last executing test programs: 10.337448585s ago: executing program 2 (id=203): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae5}, {0x6, 0x2, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc03e}}], 0x1, 0x0) 10.313655008s ago: executing program 2 (id=204): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0xc0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x407}}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000002c0)={0x54000, 0xe000, 0x1, 0x7, 0xb}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d228fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d5307c228c7e338ea6e1d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0xfffffffffffffffe, 0x2, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f0000000600)) chmod(&(0x7f0000000180)='./file0\x00', 0x100) read$FUSE(r0, &(0x7f0000008340)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 9.64426915s ago: executing program 1 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x49, 0x0, 0x0, 0x2c, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffda}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r3], 0x3c}}, 0x0) 9.555290385s ago: executing program 1 (id=210): syz_emit_ethernet(0xc2, &(0x7f0000000600)={@random="211b273e6883", @link_local, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf250500000058000780080001000200000008000100040000000800020009000000080002000180ffff0c00030006000000000000000c0003000900000000000000080001000800000008000200050000000cf9296c94420c024efcffff30000180080003000100000008000300070000000d0001007564703a73797a31000000000c000280080001"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0xfffffff2, 0x0, 0x9, 0xfffffffe, 0x2, 0xfffffffe, 0x0, 0x6, 0x7, 0xd0, 0x0, 0x7, 0x1, 0x8, 0x29, 0x72f0, 0x6, 0x8, 0x9, 0x3fe, 0x2, 0x4484, 0xa2dc, 0x3, 0x1000, 0x6, 0xa, 0x0, 0xfffffffe, 0xfffffff7, 0x4]}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.132814302s ago: executing program 1 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e661813fd11597956bc5cb48bf64200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc4011}, 0x20040000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) close(0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r4 = getpid() r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0xc8d00545bc5b51e1, 0xc028}) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000040)={'trans=unix,', {[{@aname={'aname', 0x3d, '9p\x00'}}]}}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="a2246f126afa490394b8c328c1aff2442b73e669f694509910e4d703c0b85708e7e29513119bc2be483977d0e4002b0d43e202f1265a9e8ac701f06c1c9ce09bf183fd3c8052c531c5694bdd10e3aad4ce454165a9e3738b4a4ef3121ba5b525256301325db4d18a1d3c885c787ad9313c8b4d853e829455424eccbc0db0e1f0175e94e7aada8b88135018e62c8f4d17d99e6358ade7ce56e7808f726551cca8a7875da338d0789060c856f93353f8d7598a9515dd2fe6e97a778393369c3d9dc386146e1e9b8e02de88", 0xca, r8) read$msr(r7, &(0x7f0000019340)=""/102399, 0x18fff) 6.525331486s ago: executing program 2 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f00000006c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000100)="460600000000000051301f7f30d7767247329d1ee92d", &(0x7f0000000000)=""/2, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) 6.466287226s ago: executing program 1 (id=221): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="07000000010001", 0x7) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) 6.301238304s ago: executing program 2 (id=223): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000001c0)={0x2, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0xfffffff6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x810, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20e001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6(0xa, 0x802, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4f}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaebbd339ba3c01c2c7b8df8e6174039af20300000000000000ce1f830cc1eaf991fd00"}, 0xd8) 6.300942167s ago: executing program 3 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r1, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}}, 0x14}, 0x1, 0x620b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000800000006000000f5ff0000db41074a21c50ae8efebe8e8c00c32476cf36dc2736329a41243027f447c55ecec7a75b2049090db11819773c5a8fe64cfc7ccb5e432ec8c39e56b1cbc891562dc9655069b87b7357c03fdda2498ff75d88deb8ad3bc7531c34cf33c2b562d0575b44e0c009bc22aaf334626a458fc2b5977e8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) memfd_create(&(0x7f0000000180)='syzkaller\x00', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, &(0x7f0000000280)=[{0x2, 0x180, 0x800}], 0x1f4, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) write$P9_RLERROR(r7, &(0x7f00000002c0)={0x13, 0x7, 0x2, {0xa, 'syzkaller\x00'}}, 0x13) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000140)={r10}) socketpair(0x2c, 0x800, 0xfffffffd, &(0x7f0000000480)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) r11 = epoll_create(0x80000000) epoll_ctl$EPOLL_CTL_DEL(r11, 0x2, r3) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900012d97283a246e1ef10068000000090a010400000000000000000700000308000a40000000000900030073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00ffff08000140000000080800034000000120140000001000010000000000000000000184000a"], 0xb0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20050800) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) 6.233424215s ago: executing program 0 (id=225): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x100800) fcntl$setflags(r0, 0x2, 0x1) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) (async, rerun: 64) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x1c3, 0x0, 0x0, 0x38, 0x16}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a00fc00000014000780080012405073bb3d0500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737953, 0x2000000000000216, &(0x7f0000000280)=ANY=[@ANYBLOB="feffffff00850000000f0000ff01000000000000000000007b1a0000000000000000001834040000a801b84ac856a828fe3a45db28f424d02eee7f3c87c4ae00e0364e743c7ef70aa9c4ae4f00000600f54aa41bfb192207f85186d36aa32e370934eb3f979a43f62c7f24a090caa0a475392df27238d49f3ddc8fecbbfca703323f000fed96c48e0e868b70eece6281a8b620081ff2"], 0x0, 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000000f00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) (async) unshare(0x22020400) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) r6 = fsopen(0x0, 0x0) fsmount(r6, 0x0, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x869fff185f62b546, r3, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket(0xa, 0x1, 0x0) (rerun: 64) listen(r7, 0x7f) (async) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r7}, 0x20) 5.513380486s ago: executing program 3 (id=226): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x301100, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0)="374ba9007170582b9a85b3f36adf6aaf9350526367daf74b9452b9db6b38dfe3a64b6429b0d9e5edb815b16e5d773fa7026360d05dad1a60fdefc02a0ab94149f3133afc18f18d72c360b80b5b63a13f35cbca2f53b206d91794f52ec72e2cc11d0c008d6b94", &(0x7f0000000440)=@udp6=r0, 0x1}, 0x20) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x8}}}}}, 0x0) syz_usbip_server_init(0x5) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000680)) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="1380c2000000c9b916c9fe720800450000000000023d8439a890780400000005000000517b14f20700000000000000fa2c5434210fb56ea4c6543050a4b3bd3d387a9fc962e5b99f0abc0c60cad90010000000000000b2d89ddedb68d77ec38bf07caac124ee0ee432b0bdb3612cc674241ecb30310b619b838909a7d6cca82d9d2ff150c9cd21e104cd6ab97698ef85ed3d764225499c112b2fc291b742d2072367d71ef0df58d1d74aa61364295ee638c274927d353e8ff084a9d8dd4dbdecb8e7031b27f9b420738a16262fbd1985127fa6261b1d1b69b0bbd3455c4b9ba9cccd5aa6cdaf58f3976ea4d63c265b035d2bb1d49128455a6fb7b674e9e613e98b30d591936ec876c60402d313bb6f9cfd44f06aab9d74f764350d23224e680b07f03a31ac6f6e84df84d40cd380c0dbd26b0fb847653446acb0c5fa3db559da72"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x78}, &(0x7f00000000c0)=0x8) syz_usb_connect(0x5, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000000d0904000003030000000905be3b", @ANYBLOB="6c23235a1b87d0c3ecc491677801fe76ebf0109e31b8cafd30e382cdcc731c965dee7c7267d2b8d5fc6cfc7aa7bba1abf6bb4524d38986f940dc8aae6da306700a4c36a7092f6eaafdce690d0910a21d0f0e3525eac4a3507c84e764eb03e6635fa559829443147846386520759299ce3eff3eb17aff0c96c1ddb13cd213c87fd67dd8ae387ef4b592f4732d4e800281315032bc18783beb310730048d88e89893ed9423dd2a5f1a8dde8d898a32a62ec9a942e182eb9b", @ANYRESHEX=r0], 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) 5.156592018s ago: executing program 2 (id=229): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket(0xf, 0x80000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x76, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) close_range(r0, 0xffffffffffffffff, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r4) syz_usb_control_io(r4, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x43, {0x43, 0x5, "3ae273d060cc310499e5d07229ecfa6448a8680be4604c48add3ac19aa7e4c017d7299fa10704417f8a80fdf477f64a3bc56c9ee45fd2cb30b3642b48eb00ad81f"}}, &(0x7f0000000940)={0x0, 0x3, 0xa, @string={0xa, 0x3, "29b8733a11f0428b"}}, &(0x7f0000000140)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0xab, 0xf00, 0x8, [0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "680bb40ca43a3bbcb167f09cbe56f38d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x0, 0x4823}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x35, 0xfd, "e227271c", '?\x00\fP'}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x4, 0x9, 0x8, 0x3, 0xc7, 0x2}}}, &(0x7f0000000840)={0x84, &(0x7f0000000300)={0x40, 0x15, 0xe1, "05adaf198903c813f52be721f5253c8675600d0ccc0e2a03911e24c69a14beed6983d2a938d2d0959ca47ee7204e399dd65b3f524060f1086a4cf7bd056ef9e8f0c26240897daf36afd66a860431d49f757ec095b5beb55d9751cd784ecc936cf402ed4976aaebdfca55534da52e0a3e4da0c0562798c122bd9f5f86ad613945f637bf49090f640e6c1a1f06c9460135029432fdced113643e7a46e2d1978c444bc21871f9a3eda754a8633585ee6004b0788a5336c14ca30c49f276c5692e2267163eed01f420c943e5296327a322e1844eb522dbae7f75104f0743eaa47fc777"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x200, 0x80, [0x11f0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xb7}, &(0x7f0000000600)={0x40, 0xb, 0x2, "79fa"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d1cd"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x49}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xd}}) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(r4) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'wg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 4.880199266s ago: executing program 0 (id=231): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) setsockopt$MRT_DONE(r0, 0x0, 0xd0, 0x0, 0x0) 4.705301293s ago: executing program 0 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f00000006c0)="cc", 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000100)="460600000000000051301f7f30d7767247329d1ee92d", &(0x7f0000000000)=""/2, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) 4.676779341s ago: executing program 3 (id=234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x6, 0x17, 0x4, 0xfa98}, {0x9, 0x5, 0x0, 0xf0}, {0x4300, 0x4, 0x9, 0x6}, {0x4fb, 0x2, 0x7, 0xd7}, {0x0, 0x86, 0x8, 0x2}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008809c000780080077144ebb00000800060003000000080005"], 0xd0}}, 0x571f68543cec8180) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="145e658dd5f63b1a95c5ebf09b343dc8d00400000000001400bc38c26fcf6205ac188ee8a03fb8b2f9128086b78b5565e10f04a0b0c4a679ead38e840d004662b1d92ed587151f045bfcc389b40766c5a14c6291fe0ac9574a9377fe882ded5117"], 0x34}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.350801635s ago: executing program 0 (id=235): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 4.259994429s ago: executing program 4 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x5865, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 4.137034152s ago: executing program 0 (id=237): socket(0x2, 0xa, 0x300) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/packet\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) 2.925297135s ago: executing program 3 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a757365726164645f657865635f743a7330202f7573722f7362696e2f63757073642030303030303030303030303030308b7715061d7b43"], 0x49) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) 2.394743739s ago: executing program 4 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.786039925s ago: executing program 1 (id=240): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add0bb6", 0x80, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fb", 0x3b, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486", 0xab}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x40000) 1.488799592s ago: executing program 3 (id=241): openat$kvm(0xffffffffffffff9c, 0x0, 0x3a1dc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x22001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000300)={0x101, 0x2, 0x10000, 0x2}, 0x10) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x5, 0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) syz_emit_ethernet(0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="cd82bd76a4a4aa8daaaaaaaa8864fcfa25"], 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) 1.488243055s ago: executing program 4 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x40000000, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2}}}}}}}, 0x0) 1.433363617s ago: executing program 0 (id=243): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x2, 0x17, {0x17, 0x31, "f38f667caf7517740cfe0c3095917bab7afdbee784"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x20, 0x12}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0xc0, 0x5, 0x2, "ec5f"}, &(0x7f0000000340)={0x40, 0x5, 0x2, "1019"}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r2, 0x0, 0x3b) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x4006, 0x1, 0x0, 0x0}], 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440)="b2fdc51cff28c847407312c4309ce71b81bd5f3aa9d27d17e4e449e9504e3266f5f3121da62ff2ecaec5f831162ada476bc68ce3d3ff7fe1753bf32e5785c94cfe957619be49ff870d55f9207d7f9ac119fc36d600e9f05b49be898c5092a01499e9ddbadf880a74a8547806be9d09031bee355998324b92466e", 0x7a, r4}, 0x68) 1.342209354s ago: executing program 4 (id=244): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd9d, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) (async) r2 = socket$kcm(0x21, 0x2, 0xa) recvmsg(r0, &(0x7f0000003800)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000002500)=""/4079, 