last executing test programs: 9m22.997766273s ago: executing program 3 (id=199): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x800}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0x700}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) openat$drirender128(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/133, 0x85}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/202, 0xca}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/122, 0x7a}], 0x9, &(0x7f0000000980)=""/142, 0x8e}, 0xf43c}], 0x1, 0x2, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) connect$inet(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 9m21.594036668s ago: executing program 3 (id=201): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0xeb8, 0x1008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) syz_emit_ethernet(0xd2, &(0x7f00000009c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0xc, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480), 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/38, 0x26}], 0x1, &(0x7f0000000540)=[@rights={{0x10}}], 0x46}, 0x12000) wait4(r3, &(0x7f0000000040), 0x8, &(0x7f00000003c0)) read$msr(r2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r5}, 0x1) socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75", 0x21) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xa, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 9m19.184345503s ago: executing program 3 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000037c0000040000000c0001800600060008"], 0x528}, 0x1, 0x11000000}, 0xc000) 9m18.341519923s ago: executing program 3 (id=210): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/75, 0x4b}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x7fffffff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) inotify_add_watch(r5, &(0x7f0000000100)='./file0/file0\x00', 0x10000000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000002380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000008e80)=[{&(0x7f0000007d80)=""/4093, 0xffd}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400d0000040801080000000000000000010000012c000480080000fef4080002400000000808000640800000000800034000100007"], 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000080) 9m17.124268333s ago: executing program 3 (id=214): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000580)="fa30c729667a48cedc240afac12600a70b2dca5b90973f416d93c4202e70ca123906365b86d9ba69fa1d49b2b9882a4dd79819a4c751356f85d27e544e96c3a60c988289784b2d0c8d9f6102c58c242c1721dbafb2557c8547e7d568ef70922ce53e7b6fb06f07115174f5f12b55254778268d6a04f60f57a327b9ec010fcae8ae29683778f1dff045c209b675b61292ef6be03ebe7b9ef60bec024c91ae6ca3852915852d03ae0c87ac065bb04cc3698da53d236822", 0xb6}, {0x0}, {0x0}], 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000008000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) r2 = dup(r1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_devices(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xb7, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x100, 0x8f}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fdatasync(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @multicast}, 0x10) 9m16.222840494s ago: executing program 3 (id=219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000000000ffcd0000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 9m0.963895496s ago: executing program 32 (id=219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000000000ffcd0000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 7m52.59417135s ago: executing program 4 (id=530): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5f73, 0xfffffffffffffe70) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="402477000000772180dbcdc06802ca7c788f537666c7b5e46713ee29641f7896a6c5fb63ccf08ac4a172d7cbe29423bc638c4b3c5bce30b821ab84714bab7d4b0f01c8d0eae9931852302fa76b2f77ce0272084383027910ce099a4b109b240d0a1ae52c5f7d2838b81cf521a963d6bbfde4ee669edfa54306bbd6f20a3a69fb3b70dd80a7ccab56a30b7ab861fd9eaff477341115b2b54a8609d795a6c2e80aa92ed2b6ba7d87ff5439325b10f4a87ede9a2cbb3e1d6553514f0cfafc000bd710d2c7b47093efaa78147b69d93d429a2a6b9c9053026b597d42e669855ccb8b410cb6a2a55585f218ddb67f4051e16c0bf7209ce0a229ab3af55eded618ec81e1ff9526454deb5f5f8a0f5f808f02e5822ad78f5344c787a225f40b78a7032c3691189f2f24530f9a389e2dad2736bb3cce2e5655993538df1a3fdf9c073aa59aebd1877db6424f9d052045e52b"], &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x40}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xc}, 0x10) 7m50.13783095s ago: executing program 4 (id=544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3e}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40400d0}, 0x4001) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_clone(0x100200, &(0x7f00000003c0)="c00a76901503eb63b1ebb1ddf605eac8fbe211489ba548e2e68e13cf2bf6448cb4ac3c852573ef3bdcdf53c314434281f6f45d65acade6e29632d89c75ac4e00c8ea4fa921e75fc3edf0db7823ca25151edde3e2d864aebf03ab63158bc3e89724c246c1c27bfca96e5b83283ad7220eee8422680ad36497dfa7f549507ebe4aa8986d645f40212a9fd133eb7e2028a6f349add60f94c1207d6bebe0e140959b2059dd5d284c42850a232bb3487aca52f7b1ee348b1b6c40de059026a84c8bdb25524a082778ff0b0ee32247ac70d1", 0xcf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="cb92e65f95c3aedaf0c7ebfdfa5ed17e49af3602438c16b13e7aaa8b0c3299bbaf62dbb3269863b0a05c762743716db0eef813f1b42074ea973e685897d1a2adf1f345d49f1c509b48f6b0e8da2040440403b7917a25114e0fb23331f37e97050ed3df518d7d88fc") getpgrp(r4) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x6908, 0x0, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 7m48.461760992s ago: executing program 4 (id=552): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) fstat(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r2) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x8, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e65, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) writev(r0, &(0x7f0000001700)=[{&(0x7f0000000280)="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", 0x113}], 0x1) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x590}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x5) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x13, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b3f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000008100000", @ANYBLOB], 0x48) fcntl$setsig(r10, 0xa, 0x21) connect$unix(r8, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000400)={0x0, 0x0, 0x115, 0xf5, ""/245}, &(0x7f0000000540)=0x115, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m46.171989175s ago: executing program 0 (id=559): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) fanotify_init(0x8, 0x0) epoll_create1(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) dup(r4) close_range(r2, 0xffffffffffffffff, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r8, 0x0, r8) 7m45.9620823s ago: executing program 0 (id=563): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000300)={0x9, 0x2, 0x98, 0xe6, &(0x7f0000000000)=[{}, {}]}) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001980)={{}, 0x5, 0x4, 0x1, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af00, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x37fffc, @empty, 0xfffffffd}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0x1}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9, 0x20}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x108, 0x9403, 0x4, 0x0, 0x2c0, 0x310, 0x4a8, 0x3d8, 0x310, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x4}, @empty, [0x0, 0xff000000], [], 'veth1\x00', 'pimreg\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private, [], 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x7ff, 0xfffffffc}}}, {{@ipv6={@empty, @loopback, [], [], 'bond_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0x1a0, 0x208, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv6=@mcast1, @ipv6=@remote, @ipv6=@mcast1}}, @common=@srh1={{0x90}, {0x73, 