399][ T7208] sco_chan_del+0x65/0x1b0 [ 134.364412][ T7208] __sco_sock_close+0xab/0x210 [ 134.364425][ T7208] ? sco_sock_clear_timer+0x4f/0xe0 [ 134.364438][ T7208] __sco_sock_close+0x16d/0x210 [ 134.364450][ T7208] ? sco_sock_clear_timer+0xc/0xe0 [ 134.364463][ T7208] sco_sock_release+0x6f/0x2d0 [ 134.364476][ T7208] __sock_release+0xb0/0x270 [ 134.364493][ T7208] ? __pfx_sock_close+0x10/0x10 [ 134.364507][ T7208] sock_close+0x1c/0x30 [ 134.364521][ T7208] __fput+0x3ff/0xb70 [ 134.364533][ T7208] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.364544][ T7208] task_work_run+0x14e/0x250 [ 134.364558][ T7208] ? __pfx_task_work_run+0x10/0x10 [ 134.364571][ T7208] ? __pfx___do_sys_close_range+0x10/0x10 [ 134.364583][ T7208] syscall_exit_to_user_mode+0x27b/0x2a0 [ 134.364596][ T7208] do_syscall_64+0xda/0x250 [ 134.364609][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.364624][ T7208] RIP: 0033:0x7febf1b8d169 [ 134.364633][ T7208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.364642][ T7208] RSP: 002b:00007fff7eb07e08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 134.364652][ T7208] RAX: 0000000000000000 RBX: 00007febf1da7ba0 RCX: 00007febf1b8d169 [ 134.364658][ T7208] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 134.364663][ T7208] RBP: 00007febf1da7ba0 R08: 0000000000000264 R09: 0000001a7eb080ff [ 134.364669][ T7208] R10: 00000000003ffb78 R11: 0000000000000246 R12: 0000000000021529 [ 134.364674][ T7208] R13: 00007fff7eb07f00 R14: ffffffffffffffff R15: 00007fff7eb07f20 [ 134.364683][ T7208] [ 134.659924][ T5914] usb 4-1: 0:2 : does not exist [ 134.677719][ T5914] usb 4-1: USB disconnect, device number 14 [ 134.709756][ T5869] usb 3-1: USB disconnect, device number 17 [ 134.850402][ T7072] udevd[7072]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.719050][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 137.809282][ T5822] Bluetooth: hci4: command 0x0405 tx timeout