0xfef}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000003640)=""/150, 0x96}, {&(0x7f0000000180)=""/64, 0x40}], 0x5, &(0x7f0000003740)=""/152, 0x98}, 0x40) (async) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}], 0x18}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="43190304001b00001400f731f23ba57159cb986dde12800b0001006d6163736563000004b17a26532825e3", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000000c0)=0x94b, 0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vlan0\x00'}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xc) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) (async) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) (async) landlock_create_ruleset(0x0, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, 0x0) (async) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r8, &(0x7f0000002340), 0x3fffff7, 0x0) 1.259460014s ago: executing program 3 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000010c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB="0c0e000001050300000000000000000002000008540201000000000008000000020907000000240073797a3100000000000000000000000000000000000000000000000000000000684db3d0fd25d04b90e1a11cdcb69054e2327dc6e4438b2b789758b3a8850223f265662d7d183c179f627aefa7529c4aff79ae3d34cf7cf61440d4842f895b712f9609000200000002000000ff0f030001000000e40000000000bb5701000000ffff00000600c1d003000000c50d00000200fcff00000000b30d000061c002000300000006000000330f0e0000000000090000000700000000000000018000000b00020002000000080000007f00030000000000010100000000010003000000faffffff0004ffff030000000100000003000c080300000004000000860007000100000009000000080000040100000004000000040000020000000001000000d104070001000000060000000b00060000000000020000000800050003000000090000000f000400010000000600000008000000030000000500000006000c00030000000f00000005009a040100000009000000010007000100000005000000810000000200000001000000002003960100000088000000050006000200000009000000fcff06000200000001000000020000000200000001000000b800fffb03000000000000000100070003000000000800000200040001000000420d00000100050000000000050000000500050001000000080000000000050002000000ff01000008000100000000006b2d000002000200010000000010000002007000000000000800000008000f00000000000000010008000700000000000400000054020100020000000010000008035a5c6a06170073797a3000000000000000000000000000000000000000000000000000000000acece136ab076204f52a644735f9ba21e4beddfdc862adf1b0754b780a9853662e6732595cb6aafa34acbe8ec972486cbec68b72276b34fe0a81c6fe7356336901000c000200000002000000ff00030001000000ff0700000030fbff0000000005000000000008000100000008000000020004000300000000000000c0270d00000000000700000008005e0001000000010400000000000102000000030000000000ff7f0300000008000000f8ff000102000000ba0000000700010003000000040000000900033102000000400000000000030003000000020000004000ff01020000000900000007004ebd010000006037f9010b00070000000000030000000200550503000000ff07000003000900030000000500000004000f0001000000060000000200070000000000090000000700800001000000000000000700090001000000090000000000040001000000f600000040918f0800000000050000000e00030001000000020000000400010001000000030000000700070002000000070000000900000103000000de2e000054ce1d0c020000000100000003000e000100000001800000688880000300000003000000ab9d00010000000001000080ff03008001000000090000000100dd0c0000000007000000010101040300000000000000ffff0300000000008614000004000800000000000101000008000300020000000400000007003c040100000006000000050007000200000000800000540201000200000000000080010000805e05190073797a31000000000000000000000000000000000000000000000000000000003044bf8b9a8e26ab7e82049947df002734c530319df6af5c36823d43bc32bc507facc620018aa2701e5da32314e677a2afb4a5c996451200635fac8b2cac8e67fcfff8ff03000000fbffffff0f00fcff00000000f308000009000000000100000009000000020003000000000000000000feff0400020000000c000000d624050000000000000000000200030000000000050000000e00018002000000ff000000090001800100000002000000020005000300000000000000018005000300000005000000f8ff0800020000000000000002001800000000000100000000008a0501000000feffffff05000000030000000100000059d3030003000000018000000400b100030000000600000006007f0001000000fbffffff0800d15700000000fdffffff0000100000000000030000000800c4a700000000000100006f97040001000000000000804000010002000000c10700000a006e080200000000000000060005000200000006000000000007000000000009000000040008000000000000800000fdff649b02000000050000000200fcff00000000569e000003000700020000000a0000000020060001000000810000007105490902000000ff7f000081000100020000000f000000ffff0b0000000000ae00000000800300020000007f00000005000300020000007f000000000040000300000006000000080001010100000001000100000007000300000007000000540201000200000080000000e080c2910200210073797a310000000000000000000000000000000000000000000000000000000066848b2d597656737a831ec31db133bb8138fb828d69e20b992056fa1a674873092c6402c7904abfb74ed0b13c51a60e00283f0a9236e957d1f76b2d8e784b9205000900000000000500000002007f000300000006000000090009000300000000000000e0000c0000000000ff0700000f00010100000000010000000600f8ff02000000ff0000008c66060001000000000000000600940002000000070000000400070001000000f8ffffff5fd3010000000000020000000500050003000000080000000180070002000000001000001605b90e00000000020000000f004a0003000000050000000d00030000000000080000000c0009000000000000000000ed0009000100000002000000ff000500020000000400000002000200030000000f000000070034aa010000000500000006009a0c0200000003000000ff07020000000000000400000300080001000000090000000800ff0003000000020000000001000802000000402800000600cf0d02000000ff0f0000160e0700000000000900000003000300010000001000000009000800010000000500000009000a000300000001000080090007000300000001040000050002000000000000000000e900020001000000040000000f000101010000000000080001fc010000000000030000000200010000000000780300000700080003000000fbe9100f01000900020000000200000004000500010000000900000037dfb40001000000080000005402010002000000ffffff7f021004000104270073797a3100000000000000000000000000000000000000000000000000000000b01f8828ab53969780886644480970f3e06f9632b80e40f8b259c49b42472152e5dc78eaef4421f67eae8f60d77fa99eac95f311ff51a141277248571550136e09000400020000000000000008000600020000000600000080001000010000000900000001009e0000000000090000000400bc000100000001000000800001000200000008000000faff0c00030000004c4b00000200070001000000651200000008093f0200000008000000ffff9b0002000000709adb6708070008000000000c0000000600050003000000feffffff0500070001000000ffffffff080002000100000040000000000009000100000000020000440b7200020000000000010004000600020000000500000000000000010000003b87c1550600008001000000070000000301030003000000ffffffff04000600010000000800000004000400030000003cd000000200401601000000fbffffff0600ffff0200000007000000870008000100000003000000e7042c020000000000fc0f000700080001000000090000000700060000000000030000007f000800000000003c00000005000100030000008bd400000900ff7f01000000fbffffff03000b000300000000020000070001000200000000080000050009000100000007000000010102000200000000fcffff03000200030000000100010005000500020000000f00000007000100030000005b2a0000040018850300000007000000010402000300000003000000540201000200000000000000010301040001170073797a3100000000000000000000000000000000000000000000000000000000f0971e38ecfc99f71792a3c7cec6dd5b118decd59168902d1f27f977e2b4da1343c86a144a47bc9faeeecfff181f0cf0174e11110c69caa8ec0677f82e4d80fe0b00020002000000000000008bf60101000000000400000001000008020000000800000000000600020000000e0000000800090001000000020000008000050001000000ab3ef67607000900000000004d0000000300070002000000090000007f00990003000000070000000300faff01000000000000009c0006000200000001040000d34c04000200000007000000c40c080002000000fbffffff050006000000000002000000fdf9050002000000dbfe000008004d000200000007000000070008000300000005000000ff7ffdff000000000004000003000a00030000001609000080000500000000000900000000006d0a030000000200000002000388020000002b0a00000000020003000000080000000700a0490100000004000000cf000500030000000700000000008000010000008100000034a0f7ff02000000020000000700ff0f02000000040000000800f7ff03000000db6500000500030001000000020000000000ffff020000001b0700009a07010403000000010000000200050001000000cd0000008501090003000000050000000200a100020000000b0000006508050001000000060000000600010201000000ffff00000300000400000000000000008100040000000000010400000d00ff00000000000b000000a10496e9991dff0709d981420543a885"], 0xe0c}, 0x1, 0x0, 0x0, 0x811}, 0x24028491) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x40) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1694, 0x0) r6 = syz_open_dev$sndpcmc(0x0, 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 1.153359485s ago: executing program 1 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x538}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d60800000000000000c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f995a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bec62bcb2bc91ddcdfac2e6d442105ee6c0742b5e9584543b72f762d21c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000400000002000000000000110300000008ffffff00000000000000020000000002000000000000080200000000005f00"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) mount$cgroup(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x24022, &(0x7f0000000180)={[{@noprefix}]}) 1.137132991s ago: executing program 4 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000001440)=""/40, &(0x7f0000001480)=0x28) r5 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r5, 0x40046109, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x20000) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000240)=0x82) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4e, 0x0, 0x100000000007, 0xdb4e, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0xa, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c5210}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf008020200000000000000000000800"], 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0xa4}}, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="7672616e733d7468702c706f72743d3078303030303030303030303030ee3928346532322c70726976706f72"]) 192.494276ms ago: executing program 4 (id=248): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000140)={@void, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x2a) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000001800000090000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000fa9e0000000000000000000078d21b23f1cce2409662db1cd593f714391d876e22b838673ed2cd1dbf307876049b08ff62736044b82442cae27631aa40fda5a73de9cd1b5b153d7e5d2ecb9a095c0a6be6821bedaefe70c6e17a95b3e3faa988ef47a5147389cbf8711347b8a3e0c57affbddfa5bff8d2106f78eb4b6da38236e16a22877ae896f1297802c47b5d810675177ea95d534013598fad19f0971451d75654fcdf4269d9eb699b44684a72b969f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r9}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r10, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x40090) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9d02}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4d, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40040004) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)) 0s ago: executing program 2 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x70, &(0x7f0000000100)={0x0, 0x1bfb4, 0x80, 0xfffffffc, 0x20000073}) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0xfffffffffffffffc, 0x4]}, 0x20) read$eventfd(r2, &(0x7f0000000040), 0x8) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f8}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) kernel console output (not intermixed with test programs): [ 44.451409][ T30] audit: type=1400 audit(1779630421.128:111): avc: denied { write } for pid=5459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.509948][ T30] audit: type=1400 audit(1779630421.188:112): avc: denied { write } for pid=5470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.862060][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 45.862075][ T30] audit: type=1400 audit(1779630422.538:114): avc: denied { write } for pid=5484 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.034678][ T30] audit: type=1400 audit(1779630422.718:115): avc: denied { write } for pid=5487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.089257][ T30] audit: type=1400 audit(1779630422.768:116): avc: denied { write } for pid=5498 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.251560][ T30] audit: type=1400 audit(1779630422.928:117): avc: denied { write } for pid=5501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.309036][ T30] audit: type=1400 audit(1779630422.988:118): avc: denied { write } for pid=5512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.476500][ T30] audit: type=1400 audit(1779630423.158:119): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.520473][ T30] audit: type=1400 audit(1779630423.198:120): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.700478][ T30] audit: type=1400 audit(1779630423.378:121): avc: denied { write } for pid=5529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.745735][ T30] audit: type=1400 audit(1779630423.428:122): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.914961][ T30] audit: type=1400 audit(1779630423.598:123): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 51.047032][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 51.047047][ T30] audit: type=1400 audit(1779630427.728:129): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.076741][ T30] audit: type=1400 audit(1779630427.758:130): avc: denied { mount } for pid=5591 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.079496][ T5591] cgroup: Unknown subsys name 'net' [ 51.106346][ T30] audit: type=1400 audit(1779630427.788:131): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.236775][ T5591] cgroup: Unknown subsys name 'cpuset' [ 51.244588][ T5591] cgroup: Unknown subsys name 'rlimit' [ 51.403128][ T30] audit: type=1400 audit(1779630428.078:132): avc: denied { setattr } for pid=5591 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.427543][ T30] audit: type=1400 audit(1779630428.078:133): avc: denied { create } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.464132][ T30] audit: type=1400 audit(1779630428.078:134): avc: denied { write } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.485539][ T30] audit: type=1400 audit(1779630428.078:135): avc: denied { read } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.510247][ T30] audit: type=1400 audit(1779630428.078:136): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.525267][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 51.538982][ T30] audit: type=1400 audit(1779630428.078:137): avc: denied { mount } for pid=5591 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.567792][ T30] audit: type=1400 audit(1779630428.218:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 