0x81, 0x6, 0x25, 0x5, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xff000000, 0xffffff00], [0xff000000, 0xff000000, 0xff000000], [0x0, 0x0, 0xff000000, 0xff], 0x24, 0x3004}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 7m38.231420109s ago: executing program 4 (id=569): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x92, &(0x7f0000000040)=""/146, 0x0, 0x700, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x54, 0x4) 7m36.390065567s ago: executing program 4 (id=570): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@multicast2}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x81}]}, 0x140}}, 0x0) 7m36.246350729s ago: executing program 0 (id=571): r0 = socket(0x2a, 0x2, 0xb6be) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) r2 = dup(r0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x2, 0x8, 0xffff, 0x6, 0x858, 0x7, 0x3, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x413360a0, 0x6, 0x800, 0x3, 0x1}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r3, 0xd0, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x3, @private0, 0x8}, @in6={0xa, 0x4e22, 0x5, @remote, 0x101}, @in6={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}}, 0x4048024) 7m35.820612984s ago: executing program 4 (id=577): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e23, 0x9, @empty, 0x9}}, {{0xa, 0x4e21, 0x6, @mcast1, 0x4eece80b}}}, 0x108) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x18000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x3fe, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1) 7m35.643228857s ago: executing program 0 (id=578): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9\xff\xdb2\"\x06T)\x1eVoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\xf3\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0xa5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x5, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(0x0, r6) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES64=r7, @ANYRESOCT=r5], 0x1c}}, 0x20008894) getpeername$ax25(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r8}, 0x8) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000000300)=""/104, 0x68) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x82, 0x0) 7m29.433586137s ago: executing program 0 (id=579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x2000000, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 7m27.020684517s ago: executing program 0 (id=584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x61f285, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0xa1168c0de899a025}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00000ca000/0x9000)=nil, 0x9000, 0x0, 0x111010, r2, 0x0) dup3(r2, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 7m19.447029117s ago: executing program 33 (id=577): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e23, 0x9, @empty, 0x9}}, {{0xa, 0x4e21, 0x6, @mcast1, 0x4eece80b}}}, 0x108) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x18000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x3fe, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1) 7m19.073778182s ago: executing program 2 (id=589): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x1000000) 7m12.254244061s ago: executing program 2 (id=590): syz_emit_ethernet(0x2a, 0x0, 0x0) (async, rerun: 64) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async, rerun: 64) fsopen(0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "c73a152d", {0x3, 0x103, 0x0, 0x4, 0x1, 0x5, 0x87}}) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x6, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xa, 0x4, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x20044000) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r4}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 7m11.836912457s ago: executing program 34 (id=584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x61f285, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0xa1168c0de899a025}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00000ca000/0x9000)=nil, 0x9000, 0x0, 0x111010, r2, 0x0) dup3(r2, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 7m11.614776382s ago: executing program 2 (id=593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000143, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000340)=""/59, &(0x7f0000000380)=0x3b) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100), 0x8) fsopen(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m7.167022335s ago: executing program 2 (id=594): symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1b) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x1, 0x0, 0x0) iopl(0x3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x6, &(0x7f000049efa0)={0x0, 0x1c, 0x4, @tid=r3}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000000c0), 0x4) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1_macvtap\x00', 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f00005d2000/0x2000)=nil, 0x2000, 0x1) lgetxattr(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) 7m5.506489707s ago: executing program 2 (id=596): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xa, 0x4, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x20044000) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/packet\x00') read$msr(r1, &(0x7f0000000180)=""/126, 0x7e) socket$packet(0x11, 0x3, 0x300) r2 = socket(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x11, 0x64, 0x0, 0x20000000) syz_fuse_handle_req(r1, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) 7m4.232873791s ago: executing program 2 (id=598): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000300)={0x9, 0x2, 0x98, 0xe6, &(0x7f0000000000)=[{}, {}]}) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001980)={{}, 0x5, 0x4, 0x1, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af00, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x37fffc, @empty, 0xfffffffd}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0x1}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9, 0x20}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x108, 0x9403, 0x4, 0x0, 0x2c0, 0x310, 0x4a8, 0x3d8, 0x310, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x4}, @empty, [0x0, 0xff000000], [], 'veth1\x00', 'pimreg\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private, [], 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x7ff, 0xfffffffc}}}, {{@ipv6={@empty, @loopback, [], [], 'bond_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0x1a0, 0x208, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv6=@mcast1, @ipv6=@remote, @ipv6=@mcast1}}, @common=@srh1={{0x90}, {0x73, 0x81, 0x6, 0x25, 0x5, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xff000000, 0xffffff00], [0xff000000, 0xff000000, 0xff000000], [0x0, 0x0, 0xff000000, 0xff], 0x24, 0x3004}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 6m48.960903826s ago: executing program 35 (id=598): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000300)={0x9, 0x2, 0x98, 0xe6, &(0x7f0000000000)=[{}, {}]}) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001980)={{}, 0x5, 0x4, 0x1, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af00, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x37fffc, @empty, 0xfffffffd}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0x1}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9, 0x20}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x108, 0x9403, 0x4, 0x0, 0x2c0, 0x310, 0x4a8, 0x3d8, 0x310, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x4}, @empty, [0x0, 0xff000000], [], 'veth1\x00', 'pimreg\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private, [], 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x7ff, 0xfffffffc}}}, {{@ipv6={@empty, @loopback, [], [], 'bond_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0x1a0, 0x208, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv6=@mcast1, @ipv6=@remote, @ipv6=@mcast1}}, @common=@srh1={{0x90}, {0x73, 0x81, 0x6, 0x25, 0x5, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xff000000, 0xffffff00], [0xff000000, 0xff000000, 0xff000000], [0x0, 0x0, 0xff000000, 0xff], 0x24, 0x3004}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 5m33.938164661s ago: executing program 6 (id=875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000000600000004004730081e949b93897bc3b0000070000007d01ff020000000004000000000000000001"], 0xfdef) 5m32.449474591s ago: executing program 6 (id=881): close(0xffffffffffffffff) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x3) 5m31.200398978s ago: executing program 6 (id=886): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x5885, 0x400, 0x0, 0x80003}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x11, 0x0, @fd_index=0x2, 0x0, 0x0, 0x90, 0x4}) (async, rerun: 64) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioperm(0x0, 0x35a, 0x80000001) (async) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) (async) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x4b90512) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) syz_open_dev$vbi(0x0, 0x0, 0x2) (async) unshare(0x30060600) (async, rerun: 64) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1e) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5m30.838103888s ago: executing program 6 (id=889): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) fsopen(&(0x7f0000000740)='zonefs\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x0, &(0x7f0000000000)={0x80000, 0x0, 0xfffffff8}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r5 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setpgid(r5, r2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x670, 0x480, 0x480, 0x480, 0xf8, 0x248, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0x118, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0xfff, 0x94, 0x4, 0x17, 0x6, 0x7ff, 0x0, 0x1, 0x0, 0xc, 0x9, 0x200, 0xda, 0x7, 0x7, 0xffff], 0x9}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], '\x00', 'dummy0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, @empty, [], [], [], 0x0, 0x2203}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x2, 0x1, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000d00)}}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 5m29.505863935s ago: executing program 6 (id=894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060500fff50000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5m28.746054034s ago: executing program 6 (id=902): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x3ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xa00000000000000}}, 0x1c) 5m27.850182957s ago: executing program 36 (id=902): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x3ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xa00000000000000}}, 0x1c) 15.879436021s ago: executing program 1 (id=2114): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 14.646714757s ago: executing program 1 (id=2117): getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x773, 0x677, 0x8, 0x3eb, 0x2, 0x80, 0x5c000000, 0x5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) r1 = socket(0x2, 0x80805, 0x0) fstat(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x150, 0x150, 0x0, 0x90a, 0x358, 0x238, 0x238, 0x358, 0x238, 0xf, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xffffff00], 'wlan1\x00', 'veth1\x00', {0xff}, {0xff}, 0x89, 0x4, 0x6, 0x3c}, 0x500, 0x208, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @mcast2, @remote, @mcast2, @private2, @dev, @loopback, @mcast2, @private0, @dev, @rand_addr=' \x01\x00', @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @private2, @dev]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xffffff80, 0xff000000, 0xffffffff, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'wg2\x00', {0xff}, {0xff}, 0x29, 0xff, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000077c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x13}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x3, @mcast1, 0x6}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) poll(&(0x7f0000000100)=[{}], 0x1, 0x9d) 8.536054307s ago: executing program 9 (id=2137): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) set_mempolicy(0x1, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdae, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x6a1e) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f000200000800000007000000", @ANYRES32=r8], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) epoll_create1(0x0) 7.509859245s ago: executing program 9 (id=2141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="08000000000000ebff01b3ffffefff00a0b04200043f6148d1ce275ccea6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200058c0}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfec9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@polexpire={0xcc, 0x1b, 0x1, 0xfffffffe, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x40, 0x2, 0x20}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 7.470202115s ago: executing program 8 (id=2142): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xb, 0x8, 0x7c, @local, @empty, 0x27, 0x80, 0x4, 0x4}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef]}, {0x0, [0x0]}}, &(0x7f0000000440)=""/125, 0x27, 0x7d, 0x1, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%ps \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', r0, r1, 0x3, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000009c0)={0x2c, &(0x7f0000000980)={0x0, 0x0, 0x7, {0x7, 0x0, "12279dfa7e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2a, @lang_id={0x4, 0x3, 0x40f}}, 0x0, 0x0, 0x0}, 0x0) 7.221933018s ago: executing program 1 (id=2143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000306010200000000000000000a00000105000100070000000900020073797a31"], 0x28}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r9, &(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000800009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 5.900207045s ago: executing program 9 (id=2146): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x58, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x100000000000000) 5.888638043s ago: executing program 1 (id=2147): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0xf00c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) getdents(r0, &(0x7f0000000300)=""/228, 0xe4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/179, 0xb3}, {&(0x7f0000000580)=""/119, 0x77}], 0x2, &(0x7f0000000740)=[{&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/59, 0x3b}], 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES8=0x0, @ANYRESOCT, @ANYRESDEC=r1], 0x0, 0x7fc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES32=r7], 0x24}}, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r4}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000410009002ebd7000feffffff0300000061bad8fdc49605209b0f149464900341da9440866a7582a138b34e944e63bc43bcc9197c0fb85f7d3f17c7abbf125187e56f11c2c982735c3c60350837f466c005cb4e867d4e"], 0x114}}, 0x0) 5.616500261s ago: executing program 9 (id=2151): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}, {@empty, 0x3}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.716722411s ago: executing program 9 (id=2152): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240), 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004904c) sendmsg$inet(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x44005) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@loopback}, {@remote, 0x48}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@remote}]}]}}}}}}}, 0x0) 4.488154202s ago: executing program 9 (id=2155): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e00000020000ffffffa4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 4.254811291s ago: executing program 5 (id=2158): sched_rr_get_interval(0x0, &(0x7f00000000c0)) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000500)={0x400, 