52.517102][ T5591] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.618810][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 56.618825][ T30] audit: type=1400 audit(1779630433.298:143): avc: denied { create } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.680692][ T30] audit: type=1400 audit(1779630433.298:144): avc: denied { read write } for pid=5606 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.705561][ T30] audit: type=1400 audit(1779630433.298:145): avc: denied { open } for pid=5606 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.732508][ T30] audit: type=1400 audit(1779630433.338:146): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="socket:[5142]" dev="sockfs" ino=5142 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.764785][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.765881][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.772975][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.780563][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.789114][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.793982][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.806801][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.808468][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.815377][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.821835][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.828749][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.836700][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.844251][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.861810][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.864411][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.869532][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.876901][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.890442][ T30] audit: type=1400 audit(1779630433.538:147): avc: denied { read } for pid=5606 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.891674][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.912155][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.926907][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.927427][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.941178][ T30] audit: type=1400 audit(1779630433.538:148): avc: denied { open } for pid=5606 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.941531][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.964705][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.973245][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.979854][ T30] audit: type=1400 audit(1779630433.598:149): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.989811][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.012054][ T30] audit: type=1400 audit(1779630433.668:150): avc: denied { module_request } for pid=5606 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 57.101223][ T30] audit: type=1400 audit(1779630433.778:151): avc: denied { sys_module } for pid=5608 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.233908][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.241142][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.248896][ T5608] bridge_slave_0: entered allmulticast mode [ 58.255909][ T5608] bridge_slave_0: entered promiscuous mode [ 58.281865][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.289118][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.296293][ T5608] bridge_slave_1: entered allmulticast mode [ 58.302931][ T5608] bridge_slave_1: entered promiscuous mode [ 58.380926][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.400022][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.407204][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.414603][ T5616] bridge_slave_0: entered allmulticast mode [ 58.421771][ T5616] bridge_slave_0: entered promiscuous mode [ 58.428604][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.436021][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.443129][ T5606] bridge_slave_0: entered allmulticast mode [ 58.449964][ T5606] bridge_slave_0: entered promiscuous mode [ 58.458291][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.487221][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.494500][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.501578][ T5616] bridge_slave_1: entered allmulticast mode [ 58.508396][ T5616] bridge_slave_1: entered promiscuous mode [ 58.514915][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.521983][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.529855][ T5606] bridge_slave_1: entered allmulticast mode [ 58.536590][ T5606] bridge_slave_1: entered promiscuous mode [ 58.550346][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.557522][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.564777][ T5617] bridge_slave_0: entered allmulticast mode [ 58.571686][ T5617] bridge_slave_0: entered promiscuous mode [ 58.598919][ T5608] team0: Port device team_slave_0 added [ 58.604853][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.611939][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.619182][ T5617] bridge_slave_1: entered allmulticast mode [ 58.626008][ T5617] bridge_slave_1: entered promiscuous mode [ 58.652633][ T5608] team0: Port device team_slave_1 added [ 58.664678][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.671799][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.679224][ T5607] bridge_slave_0: entered allmulticast mode [ 58.685907][ T5607] bridge_slave_0: entered promiscuous mode [ 58.694449][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.705407][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.727493][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.734766][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.741853][ T5607] bridge_slave_1: entered allmulticast mode [ 58.748664][ T5607] bridge_slave_1: entered promiscuous mode [ 58.756504][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.772992][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.795889][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.824189][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.831210][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.857310][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.870159][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.886895][ T5616] team0: Port device team_slave_0 added [ 58.894187][ T5616] team0: Port device team_slave_1 added [ 58.900740][ T5606] team0: Port device team_slave_0 added [ 58.906961][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.913963][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.941402][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.941450][ T5622] Bluetooth: hci0: command tx timeout [ 58.965950][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.981911][ T5606] team0: Port device team_slave_1 added [ 59.003910][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.033690][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.040786][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.066817][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.079926][ T5617] team0: Port device team_slave_0 added [ 59.085610][ T5622] Bluetooth: hci3: command tx timeout [ 59.085818][ T5622] Bluetooth: hci1: command tx timeout [ 59.091367][ T5621] Bluetooth: hci4: command tx timeout [ 59.099995][ T5617] team0: Port device team_slave_1 added [ 59.103047][ T5623] Bluetooth: hci2: command tx timeout [ 59.123848][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.130925][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.159223][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.182953][ T5607] team0: Port device team_slave_0 added [ 59.195063][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.202064][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.228097][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.240786][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.247804][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.273821][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.291701][ T5607] team0: Port device team_slave_1 added [ 59.318035][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.325226][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.351194][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.378396][ T5608] hsr_slave_0: entered promiscuous mode [ 59.384648][ T5608] hsr_slave_1: entered promiscuous mode [ 59.392440][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.399495][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.425646][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.437164][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.444287][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.470204][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.491388][ T5616] hsr_slave_0: entered promiscuous mode [ 59.498033][ T5616] hsr_slave_1: entered promiscuous mode [ 59.503878][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 59.509961][ T5616] Cannot create hsr debugfs directory [ 59.527676][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.534641][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.560577][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.609109][ T5606] hsr_slave_0: entered promiscuous mode [ 59.615371][ T5606] hsr_slave_1: entered promiscuous mode [ 59.621181][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 59.626926][ T5606] Cannot create hsr debugfs directory [ 59.667658][ T5617] hsr_slave_0: entered promiscuous mode [ 59.673621][ T5617] hsr_slave_1: entered promiscuous mode [ 59.679792][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 59.685688][ T5617] Cannot create hsr debugfs directory [ 59.745036][ T5607] hsr_slave_0: entered promiscuous mode [ 59.751468][ T5607] hsr_slave_1: entered promiscuous mode [ 59.757492][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 59.763200][ T5607] Cannot create hsr debugfs directory [ 60.050319][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.062101][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.070024][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.079629][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.087229][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.096550][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.104704][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.114646][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.161678][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.170823][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.178686][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.188182][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.201197][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.210518][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.223666][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.233259][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.305465][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.317224][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.326958][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.336181][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.353224][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.362331][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.370308][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.379357][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.453481][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.463594][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.472175][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.480817][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.501081][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.507922][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.518342][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.527472][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.540167][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.549062][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.578989][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.607704][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.632145][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.639463][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.648886][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.655959][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.678955][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.686041][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.697762][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.704871][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.735417][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.743797][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.752016][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.761275][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.775016][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.783528][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.791463][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.800647][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.889283][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.941237][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.966240][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.998719][ T5623] Bluetooth: hci0: command tx timeout [ 61.006846][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.013964][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.025216][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.032354][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.090893][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.110393][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.117538][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.149682][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.156831][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.165370][ T5623] Bluetooth: hci1: command tx timeout [ 61.167784][ T5621] Bluetooth: hci3: command tx timeout [ 61.170933][ T5614] Bluetooth: hci2: command tx timeout [ 61.170955][ T5614] Bluetooth: hci4: command tx timeout [ 61.247249][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.308502][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.332122][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.339279][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.366769][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.374003][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.682924][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.786230][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.884377][ T5608] veth0_vlan: entered promiscuous mode [ 61.939881][ T5608] veth1_vlan: entered promiscuous mode [ 61.999371][ T5616] veth0_vlan: entered promiscuous mode [ 62.043227][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.060398][ T5616] veth1_vlan: entered promiscuous mode [ 62.082597][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.108829][ T5608] veth0_macvtap: entered promiscuous mode [ 62.137499][ T5608] veth1_macvtap: entered promiscuous mode [ 62.166204][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.177814][ T5616] veth0_macvtap: entered promiscuous mode [ 62.199925][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.239446][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.253079][ T5616] veth1_macvtap: entered promiscuous mode [ 62.271062][ T5606] veth0_vlan: entered promiscuous mode [ 62.295775][ T134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.307854][ T5606] veth1_vlan: entered promiscuous mode [ 62.317253][ T5617] veth0_vlan: entered promiscuous mode [ 62.326326][ T134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.342477][ T134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.358433][ T134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.370921][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.397306][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.409644][ T5617] veth1_vlan: entered promiscuous mode [ 62.443457][ T149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.470775][ T149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.481140][ T149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.495955][ T5606] veth0_macvtap: entered promiscuous mode [ 62.503896][ T149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.528849][ T5606] veth1_macvtap: entered promiscuous mode [ 62.584924][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.593282][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.608681][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.647555][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.663184][ T5617] veth0_macvtap: entered promiscuous mode [ 62.686578][ T5617] veth1_macvtap: entered promiscuous mode [ 62.697020][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.706640][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.716016][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.718159][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.724748][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.740154][ T5607] veth0_vlan: entered promiscuous mode [ 62.753396][ T5607] veth1_vlan: entered promiscuous mode [ 62.763677][ T30] audit: type=1400 audit(1779630439.438:152): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.BAlJbv/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.778509][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.790802][ T30] audit: type=1400 audit(1779630439.438:153): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.807752][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.829336][ T30] audit: type=1400 audit(1779630439.438:154): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.BAlJbv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.856092][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.856527][ T30] audit: type=1400 audit(1779630439.448:155): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.887821][ T30] audit: type=1400 audit(1779630439.448:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.BAlJbv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.892673][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.921723][ T30] audit: type=1400 audit(1779630439.448:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.BAlJbv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.938405][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.957071][ T30] audit: type=1400 audit(1779630439.448:158): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.957116][ T30] audit: type=1400 audit(1779630439.478:159): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.957153][ T30] audit: type=1400 audit(1779630439.478:160): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=7606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.957189][ T30] audit: type=1400 audit(1779630439.478:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.074999][ T5621] Bluetooth: hci0: command tx timeout [ 63.085227][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.112476][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.113825][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.147501][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.168458][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.177879][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.210252][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.236302][ T5622] Bluetooth: hci1: command tx timeout [ 63.241972][ T5622] Bluetooth: hci4: command tx timeout [ 63.248678][ T5623] Bluetooth: hci2: command tx timeout [ 63.254243][ T5621] Bluetooth: hci3: command tx timeout [ 63.284575][ T5607] veth0_macvtap: entered promiscuous mode [ 63.315536][ T5804] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 63.323025][ T5717] IPVS: starting estimator thread 0... [ 63.351307][ T5607] veth1_macvtap: entered promiscuous mode [ 63.362949][ T5753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.368716][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.379815][ T5753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.413191][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.414679][ T5806] IPVS: using max 47 ests per chain, 112800 per kthread [ 63.470568][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.549053][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.589457][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.859412][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.916955][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.925415][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.999355][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.019655][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.033797][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.046960][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.125217][ T805] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.152230][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.177441][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.348478][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 64.392642][ T805] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 64.476269][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 64.589630][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.594415][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 64.628479][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.666452][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 65.188464][ T5621] Bluetooth: hci0: command tx timeout [ 65.265630][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 65.314503][ T5621] Bluetooth: hci3: command tx timeout [ 65.320628][ T5622] Bluetooth: hci4: command tx timeout [ 65.328376][ T5621] Bluetooth: hci2: command tx timeout [ 65.335929][ T5623] Bluetooth: hci1: command tx timeout [ 65.836795][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.848175][ T805] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 65.857498][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.866142][ T805] usb 3-1: Product: syz [ 65.871993][ T805] usb 3-1: Manufacturer: syz [ 65.872766][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.876924][ T805] usb 3-1: SerialNumber: syz [ 65.881340][ T805] usb 3-1: config 0 descriptor?? [ 66.053313][ T5834] fuse: Unknown parameter 'user_Vd' [ 66.620990][ T1219] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.684227][ T5703] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 66.685916][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.706899][ T805] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 66.755780][ T805] input input5: Device does not respond to id packet M [ 66.790635][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.988462][ T5703] usb 5-1: device descriptor read/64, error -71 [ 67.102227][ T805] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 67.102773][ T1219] usb 4-1: unable to get BOS descriptor or descriptor too short [ 67.117450][ T805] input input5: Device does not respond to id packet P [ 67.118593][ T805] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 67.149278][ T805] input input5: Device does not respond to id packet B [ 67.159328][ T805] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 67.166900][ T805] input input5: Device does not respond to id packet N [ 67.175773][ T805] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 67.191349][ T805] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 67.210496][ T805] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 67.229677][ T1219] usb 4-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 67.245856][ T805] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 67.248968][ T1219] usb 4-1: New USB device strings: Mfr=228, Product=255, SerialNumber=3 [ 67.341294][ T5703] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 67.385532][ T805] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 67.402946][ T1219] usb 4-1: Product: syz [ 67.468459][ T1219] usb 4-1: Manufacturer: syz [ 67.527588][ T1219] usb 4-1: SerialNumber: syz [ 67.671902][ T5703] usb 5-1: device descriptor read/64, error -71 [ 67.729240][ T805] usb 3-1: USB disconnect, device number 2 [ 67.835699][ T5703] usb usb5-port1: attempt power cycle [ 67.881664][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 67.881679][ T30] audit: type=1400 audit(1779630444.558:213): avc: denied { ioctl } for pid=5846 comm="syz.0.13" path="socket:[8122]" dev="sockfs" ino=8122 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.112019][ T30] audit: type=1400 audit(1779630444.568:214): avc: denied { create } for pid=5846 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.146567][ T30] audit: type=1400 audit(1779630444.568:215): avc: denied { write } for pid=5846 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.182717][ T30] audit: type=1400 audit(1779630444.678:216): avc: denied { read } for pid=5831 comm="syz.3.9" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.236607][ T5703] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 68.289469][ T30] audit: type=1400 audit(1779630444.678:217): avc: denied { open } for pid=5831 comm="syz.3.9" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.328293][ T5703] usb 5-1: device descriptor read/8, error -71 [ 68.374820][ T805] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.416285][ T30] audit: type=1400 audit(1779630444.788:218): avc: denied { ioctl } for pid=5831 comm="syz.3.9" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.522892][ T30] audit: type=1400 audit(1779630444.888:219): avc: denied { write } for pid=5831 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.564839][ T805] usb 3-1: Using ep0 maxpacket: 16 [ 68.575031][ T30] audit: type=1400 audit(1779630444.898:220): avc: denied { shutdown } for pid=5831 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.603498][ T805] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 68.611624][ T5703] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 68.629223][ T805] usb 3-1: config 0 has no interface number 0 [ 68.635887][ T805] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.647263][ T30] audit: type=1400 audit(1779630444.898:221): avc: denied { read } for pid=5831 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.667622][ T805] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 68.691145][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.699436][ T5703] usb 5-1: device descriptor read/8, error -71 [ 68.705730][ T30] audit: type=1400 audit(1779630444.968:222): avc: denied { setopt } for pid=5859 comm="syz.1.15" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.729392][ T805] usb 3-1: config 0 descriptor?? [ 68.757890][ T1219] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.795503][ T1219] usb 4-1: MIDIStreaming interface descriptor not found [ 68.835161][ T5703] usb usb5-port1: unable to enumerate USB device [ 68.917446][ T1219] usb 4-1: USB disconnect, device number 2 [ 68.970387][ T805] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input2 [ 68.995334][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.116799][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.174832][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 69.198789][ T29] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 69.227595][ T29] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 69.247093][ T5882] netlink: 92 bytes leftover after parsing attributes in process `syz.4.20'. [ 69.257355][ T29] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.271427][ T29] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 69.357818][ T29] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 69.383529][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.416191][ T29] usb 2-1: Product: syz [ 69.429074][ T29] usb 2-1: Manufacturer: syz [ 69.440826][ T29] usb 2-1: SerialNumber: syz [ 69.470179][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 69.499495][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input6 [ 69.571090][ T5886] syz.3.22 (5886): /proc/5886/oom_adj is deprecated, please use /proc/5886/oom_score_adj instead. [ 69.654131][ T805] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 69.667276][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.684563][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.770013][ T5876] process 'syz.0.19' launched '/dev/fd/5' with NULL argv: empty string added [ 69.810297][ T5876] ======================================================= [ 69.810297][ T5876] WARNING: The mand mount option has been deprecated and [ 69.810297][ T5876] and is ignored by this kernel. Remove the mand [ 69.810297][ T5876] option from the mount to silence this warning. [ 69.810297][ T5876] ======================================================= [ 69.864151][ T805] usb 5-1: Using ep0 maxpacket: 8 [ 69.889663][ T805] usb 5-1: config 6 has an invalid interface number: 218 but max is 0 [ 69.918931][ T805] usb 5-1: config 6 has no interface number 0 [ 69.930870][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.944655][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.962882][ T805] usb 5-1: config 6 interface 218 altsetting 149 bulk endpoint 0x5 has invalid maxpacket 64 [ 69.979681][ T29] imon:send_packet: packet