0x0, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x44}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) close_range(r0, r2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x1400, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000d40)=[{{0x0, 0xffffff6f, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x2004c014}, 0x0) 3.069760583s ago: executing program 7 (id=2159): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9f5}, [@call={0x85, 0x0, 0x0, 0x66}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.87400461s ago: executing program 7 (id=2160): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000001b02000b0000000600ff7faaaaaa38aabbaaaaaaaaaa37e9144547441c"], 0x21) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="a909000000000cfddc6d3abeca20ff746400006277000043f5ef1393f2cd", 0x1e}, {&(0x7f0000000640)="174640af88", 0x5}], 0x2}}, {{&(0x7f0000000500)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="11000000000000000000000001000000e10000000000000010000000000000000000000007000000"], 0x140}}], 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc000801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='ext4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x2a020400) syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000f5, 0x2) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2.873461528s ago: executing program 5 (id=2161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x108, 0x2}, 0x18) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 2.447472738s ago: executing program 7 (id=2162): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000000400"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011140100000000000000000008004b"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.313221139s ago: executing program 8 (id=2163): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9f5}, [@call={0x85, 0x0, 0x0, 0x19}], {0x95, 0x0, 0x0, 0x40000000}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.622065363s ago: executing program 7 (id=2164): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6, 0x2, 0x5, 0x5, 0x5}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$FIBMAP(r6, 0x1, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) accept$alg(r7, 0x0, 0x0) sendto(r2, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 1.596106965s ago: executing program 8 (id=2165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x400000000000000}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000140)='./file0\x00', 0x100) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') 1.447033017s ago: executing program 5 (id=2166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x40000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e0001000000e300000000000a000000", @ANYRES32=r4, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) 1.365958777s ago: executing program 1 (id=2167): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07e444d640e27b500001000000400008000100000000000400098000"/38], 0x2c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="000080004000dab663ec5256a2a410"], 0x38}, 0x1, 0x300, 0x0, 0x40001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) sched_setscheduler(0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/145, 0x91}], 0x1) fsmount(r3, 0x0, 0x0) tkill(r4, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f0336082608123a2c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 1.345440173s ago: executing program 8 (id=2168): socket(0x1000000010, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x3, 0x8bc, 0x6}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0xfff0}, 0x0) 1.321643512s ago: executing program 5 (id=2169): mkdir(&(0x7f00000002c0)='./file0\x00', 0x78) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="6220aa"], 0xa) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x6) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f00000001c0)="d94040c676c231ed81c61c6f3f6a380ac2711bc16ee385d91d830702cd0407e5904b63cdd45b1cfbbae748b8931b9329dd615e2d8fbfbe8f7e4f095baeaddf642b28e60b772fbefcfb4b68dfdd2994cfe746c5197448f0bb962f156e10109ef563a437477a1a63d02333d8f34642bb3ee8bf26e7251acf01cf839f64ca15a2b7303f3c5d4fc04f", 0x87}], 0x2) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000500)="1c16c02033bc93a73da25d78e12d5abe3845ab49f454d6868a1071ad677502829bcc49c5ef1ff770031cc31a1304f8d2662f87bcf94ea4656b96ff3cf5e310d5f38e967063855daa7daa60d59ae9a0e897684a10d535e5aef1f8ee352d4f02a9cf8400b260b399dcec60044bfa20a881df73ba49d673eb3be4ad99e1b1c3bad5be3cb54e729ce2f4e4074dca058fbbee580c2a43c71aca604380a2e4d80fe32a86a0ae370125d737182a2d3f5f46314b2278231ba3773acfd85c16b2c213511b0fcd", 0xc2}, {&(0x7f0000000380)="ba95c04122c5ec925f8c7b23f81faac8bc20d5dc3c41e02fe5764dc6c14d2b821ab6f1f340f167dd0a63a82a905ca48ae18ce10688600f0131fca66d5fc4e8eee0ed3480acf26db70b8523a8278defde2fb8de0f1d7f870cb014a08351b9f439b0ea059cf920824b5dd8a6b9e3476329bf432b48f66206d552ecb8f94e54a28bfa1e2704d06115dfad144f1251de56bf1205bd4d6ef0", 0x96}, {&(0x7f0000000440)="41ae8951875ff057572e1444da6626d2662625a0e3cb09a299e5c826bb985a5587bd994a3405984bcfbf92cc88ac6920bd6303cb4f6054049dafd3071fe122fe71b69b772e7b014146950b850dfd202f2c9482e43a77552e654f353a0e9a88d5699712776561424b6322081782426427b0d0bd3fb89fb9d7778e2848cf1da1038308c50f6544ebf150ac506de28dc617beac3bbc00117333c85e3687572db39cdd846a83ab1f63000000000000", 0xad}, {&(0x7f0000000780)="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", 0x1000}], 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/16], 0x10) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000340)=0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000140)={[{0x6, 0xc, 0x9, 0xf3, 0x3, 0x7, 0xf9, 0x7, 0x6, 0x3, 0x2, 0x9, 0xffffffff8b9ff070}, {0x8, 0x7, 0x20, 0x2, 0x9, 0x6, 0x2, 0x0, 0x10, 0x0, 0xf2, 0x7, 0xb}, {0x101, 0x9, 0x5, 0x2, 0x1, 0x10, 0x7, 0xda, 0x8, 0xd1, 0xa, 0xf, 0x3}], 0xfffffffa}) 1.093981982s ago: executing program 5 (id=2170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setuid(0xee00) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x220) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x108000, 0x1) 1.078469915s ago: executing program 8 (id=2171): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_getaddr={0x70, 0x16, 0x20, 0x70bd26, 0x25dfdbfe, {0xa, 0x10, 0xc1, 0xfd, r6}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x42}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffe23) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r7, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffccf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r8}, 0x10) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r10, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aa7f0000010000000010000000000000000000ff"], 0x30}}], 0x1, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000100000004000018007000600666f000008000800000000000600010002000000080005"], 0x54}}, 0x0) 232.634388ms ago: executing program 7 (id=2172): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) clock_nanosleep(0xa, 0x1, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) 148.07322ms ago: executing program 5 (id=2173): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4122, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x6, 0x10}, &(0x7f0000000180)=0x90) (async) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10004085}, 0x800) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x5) 74.252248ms ago: executing program 8 (id=2174): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="12f8a2b2236d539f42b67e083fcd9b5de2cb490c038d25210290c4cc3afacede0f7d823ef5968c9a", 0x28}], 0x1}}, {{0x0, 0x0, 0x0}, 0x6000}], 0x2, 0x0) 26.164051ms ago: executing program 1 (id=2175): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000008000000001200000007000300", @ANYRES32=0x0, @ANYBLOB="b5652bc550d5035dce575c0000000010f1"], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000008000000001200000007000300", @ANYRES32=0x0, @ANYBLOB="b5652bc550d5035dce575c0000000010f1"], 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1083) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) write$selinux_load(r0, &(0x7f0000001080)={0xf97cff8c, 0x8, 'SE Linux', "85d34cf1ba0201c6baa275d8bcf42b52858eae65697879052eea72f7a79d041c352fb9541486793d8f74c15295fb3598"}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x7, 0x7, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xffffffee, 0x5f, 0x80a, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c77, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x5, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0xfffffffa, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x7, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xdbc1, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x3, 0x6, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0x2], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x20000b, 0x4, 0x800005, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0x7, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x7e, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x6, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x5, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x9, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x0, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x7, 0x7, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xffffffee, 0x5f, 0x80a, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c77, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x5, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0xfffffffa, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x7, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xdbc1, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x3, 0x6, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0x2], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x20000b, 0x4, 0x800005, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0x7, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x7e, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x6, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x5, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x9, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x0, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r6 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398ea, @val=@uprobe_multi={&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=[0x8], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 0s ago: executing program 7 (id=2176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x108, 0x2}, 0x18) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00010000000000fddbdf25010100800c0001000300000000000000140003002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ee22dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe810100000001000000ab9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): plantronics 0003:047F:FFFF.0011: item 0 4 0 12 parsing failed [ 547.727578][ T5898] plantronics 0003:047F:FFFF.0011: parse failed [ 547.732224][ T29] audit: type=1400 audit(1733847495.640:1061): avc: denied { setopt } for pid=11943 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 547.733870][ T5898] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 547.764575][ T29] audit: type=1400 audit(1733847495.640:1062): avc: denied { setopt } for pid=11945 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 548.034650][ T29] audit: type=1400 audit(1733847495.650:1063): avc: denied { create } for pid=11947 comm="syz.5.1571" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 548.244111][ T5869] usb 10-1: USB disconnect, device number 9 [ 548.290549][T11961] netlink: 19 bytes leftover after parsing attributes in process `syz.7.1572'. [ 549.794207][T11954] hsr_slave_1 (unregistering): left promiscuous mode [ 549.870672][T11976] bridge0: entered promiscuous mode [ 549.878109][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 549.887275][T11978] bridge_slave_1: left allmulticast mode [ 549.893317][T11978] bridge_slave_1: left promiscuous mode [ 549.899086][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.929474][T11978] bridge_slave_0: left allmulticast mode [ 549.935288][T11978] bridge_slave_0: left promiscuous mode [ 549.941089][T11978] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.304848][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 552.304885][ T29] audit: type=1400 audit(1733847500.590:1093): avc: denied { module_request } for pid=11997 comm="syz.9.1588" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 552.676705][ T29] audit: type=1400 audit(1733847500.890:1094): avc: denied { mount } for pid=11997 comm="syz.9.1588" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 552.736483][ T29] audit: type=1400 audit(1733847501.000:1095): avc: denied { create } for pid=12003 comm="syz.7.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 552.774466][ T29] audit: type=1400 audit(1733847501.000:1096): avc: denied { connect } for pid=12003 comm="syz.7.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 552.795676][ T29] audit: type=1400 audit(1733847501.000:1097): avc: denied { read write } for pid=12003 comm="syz.7.1589" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 552.939563][T12011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.366044][ T29] audit: type=1400 audit(1733847501.000:1098): avc: denied { open } for pid=12003 comm="syz.7.1589" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 553.460016][ T29] audit: type=1400 audit(1733847501.000:1099): avc: denied { ioctl } for pid=12003 comm="syz.7.1589" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 553.887955][ T29] audit: type=1400 audit(1733847501.060:1100): avc: denied { read } for pid=12003 comm="syz.7.1589" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 553.963006][ T29] audit: type=1400 audit(1733847501.060:1101): avc: denied { open } for pid=12003 comm="syz.7.1589" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 554.062670][ T29] audit: type=1400 audit(1733847501.812:1102): avc: denied { create } for pid=12015 comm="syz.8.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 554.293736][ T5870] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 554.469940][T12037] sp0: Synchronizing with TNC [ 554.478458][ T5870] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.521822][ T5870] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 554.541070][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.567733][ T5870] usb 8-1: config 0 descriptor?? [ 554.984500][T12023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.081824][T12023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.159030][ T5870] usbhid 8-1:0.0: can't add hid device: -71 [ 555.177636][ T5870] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 555.260875][ T5870] usb 8-1: USB disconnect, device number 19 [ 555.514772][T12047] xt_CT: No such helper "pptp" [ 555.627564][T12053] netlink: 168864 bytes leftover after parsing attributes in process `syz.8.1608'. [ 555.672994][T12053] openvswitch: netlink: Message has 44053 unknown bytes. [ 555.961258][T12053] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.124569][ T5870] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 556.365854][ T5870] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.406979][ T5870] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 556.476652][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.636275][ T5870] usb 8-1: config 0 descriptor?? [ 556.729109][T12062] pim6reg: entered allmulticast mode [ 556.736054][T12062] pim6reg: left allmulticast mode [ 557.656655][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 557.656672][ T29] audit: type=1400 audit(1733847505.959:1142): avc: denied { read } for pid=12021 comm="syz.7.1596" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 557.676687][ T29] audit: type=1400 audit(1733847505.979:1143): avc: denied { create } for pid=12021 comm="syz.7.