tx failed (-71) [ 70.004147][ T29] imon 2-1:155.0: panel buttons/knobs setup failed [ 70.013595][ T805] usb 5-1: config 6 interface 218 altsetting 149 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 70.026828][ T29] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 70.042003][ T805] usb 5-1: config 6 interface 218 has no altsetting 0 [ 70.051190][ T29] (id 0x00) [ 70.067276][ T805] usb 5-1: New USB device found, idVendor=2993, idProduct=3e46, bcdDevice=28.6e [ 70.077531][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.086652][ T805] usb 5-1: Product: syz [ 70.100078][ T805] usb 5-1: Manufacturer: syz [ 70.144425][ T805] usb 5-1: SerialNumber: syz [ 70.177192][ T5884] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 70.184749][ T29] rc_core: IR keymap rc-imon-pad not found [ 70.202878][ T29] Registered IR keymap rc-empty [ 70.218797][ T29] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 70.239811][ T29] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 70.259598][ T29] imon:send_packet: packet tx failed (-71) [ 70.294150][ T29] imon 2-1:155.0: remote input dev register failed [ 70.317961][ T29] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 70.367418][ T29] imon 2-1:155.0: unable to initialize intf0, err 0 [ 70.375163][ T29] imon:imon_probe: failed to initialize context! [ 70.499498][ T5895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.511476][ T5892] vlan2: entered allmulticast mode [ 70.521552][ T5895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.643428][ T5892] bond0: entered allmulticast mode [ 71.219472][ T5892] bond_slave_0: entered allmulticast mode [ 71.536878][ T5892] bond_slave_1: entered allmulticast mode [ 71.814045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 71.893986][ T5724] usb 3-1: USB disconnect, device number 3 [ 72.204814][ T29] imon 2-1:155.0: unable to register, err -19 [ 72.344046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 72.464427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 72.964043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.234046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.324041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.419670][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 73.419686][ T30] audit: type=1400 audit(1779630449.388:252): avc: denied { setopt } for pid=5897 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.570016][ T29] usb 2-1: USB disconnect, device number 2 [ 73.683128][ T30] audit: type=1400 audit(1779630450.358:253): avc: denied { ioctl } for pid=5901 comm="syz.2.25" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.110727][ T5904] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.25'. [ 74.726066][ T805] usb 5-1: USB disconnect, device number 6 [ 75.960459][ T30] audit: type=1400 audit(1779630450.698:254): avc: denied { name_connect } for pid=5901 comm="syz.2.25" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 76.345264][ T30] audit: type=1400 audit(1779630450.928:255): avc: denied { write } for pid=5901 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 76.413104][ T30] audit: type=1400 audit(1779630452.938:256): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.461257][ T30] audit: type=1400 audit(1779630452.938:257): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.528991][ T24] cfg80211: failed to load regulatory.db [ 76.537532][ T30] audit: type=1400 audit(1779630452.938:258): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.627066][ T5914] Zero length message leads to an empty skb [ 76.643120][ T30] audit: type=1400 audit(1779630452.978:259): avc: denied { read } for pid=5272 comm="dhcpcd" name="n30" dev="tmpfs" ino=1962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.767220][ T30] audit: type=1400 audit(1779630452.978:260): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=1962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.775176][ T5913] netlink: 'syz.3.28': attribute type 10 has an invalid length. [ 76.942782][ T30] audit: type=1400 audit(1779630452.998:261): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=1962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.999770][ T5923] Invalid source name [ 77.023345][ T5924] netlink: 92 bytes leftover after parsing attributes in process `syz.4.32'. [ 77.036947][ T5923] UBIFS error (pid: 5923): cannot open "./file0", error -22 [ 77.994284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.606845][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 78.895289][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 79.087379][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 79.087395][ T30] audit: type=1400 audit(1779630455.768:277): avc: denied { unlink } for pid=5616 comm="syz-executor" name="file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.859393][ T30] audit: type=1400 audit(1779630456.258:278): avc: denied { ioctl } for pid=5943 comm="syz.0.33" path="socket:[8856]" dev="sockfs" ino=8856 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.933995][ T30] audit: type=1400 audit(1779630456.578:279): avc: denied { read } for pid=5951 comm="syz.0.36" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.973195][ T30] audit: type=1400 audit(1779630456.578:280): avc: denied { open } for pid=5951 comm="syz.0.36" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.071253][ T30] audit: type=1400 audit(1779630456.578:281): avc: denied { ioctl } for pid=5951 comm="syz.0.36" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.170854][ T30] audit: type=1400 audit(1779630456.698:282): avc: denied { write } for pid=5916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.242770][ T30] audit: type=1400 audit(1779630456.698:283): avc: denied { add_name } for pid=5916 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.325304][ T30] audit: type=1400 audit(1779630456.698:284): avc: denied { create } for pid=5916 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.554221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.172839][ T30] audit: type=1400 audit(1779630456.698:285): avc: denied { write } for pid=5916 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2008 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.209461][ T30] audit: type=1400 audit(1779630456.698:286): avc: denied { append } for pid=5916 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2008 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.281254][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 82.951529][ T5988] netlink: 'syz.0.43': attribute type 21 has an invalid length. [ 83.300113][ T5990] openvswitch: netlink: IPv4 tun info is not correct [ 83.604168][ T5717] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.765743][ T5717] usb 5-1: config index 0 descriptor too short (expected 45, got 39) [ 83.790192][ T5717] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 83.817710][ T5717] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 83.849084][ T5717] usb 5-1: config 1 has no interface number 0 [ 83.881059][ T5717] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 83.927057][ T5717] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.927284][ T5998] netlink: 'syz.0.47': attribute type 10 has an invalid length. [ 83.946579][ T5717] usb 5-1: config 1 interface 7 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.948307][ T5717] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 83.969227][ T5998] netlink: 228 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.987917][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.002023][ T5717] usb 5-1: Product: syz [ 84.006499][ T5717] usb 5-1: Manufacturer: syz [ 84.011256][ T5717] usb 5-1: SerialNumber: syz [ 84.050149][ T5990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.069417][ T5990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.083683][ T5717] usb 5-1: Expected 3 endpoints, found: 1 [ 84.411383][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.430246][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 84.430261][ T30] audit: type=1400 audit(1779630461.108:302): avc: denied { read } for pid=5989 comm="syz.4.46" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.849013][ T30] audit: type=1400 audit(1779630461.148:303): avc: denied { open } for pid=5989 comm="syz.4.46" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.887694][ T30] audit: type=1400 audit(1779630461.158:304): avc: denied { create } for pid=5989 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.912741][ T5990] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 84.929446][ T5990] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET) [ 84.959477][ T30] audit: type=1400 audit(1779630461.198:305): avc: denied { mounton } for pid=6000 comm="syz.2.44" path="/8/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.985898][ T29] usb 5-1: USB disconnect, device number 7 [ 84.987165][ T30] audit: type=1400 audit(1779630461.618:306): avc: denied { create } for pid=5989 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.992517][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 85.085341][ T24] usb 2-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 85.104352][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.130684][ T30] audit: type=1400 audit(1779630461.698:307): avc: denied { read write } for pid=6015 comm="syz.3.48" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.135835][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 85.225762][ T30] audit: type=1400 audit(1779630461.698:308): avc: denied { open } for pid=6015 comm="syz.3.48" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.239124][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 85.288075][ T6021] FAULT_INJECTION: forcing a failure. [ 85.288075][ T6021] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.294047][ T24] usb 2-1: SerialNumber: syz [ 85.332748][ T30] audit: type=1400 audit(1779630461.898:309): avc: denied { create } for pid=6020 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 85.353082][ T24] usb 2-1: config 0 descriptor?? [ 85.359835][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.3.50 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.359861][ T6021] Tainted: [L]=SOFTLOCKUP [ 85.359867][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.359876][ T6021] Call Trace: [ 85.359882][ T6021] [ 85.359888][ T6021] dump_stack_lvl+0x100/0x190 [ 85.359914][ T6021] should_fail_ex.cold+0x5/0xa [ 85.359937][ T6021] _copy_from_user+0x2e/0xd0 [ 85.359964][ T6021] copy_msghdr_from_user+0x9f/0x4f0 [ 85.359990][ T6021] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 85.360025][ T6021] ___sys_sendmsg+0x106/0x1e0 [ 85.360051][ T6021] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.360101][ T6021] __sys_sendmsg+0x170/0x220 [ 85.360119][ T6021] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.360144][ T6021] ? rcu_is_watching+0x12/0xc0 [ 85.360174][ T6021] do_syscall_64+0x10b/0xf80 [ 85.360199][ T6021] ? clear_bhb_loop+0x40/0x90 [ 85.360218][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.360234][ T6021] RIP: 0033:0x7f6075f9ce59 [ 85.360249][ T6021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.360264][ T6021] RSP: 002b:00007f6076e17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.360279][ T6021] RAX: ffffffffffffffda RBX: 00007f6076215fa0 RCX: 00007f6075f9ce59 [ 85.360289][ T6021] RDX: 0000000000000880 RSI: 0000200000000240 RDI: 0000000000000006 [ 85.360298][ T6021] RBP: 00007f6076e17090 R08: 0000000000000000 R09: 0000000000000000 [ 85.360308][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.360318][ T6021] R13: 00007f6076216038 R14: 00007f6076215fa0 R15: 00007ffe8c530078 [ 85.360341][ T6021] [ 85.539723][ T30] audit: type=1400 audit(1779630461.948:310): avc: denied { sqpoll } for pid=6013 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.592287][ T30] audit: type=1400 audit(1779630462.268:311): avc: denied { write } for pid=6006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.834385][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.257263][ T6067] Bluetooth: MGMT ver 1.23 [ 87.316524][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 87.340560][ T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.388577][ T29] usb 4-1: config 0 has no interface number 0 [ 87.430633][ T29] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 87.453054][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.463941][ T29] usb 4-1: Product: syz [ 87.468530][ T29] usb 4-1: Manufacturer: syz [ 87.473342][ T29] usb 4-1: SerialNumber: syz [ 87.500269][ T29] usb 4-1: config 0 descriptor?? [ 87.532755][ T29] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 87.581218][ T29] usb 4-1: selecting invalid altsetting 1 [ 87.603038][ T29] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 87.634365][ T5700] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 87.665678][ T29] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.702406][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 87.760763][ T29] usb 4-1: media controller created [ 87.780815][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 87.816959][ T5700] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.842919][ T5700] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.870162][ T5700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.891408][ T5700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.896882][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.938307][ T5700] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.949481][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.960081][ T5700] usb 5-1: Product: syz [ 88.048271][ T5700] usb 5-1: Manufacturer: syz [ 88.088959][ T5700] cdc_wdm 5-1:1.0: skipping garbage [ 88.597457][ T29] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 88.606664][ T29] zl10353_read_register: readreg error (reg=127, ret==-71) [ 88.618077][ T29] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 88.651733][ T5700] cdc_wdm 5-1:1.0: skipping garbage [ 88.716002][ T29] usb 4-1: USB disconnect, device number 3 [ 88.750810][ T5700] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 88.861671][ T5700] cdc_wdm 5-1:1.0: Unknown control protocol [ 88.896362][ T5700] usb 5-1: USB disconnect, device number 8 [ 88.942346][ T24] usb 2-1: USB disconnect, device number 3 [ 89.224090][ T5700] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 89.314315][ T5623] Bluetooth: hci0: command tx timeout [ 89.344107][ T6109] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 89.466564][ T5700] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.486873][ T5700] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.513091][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 89.513103][ T30] audit: type=1400 audit(1779630466.188:335): avc: denied { mount } for pid=6108 comm="syz.1.68" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.543312][ T5700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.561974][ T5700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.589551][ T5700] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.609607][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.630440][ T5700] usb 5-1: Product: syz [ 89.642368][ T30] audit: type=1400 audit(1779630466.318:336): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.664960][ T5700] usb 5-1: Manufacturer: syz [ 89.691511][ T5700] cdc_wdm 5-1:1.0: skipping garbage [ 89.706022][ T5700] cdc_wdm 5-1:1.0: skipping garbage [ 89.717240][ T30] audit: type=1400 audit(1779630466.358:337): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.754799][ T5700] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 89.770619][ T5700] cdc_wdm 5-1:1.0: Unknown control protocol [ 89.831059][ T6128] loop4: detected capacity change from 0 to 7 [ 89.960313][ T6128] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 89.987755][ T24] usb 5-1: USB disconnect, device number 9 [ 90.046253][ T6128] loop4: partition table partially beyond EOD, truncated [ 90.095579][ T6128] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 90.113306][ T6137] syz_tun: entered allmulticast mode [ 90.115894][ T30] audit: type=1400 audit(1779630466.788:338): avc: denied { setopt } for pid=6136 comm="syz.2.73" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.153611][ T6137] syz_tun: left allmulticast mode [ 90.267729][ T30] audit: type=1400 audit(1779630466.928:339): avc: denied { create } for pid=6140 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.299189][ T30] audit: type=1400 audit(1779630466.968:340): avc: denied { connect } for pid=6140 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.393727][ T30] audit: type=1400 audit(1779630466.968:341): avc: denied { bind } for pid=6140 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.461132][ T30] audit: type=1400 audit(1779630467.038:342): avc: denied { write } for pid=6140 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.510622][ T30] audit: type=1400 audit(1779630467.058:343): avc: denied { getopt } for pid=6140 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.551937][ T4977] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 90.560229][ T30] audit: type=1400 audit(1779630467.098:344): avc: denied { ioctl } for pid=6144 comm="syz.2.74" path="socket:[9542]" dev="sockfs" ino=9542 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.566582][ T4977] loop4: partition table partially beyond EOD, truncated [ 90.615256][ T4977] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 90.739333][ T6155] Illegal XDP return value 4294967294 on prog (id 7) dev syz_tun, expect packet loss! [ 90.750550][ T6158] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 90.934904][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 91.221922][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 91.240636][ T6158] bond1: entered promiscuous mode [ 91.264246][ T6158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.954336][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.659778][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.691883][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 92.738027][ T29] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 92.767759][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.868048][ T29] usb 5-1: Product: syz [ 92.983123][ T6199] 9p: Bad value for 'port' [ 93.321563][ T29] usb 5-1: Manufacturer: syz [ 93.327528][ T29] usb 5-1: SerialNumber: syz [ 94.073674][ T6206] 9p: Bad value for 'port' [ 94.077311][ T6172] input: syz1 as /devices/virtual/input/input8 [ 94.138699][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.281142][ T6225] netlink: 64 bytes leftover after parsing attributes in process `syz.1.90'. [ 94.377164][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.802024][ T29] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 94.837304][ T29] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 95.197617][ T29] usb 5-1: failed to enable PITCH for EP 0x1 [ 95.229090][ T29] usb 5-1: unit 2 not found! [ 95.246721][ T29] usb 5-1: unit 0 not found! [ 95.356307][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 95.356323][ T30] audit: type=1400 audit(1779630472.038:358): avc: denied { nlmsg_write } for pid=6237 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 95.460301][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 95.483267][ T30] audit: type=1400 audit(1779630472.098:359): avc: denied { write } for pid=6236 comm="syz.1.93" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.513040][ T29] usb 5-1: USB disconnect, device number 10 [ 95.610686][ T6242] netlink: 64 bytes leftover after parsing attributes in process `syz.0.95'. [ 95.664450][ T5700] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 95.812847][ T6254] syzkaller0: entered promiscuous mode [ 95.826318][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.838254][ T6254] syzkaller0: entered allmulticast mode [ 95.872429][ T5700] usb 4-1: device descriptor read/64, error -71 [ 95.899794][ T30] audit: type=1400 audit(1779630472.578:360): avc: denied { write } for pid=6230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.058137][ T30] audit: type=1400 audit(1779630472.738:361): avc: denied { write } for pid=6263 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.144085][ T5700] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 96.182276][ T6272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.101'. [ 96.252753][ T6275] loop4: detected capacity change from 0 to 7 [ 96.281883][ T6275] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 96.294148][ T6275] loop4: partition table partially beyond EOD, truncated [ 96.306358][ T6275] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 96.318323][ T5700] usb 4-1: device descriptor read/64, error -71 [ 96.420431][ T30] audit: type=1400 audit(1779630473.098:362): avc: denied { ioctl } for pid=6278 comm="syz.0.103" path="socket:[10564]" dev="sockfs" ino=10564 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.455249][ T5700] usb usb4-port1: attempt power cycle [ 97.304163][ T5700] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 97.361884][ T30] audit: type=1400 audit(1779630474.028:363): avc: denied { create } for pid=6291 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.720395][ T5700] usb 4-1: device descriptor read/8, error -71 [ 99.682031][ T6308] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 100.489295][ T30] audit: type=1400 audit(1779630477.168:364): avc: denied { ioctl } for pid=6320 comm="syz.2.114" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 100.516280][ T6321] netlink: 32 bytes leftover after parsing attributes in process `syz.2.114'. [ 100.710637][ T30] audit: type=1400 audit(1779630477.388:365): avc: denied { map } for pid=6323 comm="syz.4.116" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 101.101048][ T30] audit: type=1400 audit(1779630477.388:366): avc: denied { execute } for pid=6323 comm="syz.4.116" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 101.135317][ T30] audit: type=1400 audit(1779630477.608:367): avc: denied { unmount } for pid=6322 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.774086][ T5700] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 101.861319][ T6341] Bluetooth: MGMT ver 1.23 [ 101.956517][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.969875][ T5700] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 101.980176][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.997112][ T5700] usb 5-1: config 0 descriptor?? [ 102.184258][ T5724] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.399354][ T5724] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 102.494748][ T30] audit: type=1400 audit(1779630479.168:368): avc: denied { mount } for pid=6332 comm="syz.4.119" name="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 102.744564][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.756701][ T5724] usb 3-1: config 0 descriptor?? [ 102.911522][ T6350] usb usb7: usbfs: process 6350 (syz.4.119) did not claim interface 0 before use [ 103.089485][ T5700] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 103.594079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.904109][ T5724] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 103.916537][ T5724] [drm:udl_init] *ERROR* Selecting channel failed [ 103.923488][ T5700] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input10 [ 103.977689][ T5724] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 103.989709][ T5724] [drm] Initialized udl on minor 2 [ 103.999546][ T5724] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 104.044446][ T5724] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 104.081134][ T5717] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 104.090204][ T5724] usb 3-1: USB disconnect, device number 4 [ 104.208284][ T5717] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 104.665308][ T5700] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 105.187975][ T5700] usb 5-1: USB disconnect, device number 11 [ 106.507522][ T30] audit: type=1400 audit(1779630483.188:369): avc: denied { setopt } for pid=6367 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.536316][ T6361] fido_id[6361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 107.833552][ T30] audit: type=1400 audit(1779630484.508:370): avc: denied { ioctl } for pid=6379 comm="syz.0.135" path="socket:[10070]" dev="sockfs" ino=10070 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.226875][ T6389] fuse: Bad value for 'fd' [ 108.641773][ T6391] trusted_key: encrypted_key: master key parameter '' is invalid [ 108.653072][ T6391] trusted_key: encrypted_key: keylen parameter is missing [ 108.922597][ T30] audit: type=1400 audit(1779630485.598:371): avc: denied { ioctl } for pid=6392 comm="syz.2.128" path="socket:[10079]" dev="sockfs" ino=10079 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.949663][ T6401] fuse: Bad value for 'fd' [ 109.163203][ T30] audit: type=1400 audit(1779630485.838:372): avc: denied { connect } for pid=6409 comm="syz.2.143" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.259301][ T6413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.144'. [ 109.342866][ T6417] lo speed is unknown, defaulting to 1000 [ 109.351370][ T6417] lo speed is unknown, defaulting to 1000 [ 109.378741][ T6417] lo speed is unknown, defaulting to 1000 [ 109.418086][ T6417] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 109.434438][ T6417] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 109.451751][ T6417] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 109.495734][ T6417] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.577666][ T6417] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.774438][ T30] audit: type=1400 audit(1779630486.238:373): avc: denied { ioctl } for pid=6411 comm="syz.0.144" path="socket:[10151]" dev="sockfs" ino=10151 ioctlcmd=0x583c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.830512][ T6417] lo speed is unknown, defaulting to 1000 [ 109.848423][ T6417] lo speed is unknown, defaulting to 1000 [ 109.864055][ T6417] lo speed is unknown, defaulting to 1000 [ 109.878336][ T6417] lo speed is unknown, defaulting to 1000 [ 109.893646][ T6417] lo speed is unknown, defaulting to 1000 [ 109.907705][ T6417] lo speed is unknown, defaulting to 1000 [ 110.498960][ T30] audit: type=1400 audit(1779630487.178:374): avc: denied { create } for pid=6411 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.522050][ T6419] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 110.529778][ T6419] netlink: 96 bytes leftover after parsing attributes in process `syz.0.144'. [ 110.538855][ T6419] netlink: 658 bytes leftover after parsing attributes in process `syz.0.144'. [ 110.761091][ T30] audit: type=1400 audit(1779630487.178:375): avc: denied { setopt } for pid=6411 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.198790][ T30] audit: type=1400 audit(1779630487.198:376): avc: denied { map } for pid=6411 comm="syz.0.144" path="socket:[10855]" dev="sockfs" ino=10855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.221806][ T30] audit: type=1400 audit(1779630487.198:377): avc: denied { read accept } for pid=6411 comm="syz.0.144" path="socket:[10855]" dev="sockfs" ino=10855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.247691][ T30] audit: type=1400 audit(1779630487.548:378): avc: denied { write } for pid=6420 comm="syz.3.146" path="socket:[10165]" dev="sockfs" ino=10165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.681301][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 111.681318][ T30] audit: type=1400 audit(1779630488.358:381): avc: denied { read } for pid=6430 comm="syz.1.148" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 111.734310][ T30] audit: type=1400 audit(1779630488.358:382): avc: denied { open } for pid=6430 comm="syz.1.148" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 111.914466][ T6433] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 112.036506][ T6432] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 112.089135][ T30] audit: type=1400 audit(1779630488.478:383): avc: denied { ioctl } for pid=6430 comm="syz.1.148" path="mnt:[4026532791]" dev="nsfs" ino=4026532791 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.196869][ T30] audit: type=1400 audit(1779630488.538:384): avc: denied { ioctl } for pid=6430 comm="syz.1.148" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x6448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 112.240207][ T30] audit: type=1400 audit(1779630488.538:385): avc: denied { connect } for pid=6430 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.432907][ T30] audit: type=1400 audit(1779630489.108:386): avc: denied { connect } for pid=6438 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.464592][ T5700] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.547978][ T30] audit: type=1400 audit(1779630489.228:387): avc: denied { mounton } for pid=6441 comm="syz.0.151" path="/35/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 112.634201][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 112.641473][ T5700] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 112.653787][ T5700] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.663021][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.671261][ T5700] usb 3-1: Product: syz [ 112.675672][ T5700] usb 3-1: Manufacturer: syz [ 112.680334][ T5700] usb 