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 557.736114][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 557.736140][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'. [ 557.805915][ T29] audit: type=1400 audit(1733847506.110:1144): avc: denied { setopt } for pid=12021 comm="syz.7.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 557.825691][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.843692][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1596'. [ 557.843733][T12071] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1596'. [ 557.844565][ T29] audit: type=1400 audit(1733847506.140:1145): avc: denied { setopt } for pid=12021 comm="syz.7.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 557.856487][T12078] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1615'. [ 559.041369][ T5870] usbhid 8-1:0.0: can't add hid device: -71 [ 559.095303][ T5870] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 559.140146][ T5870] usb 8-1: USB disconnect, device number 20 [ 559.316979][T12088] veth0_to_team: entered promiscuous mode [ 559.347685][ T29] audit: type=1400 audit(1733847507.642:1146): avc: denied { create } for pid=12089 comm="syz.1.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 559.369701][T12088] veth0_to_team: entered allmulticast mode [ 559.438508][ T29] audit: type=1400 audit(1733847507.682:1147): avc: denied { ioctl } for pid=12089 comm="syz.1.1619" path="socket:[31841]" dev="sockfs" ino=31841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 559.463282][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.596896][ T29] audit: type=1400 audit(1733847507.682:1148): avc: denied { create } for pid=12089 comm="syz.1.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 559.721859][ T29] audit: type=1400 audit(1733847507.692:1149): avc: denied { connect } for pid=12089 comm="syz.1.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 559.789374][ T29] audit: type=1400 audit(1733847507.783:1150): avc: denied { create } for pid=12089 comm="syz.1.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 559.809201][ T29] audit: type=1400 audit(1733847507.793:1151): avc: denied { accept } for pid=12089 comm="syz.1.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 560.736013][T12106] sp0: Synchronizing with TNC [ 560.959144][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 561.311678][ T117] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 561.539606][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 561.614600][ T117] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 561.632087][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.649617][ T117] usb 2-1: Product: syz [ 561.746691][ T117] usb 2-1: Manufacturer: syz [ 561.751575][ T117] usb 2-1: SerialNumber: syz [ 561.829893][ T117] r8152-cfgselector 2-1: Unknown version 0x0000 [ 561.836184][ T117] r8152-cfgselector 2-1: config 0 descriptor?? [ 562.139411][ T117] r8152-cfgselector 2-1: Unknown version 0x1070 [ 562.145999][ T117] r8152-cfgselector 2-1: bad CDC descriptors [ 562.291838][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1633'. [ 562.347240][T12133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.436195][T12133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.562034][T12133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.596214][T12133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.617065][ T117] r8152-cfgselector 2-1: USB disconnect, device number 35 [ 562.849120][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 562.849138][ T29] audit: type=1400 audit(1733847511.158:1158): avc: denied { read } for pid=12145 comm="syz.5.1635" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 562.935754][ T29] audit: type=1400 audit(1733847511.188:1159): avc: denied { open } for pid=12145 comm="syz.5.1635" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 563.016516][ T29] audit: type=1400 audit(1733847511.198:1160): avc: denied { ioctl } for pid=12145 comm="syz.5.1635" path="/dev/sg0" dev="devtmpfs" ino=743 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 563.125653][ T29] audit: type=1400 audit(1733847511.288:1161): avc: denied { create } for pid=12147 comm="syz.7.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 563.999867][ T29] audit: type=1400 audit(1733847511.479:1162): avc: denied { bind } for pid=12143 comm="syz.9.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 564.108368][T12154] can0: slcan on ttyS3. [ 564.215168][ T29] audit: type=1400 audit(1733847511.479:1163): avc: denied { name_bind } for pid=12143 comm="syz.9.1634" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 564.280778][ T29] audit: type=1400 audit(1733847511.479:1164): avc: denied { node_bind } for pid=12143 comm="syz.9.1634" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 564.424997][ T29] audit: type=1400 audit(1733847511.759:1165): avc: denied { shutdown } for pid=12143 comm="syz.9.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 564.453930][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.463275][ T29] audit: type=1400 audit(1733847511.759:1166): avc: denied { getopt } for pid=12143 comm="syz.9.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 564.536755][ T29] audit: type=1400 audit(1733847512.771:1167): avc: denied { ioctl } for pid=12160 comm="syz.9.1641" path="socket:[33003]" dev="sockfs" ino=33003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 564.728742][T12154] can0 (unregistered): slcan off ttyS3. [ 564.740004][T12173] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 564.871842][ T5869] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 565.038588][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'. [ 565.094128][T12180] vlan2: entered promiscuous mode [ 565.106568][ T5869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 565.108334][T12180] team0: entered promiscuous mode [ 565.115336][ T5869] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 565.134662][T12180] team_slave_0: entered promiscuous mode [ 565.164597][ T5869] usb 6-1: config 1 has no interface number 1 [ 565.170728][ T5869] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 565.173717][T12180] team_slave_1: entered promiscuous mode [ 565.197510][ T5869] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.213948][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.229862][ T5869] usb 6-1: Product: syz [ 565.235295][ T5869] usb 6-1: Manufacturer: syz [ 565.240098][ T5869] usb 6-1: SerialNumber: syz [ 566.761133][ T5817] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 566.910996][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 566.920406][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.931998][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.944198][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 566.958610][ T5817] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 566.968994][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.983021][ T5817] usb 2-1: config 0 descriptor?? [ 567.030864][ T5898] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 567.154454][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1658'. [ 567.191830][ T5898] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.212506][ T5898] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 567.222495][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.234020][ T5898] usb 8-1: config 0 descriptor?? [ 567.245939][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 567.479155][ T5817] hid (null): unknown global tag 0xc [ 567.485960][ T5817] hid (null): invalid report_count -888556264 [ 567.492722][ T5817] hid (null): unknown global tag 0xc [ 567.517660][ T5817] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0012/input/input57 [ 567.645833][ T5817] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0012/input/input58 [ 567.677315][T12199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.820549][ T5869] usb 6-1: found format II with max.bitrate = 26774, frame size=2 [ 567.828612][ T5869] usb 6-1: found format II with max.bitrate = 26774, frame size=2 [ 567.848587][ T5869] usb 6-1: failed to enable PITCH for EP 0x82 [ 567.852434][T12199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.854904][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 567.854918][ T29] audit: type=1400 audit(1733847516.026:1190): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3282 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 567.897398][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00 [ 567.921271][ T5898] pwc: recv_control_msg error -32 req 02 val 2700 [ 567.929513][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00 [ 567.936741][ T5898] pwc: recv_control_msg error -32 req 04 val 1000 [ 567.946659][ T5898] pwc: recv_control_msg error -32 req 04 val 1300 [ 568.011324][ T5898] pwc: recv_control_msg error -32 req 04 val 1400 [ 568.040769][ T5898] pwc: recv_control_msg error -32 req 02 val 2000 [ 568.050078][ T5817] kye 0003:0458:5011.0012: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 568.065781][ T5869] usb 6-1: USB disconnect, device number 28 [ 568.137625][ T5817] usb 2-1: USB disconnect, device number 36 [ 568.313110][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.473624][ T29] audit: type=1400 audit(1733847516.777:1191): avc: denied { execute } for pid=12229 comm="syz.9.1668" path="/163/memory.events" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 568.482935][ T5898] pwc: recv_control_msg error -71 req 02 val 2500 [ 568.512333][ T5898] pwc: recv_control_msg error -71 req 02 val 2400 [ 568.525828][ T5898] pwc: recv_control_msg error -71 req 02 val 2600 [ 568.541289][ T5898] pwc: recv_control_msg error -71 req 02 val 2900 [ 568.603884][ T5898] pwc: recv_control_msg error -71 req 02 val 2800 [ 568.641022][ T5898] pwc: recv_control_msg error -71 req 04 val 1100 [ 568.668299][ T5898] pwc: recv_control_msg error -71 req 04 val 1200 [ 568.681707][ T5898] pwc: Registered as video103. [ 568.696496][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input59 [ 568.721132][ T5898] usb 8-1: USB disconnect, device number 21 [ 568.737965][ T29] audit: type=1400 audit(1733847517.047:1192): avc: denied { read } for pid=12235 comm="syz.9.1670" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 568.783544][T12237] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1672'. [ 568.833787][ T29] audit: type=1400 audit(1733847517.077:1193): avc: denied { append } for pid=12234 comm="syz.1.1669" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 568.856728][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.882271][ T29] audit: type=1400 audit(1733847517.097:1194): avc: denied { create } for pid=12235 comm="syz.9.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 568.902544][ T29] audit: type=1400 audit(1733847517.097:1195): avc: denied { cmd } for pid=12235 comm="syz.9.1670" path="socket:[33182]" dev="sockfs" ino=33182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 568.925466][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.123629][ T5817] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 569.336287][ T5817] usb 10-1: device descriptor read/64, error -71 [ 569.968903][ T5817] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 570.139960][ T5817] usb 10-1: device descriptor read/64, error -71 [ 570.256351][ T5817] usb usb10-port1: attempt power cycle [ 570.626788][ T29] audit: type=1400 audit(1733847518.930:1196): avc: denied { write } for pid=12260 comm="syz.8.1679" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 570.650436][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.713614][T12265] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1680'. [ 570.776986][T12268] netlink: 'syz.7.1681': attribute type 1 has an invalid length. [ 570.786063][T12269] netlink: 'syz.7.1681': attribute type 21 has an invalid length. [ 570.794593][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1681'. [ 570.966019][ T5817] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 571.005085][ T5817] usb 10-1: device descriptor read/8, error -71 [ 571.861845][ T5817] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 572.144308][T12286] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1685'. [ 572.182483][ T5817] usb 10-1: device descriptor read/8, error -71 [ 572.312793][ T5817] usb usb10-port1: unable to enumerate USB device [ 572.733021][ T5870] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 573.008902][ T5870] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 573.555337][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.563472][ T5870] usb 9-1: Product: syz [ 573.567644][ T5870] usb 9-1: Manufacturer: syz [ 573.572333][ T5870] usb 9-1: SerialNumber: syz [ 573.579589][ T5870] usb 9-1: config 0 descriptor?? [ 573.865290][ T29] audit: type=1400 audit(1733847522.135:1197): avc: denied { block_suspend } for pid=12311 comm="syz.7.1694" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 573.971326][ T29] audit: type=1400 audit(1733847522.295:1198): avc: denied { listen } for pid=12288 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 574.144394][ T29] audit: type=1400 audit(1733847522.295:1199): avc: denied { accept } for pid=12288 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 575.081653][ T5870] usb 9-1: Firmware version (0.0) predates our first public release. [ 575.091035][ T5870] usb 9-1: Please update to version 0.2 or newer [ 575.139283][T12322] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 575.145823][T12322] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 575.224629][T12322] vhci_hcd vhci_hcd.0: Device attached [ 575.453162][ T5870] usb 9-1: USB disconnect, device number 27 [ 575.462767][T12323] vhci_hcd: connection closed [ 575.467715][ T29] audit: type=1400 audit(1733847523.747:1200): avc: denied { read } for pid=12328 comm="syz.9.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.526308][ T11] vhci_hcd: stop threads [ 575.537489][ T11] vhci_hcd: release socket [ 575.551004][ T5817] usb 48-1: SetAddress Request (2) to port 0 [ 575.569043][T12329] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 575.575675][T12329] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 575.588506][ T5817] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 575.593498][ T29] audit: type=1400 audit(1733847523.757:1201): avc: denied { ioctl } for pid=12328 comm="syz.9.1699" path="socket:[32326]" dev="sockfs" ino=32326 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.600425][ T11] vhci_hcd: disconnect device [ 575.700198][T12335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.753219][T12329] vhci_hcd vhci_hcd.0: Device attached [ 575.759124][T12335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.768027][T12330] vhci_hcd: connection closed [ 575.773657][ T8001] vhci_hcd: stop threads [ 575.796596][ T8001] vhci_hcd: release socket [ 575.801157][ T8001] vhci_hcd: disconnect device [ 575.882661][ T29] audit: type=1400 audit(1733847524.207:1202): avc: denied { ioctl } for pid=12313 comm="syz.5.1695" path="socket:[33357]" dev="sockfs" ino=33357 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 575.938088][ T5866] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 576.126694][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.149751][ T5866] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 576.177787][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.199354][ T5866] usb 2-1: config 0 descriptor?? [ 576.218323][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 576.550389][ T29] audit: type=1400 audit(1733847524.868:1203): avc: denied { ioctl } for pid=12345 comm="syz.7.1704" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 576.833455][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 577.094343][ T29] audit: type=1400 audit(1733847524.868:1204): avc: denied { map } for pid=12345 comm="syz.7.1704" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 577.227620][ T5866] pwc: recv_control_msg error -32 req 02 