3-1: SerialNumber: syz [ 112.688423][ T5700] usb 3-1: config 0 descriptor?? [ 112.695503][ T6436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.569095][ T5700] usb 3-1: USB disconnect, device number 5 [ 113.637487][ T30] audit: type=1400 audit(1779630490.318:388): avc: denied { wake_alarm } for pid=6452 comm="syz.0.153" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.726281][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 113.771868][ T30] audit: type=1400 audit(1779630490.448:389): avc: denied { create } for pid=6452 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 114.155709][ T6466] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.514237][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.717734][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 114.850578][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.949571][ T24] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.047119][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 115.057872][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.078494][ T24] usb 2-1: Product: syz [ 115.091346][ T24] usb 2-1: Manufacturer: syz [ 115.091367][ T24] usb 2-1: SerialNumber: syz [ 115.116246][ T24] snd-ua101 2-1:1.1: invalid bNumEndpoints [ 115.138709][ T24] snd-ua101 2-1:1.0: invalid num_altsetting [ 115.163662][ T30] audit: type=1400 audit(1779630491.838:390): avc: denied { append } for pid=6476 comm="syz.0.161" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.518651][ T24] usb 2-1: USB disconnect, device number 4 [ 116.372089][ T6481] 9p: Bad value for 'port' [ 116.584147][ T5700] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.778183][ T5700] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.872514][ T5700] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.891131][ T5700] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.909449][ T5700] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.386908][ T5700] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.406498][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.414909][ T5700] usb 3-1: Product: syz [ 117.420687][ T5700] usb 3-1: Manufacturer: syz [ 117.435525][ T5700] cdc_wdm 3-1:1.0: skipping garbage [ 117.452850][ T5700] cdc_wdm 3-1:1.0: skipping garbage [ 117.465854][ T5700] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 117.471872][ T5700] cdc_wdm 3-1:1.0: Unknown control protocol [ 117.585253][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 117.585268][ T30] audit: type=1400 audit(1779630494.268:399): avc: denied { mounton } for pid=6512 comm="syz.4.171" path="/proc/87/task" dev="proc" ino=11175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 118.954178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.187267][ T30] audit: type=1400 audit(1779630495.868:400): avc: denied { read } for pid=6536 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.661015][ T30] audit: type=1400 audit(1779630496.338:401): avc: denied { create } for pid=6530 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.736310][ T6547] syzkaller0: entered promiscuous mode [ 119.742019][ T6547] syzkaller0: entered allmulticast mode [ 119.853506][ T29] usb 3-1: USB disconnect, device number 6 [ 120.150132][ T30] audit: type=1326 audit(1779630496.828:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.2.183" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c899ce59 code=0x7ffc0000 [ 120.211539][ T30] audit: type=1326 audit(1779630496.828:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.2.183" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c899ce59 code=0x7ffc0000 [ 120.240432][ T30] audit: type=1326 audit(1779630496.828:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.2.183" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c899ce59 code=0x7ffc0000 [ 120.269679][ T30] audit: type=1326 audit(1779630496.828:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.2.183" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c899ce59 code=0x7ffc0000 [ 120.300229][ T30] audit: type=1326 audit(1779630496.858:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.2.183" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f12c899ce59 code=0x7ffc0000 [ 120.328211][ T5717] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.362602][ T30] audit: type=1326 audit(1779630496.858:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.2.183" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c899ce59 code=0x7ffc0000 [ 120.390598][ T30] audit: type=1326 audit(1779630496.918:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6551 comm="syz.2.183" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12c895d68e code=0x7ffc0000 [ 120.522961][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 120.535263][ T5717] usb 1-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 120.548154][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.555190][ T5717] usb 1-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 120.565314][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.213645][ T5700] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.248347][ T5717] usb 1-1: config 0 descriptor?? [ 121.384103][ T5700] usb 2-1: Using ep0 maxpacket: 8 [ 121.496526][ T5700] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 121.519245][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.531538][ T5700] usb 2-1: Product: syz [ 121.535950][ T5700] usb 2-1: Manufacturer: syz [ 121.540646][ T5700] usb 2-1: SerialNumber: syz [ 121.922162][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 121.934546][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 121.941574][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 121.948838][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 121.955886][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 121.963065][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 121.970172][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 121.977377][ T5724] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 121.987732][ T5700] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 121.996472][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 122.004336][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 122.012379][ T5700] usb 2-1: clock source 0 is not valid, cannot use [ 122.022627][ T5717] lenovo 0003:04B3:3108.0003: unknown main item tag 0x0 [ 122.042961][ T5717] lenovo 0003:04B3:3108.0003: hidraw0: USB HID v0.0b Device [HID 04b3:3108] on usb-dummy_hcd.0-1/input0 [ 122.154783][ T5717] usb 1-1: USB disconnect, device number 2 [ 122.162192][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.189782][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 122.223682][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.258066][ T5746] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.265201][ T5724] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 122.279441][ T5700] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 122.299588][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.311024][ T5700] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 122.327448][ T5724] usb 5-1: config 0 descriptor?? [ 122.336001][ T5700] usb 2-1: clock source 0 is not valid, cannot use [ 122.345102][ T6574] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 122.352449][ T5700] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 122.366152][ T5700] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 122.424245][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 122.453073][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 122.533511][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.574395][ T5746] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.611725][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14385, setting to 1024 [ 122.667306][ T5746] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 122.722048][ T5746] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 122.775201][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.829309][ T5700] usb 2-1: USB disconnect, device number 5 [ 122.839129][ T5746] usb 3-1: config 0 descriptor?? [ 122.846597][ T5724] cypress 0003:04B4:07B1.0004: hidraw0: USB HID v0.08 Device [HID 04b4:07b1] on usb-dummy_hcd.4-1/input0 [ 122.903848][ T6580] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 123.002171][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 123.088606][ T5724] usb 5-1: USB disconnect, device number 12 [ 123.450830][ T6595] netlink: 'syz.1.195': attribute type 3 has an invalid length. [ 123.662410][ T6580] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 123.747418][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 123.747438][ T30] audit: type=1400 audit(1779630500.428:539): avc: denied { append } for pid=6597 comm="syz.0.196" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.963113][ T30] audit: type=1400 audit(1779630500.458:540): avc: denied { open } for pid=6597 comm="syz.0.196" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.063675][ T30] audit: type=1400 audit(1779630500.458:541): avc: denied { ioctl } for pid=6597 comm="syz.0.196" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.155503][ T30] audit: type=1400 audit(1779630500.698:542): avc: denied { listen } for pid=6597 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.232832][ T30] audit: type=1400 audit(1779630500.698:543): avc: denied { accept } for pid=6597 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.239445][ T5700] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 124.705742][ T5724] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.996576][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 125.004296][ T5724] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 125.013756][ T5700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.021914][ T5724] usb 5-1: config 0 has no interface number 0 [ 125.028427][ T5724] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.028726][ T29] usb 3-1: USB disconnect, device number 7 [ 125.029498][ T5623] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 125.053961][ T5700] usb 2-1: not running at top speed; connect to a high speed hub [ 125.062010][ T5724] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.072500][ T5724] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 125.081862][ T5700] usb 2-1: config 6 has an invalid interface number: 217 but max is 0 [ 125.090137][ T5700] usb 2-1: config 6 has no interface number 0 [ 125.096266][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.105081][ T5700] usb 2-1: config 6 interface 217 has no altsetting 0 [ 125.114145][ T5724] usb 5-1: config 0 descriptor?? [ 125.121571][ T5700] usb 2-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=7e.2f [ 125.136449][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.154062][ T5700] usb 2-1: Product: syz [ 125.158360][ T5700] usb 2-1: Manufacturer: syz [ 125.163029][ T5700] usb 2-1: SerialNumber: syz [ 125.406398][ T5700] hub 2-1:6.217: bad descriptor, ignoring hub [ 125.413346][ T5700] hub 2-1:6.217: probe with driver hub failed with error -5 [ 125.421614][ T5700] keyspan 2-1:6.217: Keyspan - (without firmware) converter detected [ 125.487002][ T5700] usb 2-1: USB disconnect, device number 6 [ 125.496843][ T5700] keyspan 2-1:6.217: device disconnected [ 125.527374][ T5724] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input2 [ 126.007740][ T30] audit: type=1400 audit(1779630502.688:544): avc: denied { ioctl } for pid=6628 comm="syz.1.207" path="socket:[11602]" dev="sockfs" ino=11602 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.063407][ T6631] unsupported nlmsg_type 40 [ 126.215758][ T30] audit: type=1400 audit(1779630502.888:545): avc: denied { read append } for pid=6634 comm="syz.1.210" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 126.316098][ T6642] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 126.324681][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.1.210'. [ 126.439624][ T30] audit: type=1400 audit(1779630502.888:546): avc: denied { open } for pid=6634 comm="syz.1.210" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 126.512607][ T6643] FAULT_INJECTION: forcing a failure. [ 126.512607][ T6643] name failslab, interval 1, probability 0, space 0, times 1 [ 126.577129][ T30] audit: type=1400 audit(1779630502.898:547): avc: denied { write } for pid=6634 comm="syz.1.210" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 126.610236][ T6643] CPU: 0 UID: 0 PID: 6643 Comm: syz.0.212 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.610266][ T6643] Tainted: [L]=SOFTLOCKUP [ 126.610272][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.610282][ T6643] Call Trace: [ 126.610288][ T6643] [ 126.610295][ T6643] dump_stack_lvl+0x100/0x190 [ 126.610323][ T6643] should_fail_ex.cold+0x5/0xa [ 126.610348][ T6643] ? tomoyo_encode2+0xfb/0x3c0 [ 126.610372][ T6643] should_failslab+0xc2/0x120 [ 126.610396][ T6643] __kmalloc_noprof+0xe0/0x850 [ 126.610421][ T6643] ? d_absolute_path+0x136/0x1b0 [ 126.610446][ T6643] tomoyo_encode2+0xfb/0x3c0 [ 126.610475][ T6643] tomoyo_encode+0x29/0x50 [ 126.610498][ T6643] tomoyo_realpath_from_path+0x18c/0x690 [ 126.610528][ T6643] tomoyo_path_number_perm+0x23c/0x580 [ 126.610550][ T6643] ? tomoyo_path_number_perm+0x22e/0x580 [ 126.610574][ T6643] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.610621][ T6643] ? find_held_lock+0x2b/0x80 [ 126.610639][ T6643] ? __fget_files+0x215/0x3d0 [ 126.610661][ T6643] ? hook_file_ioctl_common+0x149/0x410 [ 126.610677][ T6643] ? __fget_files+0x215/0x3d0 [ 126.610704][ T6643] ? __fget_files+0x21f/0x3d0 [ 126.610730][ T6643] security_file_ioctl+0xd3/0x230 [ 126.610756][ T6643] __x64_sys_ioctl+0xb7/0x210 [ 126.610777][ T6643] do_syscall_64+0x10b/0xf80 [ 126.610803][ T6643] ? clear_bhb_loop+0x40/0x90 [ 126.610832][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.610850][ T6643] RIP: 0033:0x7f5e38d9ce59 [ 126.610865][ T6643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.610881][ T6643] RSP: 002b:00007f5e39c0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.610898][ T6643] RAX: ffffffffffffffda RBX: 00007f5e39015fa0 RCX: 00007f5e38d9ce59 [ 126.610909][ T6643] RDX: 00002000000016c0 RSI: 00000000000007b0 RDI: 0000000000000003 [ 126.610919][ T6643] RBP: 00007f5e39c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 126.610928][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.610938][ T6643] R13: 00007f5e39016038 R14: 00007f5e39015fa0 R15: 00007ffe84d4cda8 [ 126.610962][ T6643] [ 126.964652][ T5724] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 126.986425][ T30] audit: type=1400 audit(1779630502.928:548): avc: denied { create } for pid=6634 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.133584][ T6643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.255114][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.263501][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.672021][ T6653] capability: warning: `syz.4.215' uses deprecated v2 capabilities in a way that may be insecure [ 127.737766][ T6656] can0: slcan on ttyS3. [ 128.155287][ T5700] usb 5-1: USB disconnect, device number 13 [ 129.105457][ T6654] can0 (unregistered): slcan off ttyS3. [ 129.346543][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 129.346557][ T30] audit: type=1400 audit(1779630506.028:554): avc: denied { ioctl } for pid=6669 comm="syz.2.223" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.536002][ T5622] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 129.545627][ T5622] Bluetooth: hci3: Injecting HCI hardware error event [ 129.554985][ T5622] Bluetooth: hci3: hardware error 0x00 [ 129.982290][ T30] audit: type=1400 audit(1779630506.308:555): avc: denied { ioctl } for pid=6669 comm="syz.2.223" path="socket:[12442]" dev="sockfs" ino=12442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.283710][ T30] audit: type=1400 audit(1779630506.958:556): avc: denied { bind } for pid=6683 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.349710][ T30] audit: type=1400 audit(1779630507.018:557): avc: denied { getopt } for pid=6683 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.427011][ T30] audit: type=1400 audit(1779630507.018:558): avc: denied { setopt } for pid=6683 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.487300][ T30] audit: type=1400 audit(1779630507.128:559): avc: denied { ioctl } for pid=6686 comm="syz.4.228" path="socket:[11691]" dev="sockfs" ino=11691 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.548749][ T30] audit: type=1400 audit(1779630507.148:560): avc: denied { read } for pid=6686 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.964114][ T5700] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.336119][ T5700] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.356210][ T5700] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.371680][ T6713] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.235' sets config #0 [ 131.398971][ T5700] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.425754][ T5700] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.540415][ T5700] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.573134][ T30] audit: type=1400 audit(1779630508.248:561): avc: denied { relabelfrom } for pid=6714 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.124256][ T5622] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 132.544769][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.553103][ T5700] usb 3-1: Product: syz [ 132.557301][ T5700] usb 3-1: Manufacturer: syz [ 132.563493][ T30] audit: type=1400 audit(1779630508.248:562): avc: denied { relabelto } for pid=6714 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.590111][ T5700] cdc_wdm 3-1:1.0: skipping garbage [ 132.611010][ T5700] cdc_wdm 3-1:1.0: skipping garbage [ 132.621678][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 132.632605][ T5700] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 132.647076][ T5700] cdc_wdm 3-1:1.0: Unknown control protocol [ 133.830399][ T30] audit: type=1400 audit(1779630510.178:563): avc: denied { mount } for pid=6728 comm="syz.3.238" name="/" dev="autofs" ino=11738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 134.319863][ T6745] trusted_key: encrypted_key: insufficient parameters specified [ 134.330430][ T6745] trusted_key: encrypted_key: insufficient parameters specified [ 134.386288][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 134.534089][ T5700] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.719026][ T5700] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 134.744925][ T5700] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 134.755697][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 134.755713][ T30] audit: type=1400 audit(1779630511.438:565): avc: denied { mounton } for pid=6756 comm="syz.4.247" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 134.765631][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.805474][ T5724] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.807910][ T6762] 9p: Bad value for 'port' [ 134.820685][ T30] audit: type=1400 audit(1779630511.488:566): avc: denied { mounton } for pid=6756 comm="syz.4.247" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 134.834589][ T5700] usb 1-1: Product: syz [ 134.851164][ T5700] usb 1-1: Manufacturer: syz [ 134.855927][ T5700] usb 1-1: SerialNumber: syz [ 134.870623][ T5700] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 134.966564][ T5724] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.975399][ T5724] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 134.992504][ T5724] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.011833][ T5724] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.035776][ T5724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 135.061455][ T5724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.086276][ T5724] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.096166][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.107432][ T5724] usb 2-1: Product: syz [ 135.120007][ T5724] usb 2-1: Manufacturer: syz [ 135.134299][ T6755] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 135.142462][ T5724] cdc_wdm 2-1:1.0: skipping garbage [ 135.148271][ T5724] cdc_wdm 2-1:1.0: skipping garbage [ 135.166159][ T5724] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 135.177536][ T5724] cdc_wdm 2-1:1.0: Unknown control protocol [ 135.346494][ T30] audit: type=1400 audit(1779630512.028:567): avc: denied { read write } for pid=6753 comm="syz.1.246" name="cdc-wdm0" dev="devtmpfs" ino=2932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 135.349641][ T5724] usb 2-1: USB disconnect, device number 7 [ 135.497113][ T30] audit: type=1400 audit(1779630512.028:568): avc: denied { open } for pid=6753 comm="syz.1.246" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 135.556345][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 135.560013][ T24] usb 3-1: USB disconnect, device number 8 [ 135.563097][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 135.574811][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 135.593668][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.602288][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.623269][ T6755] cgroup: noprefix used incorrectly [ 135.636229][ T5700] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.648046][ T6769] syzkaller1: entered promiscuous mode [ 135.653530][ T6769] syzkaller1: entered allmulticast mode [ 135.669222][ T6770] ------------[ cut here ]------------ [ 135.670412][ T30] audit: type=1400 audit(1779630512.298:569): avc: denied { remount } for pid=6753 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 135.674896][ T6770] usb 1-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType c0 [ 135.703981][ T6770] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.0.243/6770 [ 135.714344][ T6770] Modules linked in: [ 135.716474][ T6771] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 135.719270][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.0.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.738270][ T6770] Tainted: [L]=SOFTLOCKUP [ 135.742590][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.753279][ T6770] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 135.758170][ T6771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6771 comm=syz.4.248 [ 135.759413][ T6770] Code: d2 74 5d 48 89 54 24 40 e8 df 45 b2 fa 4c 89 ef e8 27 51 df fe 48 89 c6 48 8d 3d dd 5c 8e 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 b3 45 b2 fa 89 ee bf ff 00 00 00 [ 135.790880][ T6770] RSP: 0018:ffffc900054df918 EFLAGS: 00010287 [ 135.796967][ T6770] RAX: ffffffff8c82ac20 RBX: ffff88803879a400 RCX: 0000000080000380 [ 135.804948][ T6770] RDX: ffff888021e8c3c0 RSI: ffffffff8c82ac20 RDI: ffffffff90e4c8f0 [ 135.808903][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 135.812913][ T6770] RBP: ffff88802ad79058 R08: 00000000000000c0 R09: 0000000000000000 [ 135.812928][ T6770] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803353ff80 [ 135.812939][ T6770] R13: ffff88802ad790b0 R14: 0000000080000380 R15: 00000000000000c0 [ 135.812953][ T6770] FS: 00007f5e39bc86c0(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 [ 135.855562][ T6770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.862333][ T6770] CR2: 000000110c37633f CR3: 0000000046d4b000 CR4: 00000000003526f0 [ 135.870787][ T6770] Call Trace: [ 135.874242][ T6770] [ 135.877180][ T6770] ? __init_swait_queue_head+0xca/0x150 [ 135.882745][ T6770] usb_start_wait_urb+0x10e/0x580 [ 135.887836][ T6770] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 135.893405][ T6770] ? __asan_memset+0x23/0x50 [ 135.898056][ T6770] usb_control_msg+0x328/0x4b0 [ 135.902825][ T6770] ? __pfx_usb_control_msg+0x10/0x10 [ 135.908181][ T6770] gl861_ctrl_msg+0x1a5/0x4a0 [ 135.912877][ T6770] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 135.918192][ T6770] gl861_i2c_master_xfer+0x545/0x690 [ 135.923504][ T6770] __i2c_transfer+0x5e9/0x1780 [ 135.928540][ T6770] ? __pfx___i2c_transfer+0x10/0x10 [ 135.933747][ T6770] ? rt_mutex_slowtrylock+0x93/0x100 [ 135.939183][ T6770] i2c_transfer+0x15f/0x380 [ 135.943676][ T6770] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 135.948749][ T6770] i2cdev_ioctl+0x19d/0x830 [ 135.953671][ T6770] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 135.959022][ T6770] ? selinux_file_ioctl+0x13b/0x290 [ 135.964357][ T6770] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 135.969384][ T6770] __x64_sys_ioctl+0x18e/0x210 [ 135.974303][ T6770] do_syscall_64+0x10b/0xf80 [ 135.978888][ T6770] ? clear_bhb_loop+0x40/0x90 [ 135.983552][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.989562][ T6770] RIP: 0033:0x7f5e38d9ce59 [ 135.993963][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.013937][ T6770] RSP: 002b:00007f5e39bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.022578][ T6770] RAX: ffffffffffffffda RBX: 00007f5e39016180 RCX: 00007f5e38d9ce59 [ 136.030762][ T6770] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000007 [ 136.039023][ T6770] RBP: 00007f5e38e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 136.047033][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.055594][ T6770] R13: 00007f5e39016218 R14: 00007f5e39016180 R15: 00007ffe84d4cda8 [ 136.063578][ T6770] [ 136.067014][ T6770] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 136.074296][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.0.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.085047][ T6770] Tainted: [L]=SOFTLOCKUP [ 136.089425][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.099458][ T6770] Call Trace: [ 136.102718][ T6770] [ 136.105631][ T6770] dump_stack_lvl+0x100/0x190 [ 136.110290][ T6770] vpanic+0x552/0x970 [ 136.114260][ T6770] ? __pfx_vpanic+0x10/0x10 [ 136.118773][ T6770] panic+0xd1/0xe0 [ 136.122500][ T6770] ? __pfx_panic+0x10/0x10 [ 136.126919][ T6770] check_panic_on_warn.cold+0x19/0x34 [ 136.132282][ T6770] ? usb_submit_urb+0x1573/0x1910 [ 136.137299][ T6770] __warn.cold+0x191/0x328 [ 136.141707][ T6770] __report_bug+0x296/0x3d0 [ 136.146204][ T6770] ? usb_submit_urb+0x1573/0x1910 [ 136.151216][ T6770] ? __pfx___report_bug+0x10/0x10 [ 136.156312][ T6770] ? mark_held_locks+0x40/0x70 [ 136.161066][ T6770] ? stack_depot_save_flags+0x479/0x9d0 [ 136.166602][ T6770] report_bug_entry+0xe1/0x290 [ 136.171365][ T6770] ? usb_submit_urb+0x157e/0x1910 [ 136.176385][ T6770] handle_bug+0x1cd/0x2a0 [ 136.180696][ T6770] exc_invalid_op+0x17/0x50 [ 136.185179][ T6770] asm_exc_invalid_op+0x1a/0x20 [ 136.190012][ T6770] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 136.195633][ T6770] Code: d2 74 5d 48 89 54 24 40 e8 df 45 b2 fa 4c 89 ef e8 27 51 df fe 48 89 c6 48 8d 3d dd 5c 8e 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 b3 45 b2 fa 89 ee bf ff 00 00 00 [ 136.215231][ T6770] RSP: 0018:ffffc900054df918 EFLAGS: 00010287 [ 136.221290][ T6770] RAX: ffffffff8c82ac20 RBX: ffff88803879a400 RCX: 0000000080000380 [ 136.229239][ T6770] RDX: ffff888021e8c3c0 RSI: ffffffff8c82ac20 RDI: ffffffff90e4c8f0 [ 136.237196][ T6770] RBP: ffff88802ad79058 R08: 00000000000000c0 R09: 0000000000000000 [ 136.245144][ T6770] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803353ff80 [ 136.253094][ T6770] R13: ffff88802ad790b0 R14: 0000000080000380 R15: 00000000000000c0 [ 136.261052][ T6770] ? usb_submit_urb+0x1569/0x1910 [ 136.266069][ T6770] ? __init_swait_queue_head+0xca/0x150 [ 136.271606][ T6770] usb_start_wait_urb+0x10e/0x580 [ 136.276635][ T6770] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 136.282169][ T6770] ? __asan_memset+0x23/0x50 [ 136.286760][ T6770] usb_control_msg+0x328/0x4b0 [ 136.291512][ T6770] ? __pfx_usb_control_msg+0x10/0x10 [ 136.296970][ T6770] gl861_ctrl_msg+0x1a5/0x4a0 [ 136.301708][ T6770] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 136.306926][ T6770] gl861_i2c_master_xfer+0x545/0x690 [ 136.312213][ T6770] __i2c_transfer+0x5e9/0x1780 [ 136.316968][ T6770] ? __pfx___i2c_transfer+0x10/0x10 [ 136.322145][ T6770] ? rt_mutex_slowtrylock+0x93/0x100 [ 136.327418][ T6770] i2c_transfer+0x15f/0x380 [ 136.331906][ T6770] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 136.336831][ T6770] i2cdev_ioctl+0x19d/0x830 [ 136.341316][ T6770] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 136.346318][ T6770] ? selinux_file_ioctl+0x13b/0x290 [ 136.351511][ T6770] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 136.356604][ T6770] __x64_sys_ioctl+0x18e/0x210 [ 136.361360][ T6770] do_syscall_64+0x10b/0xf80 [ 136.365958][ T6770] ? clear_bhb_loop+0x40/0x90 [ 136.370645][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.376526][ T6770] RIP: 0033:0x7f5e38d9ce59 [ 136.380925][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.400513][ T6770] RSP: 002b:00007f5e39bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.408909][ T6770] RAX: ffffffffffffffda RBX: 00007f5e39016180 RCX: 00007f5e38d9ce59 [ 136.416877][ T6770] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000007 [ 136.424836][ T6770] RBP: 00007f5e38e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 136.432803][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.440772][ T6770] R13: 00007f5e39016218 R14: 00007f5e39016180 R15: 00007ffe84d4cda8 [ 136.448748][ T6770] [ 136.452448][ T6770] Kernel Offset: disabled [ 136.456749][ T6770] Rebooting in 86400 seconds..