val 2700 [ 577.275479][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00 [ 577.583743][T12362] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1707'. [ 578.236830][ T29] audit: type=1400 audit(1733847524.868:1205): avc: denied { execute } for pid=12345 comm="syz.7.1704" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 578.835177][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1706'. [ 579.253774][ T5866] pwc: recv_control_msg error -71 req 04 val 1400 [ 579.261360][ T5866] pwc: recv_control_msg error -71 req 02 val 2000 [ 579.274128][ T29] audit: type=1400 audit(1733847527.411:1206): avc: denied { mount } for pid=12355 comm="syz.5.1708" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 579.332556][ T29] audit: type=1400 audit(1733847527.642:1207): avc: denied { unmount } for pid=6927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 579.390067][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1712'. [ 579.453581][ T117] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 579.758524][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 579.786361][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 579.798261][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 579.806534][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 579.813785][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 579.821105][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 580.449849][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 580.466701][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 580.476781][ T29] audit: type=1400 audit(1733847528.222:1208): avc: denied { sqpoll } for pid=12371 comm="syz.8.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 580.503530][ T117] usb 8-1: Using ep0 maxpacket: 32 [ 580.534123][ T117] usb 8-1: device descriptor read/all, error -71 [ 580.724059][ T29] audit: type=1400 audit(1733847529.043:1209): avc: denied { mount } for pid=12382 comm="syz.9.1713" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 580.761345][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1713'. [ 581.722324][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 581.733116][ T5817] usb 48-1: device descriptor read/8, error -110 [ 581.750201][ T5866] pwc: Registered as video103. [ 581.756126][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 582.246499][ T29] audit: type=1400 audit(1733847530.575:1210): avc: denied { unmount } for pid=9306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 582.362928][ T5866] usb 2-1: USB disconnect, device number 37 [ 583.133322][T12398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1719'. [ 583.142934][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 583.165856][ T9854] IPVS: starting estimator thread 0... [ 583.167873][ T29] audit: type=1400 audit(1733847531.496:1211): avc: denied { connect } for pid=12397 comm="syz.1.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 583.241238][ T29] audit: type=1400 audit(1733847531.516:1212): avc: denied { watch } for pid=12395 comm="syz.9.1718" path="/173" dev="tmpfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 583.302792][ T5817] usb usb48-port1: attempt power cycle [ 583.437942][T12413] geneve2: entered promiscuous mode [ 583.450334][T12413] geneve2: entered allmulticast mode [ 583.509089][T12404] IPVS: using max 22 ests per chain, 52800 per kthread [ 584.182494][ T9854] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 584.200070][T12422] overlayfs: failed to resolve './file1': -2 [ 584.207934][ T29] audit: type=1400 audit(1733847532.538:1213): avc: denied { create } for pid=12419 comm="syz.1.1725" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 584.275497][ T29] audit: type=1400 audit(1733847532.608:1214): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file1" dev="tmpfs" ino=1808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 584.317898][ T5870] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 584.337543][ T9854] usb 6-1: Using ep0 maxpacket: 16 [ 584.345758][ T9854] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 584.354182][ T9854] usb 6-1: config 0 has no interface number 0 [ 584.360636][ T9854] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 584.381869][ T9854] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 584.402651][ T9854] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 584.433914][ T9854] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 584.447306][ T9854] usb 6-1: Product: syz [ 584.469658][ T5817] usb usb48-port1: unable to enumerate USB device [ 584.476200][ T5870] usb 9-1: Using ep0 maxpacket: 8 [ 584.486379][ T9854] usb 6-1: SerialNumber: syz [ 584.493235][ T5870] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=58.4c [ 584.504434][ T29] audit: type=1400 audit(1733847532.838:1215): avc: denied { setopt } for pid=12428 comm="syz.1.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 585.096947][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.104977][ T5870] usb 9-1: Product: syz [ 585.111729][ T9854] usb 6-1: config 0 descriptor?? [ 585.117394][ T5870] usb 9-1: Manufacturer: syz [ 585.122510][ T5870] usb 9-1: SerialNumber: syz [ 585.129235][ T9854] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 585.147830][ T9854] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input61 [ 585.204096][ T5870] usb 9-1: config 0 descriptor?? [ 585.523786][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.564490][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.572650][T12408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.656905][T12408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.696760][ T5906] usb 9-1: USB disconnect, device number 28 [ 586.204125][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 586.205862][ T117] usb 6-1: USB disconnect, device number 29 [ 586.211135][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 586.605179][ T117] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 587.264641][ T29] audit: type=1400 audit(1733847535.581:1216): avc: denied { listen } for pid=12449 comm="syz.9.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 587.444373][ T29] audit: type=1400 audit(1733847535.781:1217): avc: denied { write } for pid=12458 comm="syz.1.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 587.467737][T12459] IPVS: set_ctl: invalid protocol: 44 0.0.128.0:20000 [ 587.534049][ T29] audit: type=1400 audit(1733847535.801:1218): avc: denied { ioctl } for pid=12458 comm="syz.1.1738" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 587.732982][ T29] audit: type=1400 audit(1733847535.801:1219): avc: denied { ioctl } for pid=12458 comm="syz.1.1738" path="socket:[33613]" dev="sockfs" ino=33613 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 587.758214][ T29] audit: type=1400 audit(1733847535.801:1220): avc: denied { setopt } for pid=12458 comm="syz.1.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 588.376336][T12471] SET target dimension over the limit! [ 589.432179][ T5870] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 589.504288][ T29] audit: type=1400 audit(1733847537.834:1221): avc: denied { nlmsg_read } for pid=12482 comm="syz.8.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 589.536411][ T29] audit: type=1400 audit(1733847537.874:1222): avc: denied { ioctl } for pid=12482 comm="syz.8.1748" path="socket:[32556]" dev="sockfs" ino=32556 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 589.617513][ T5870] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 589.641471][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.671727][ T5870] usb 6-1: config 0 has no interface number 0 [ 589.678041][ T5870] usb 6-1: config 0 interface 255 has no altsetting 0 [ 589.685377][ T5870] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 589.697033][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.750605][ T5870] usb 6-1: config 0 descriptor?? [ 590.211719][ T29] audit: type=1400 audit(1733847538.554:1223): avc: denied { create } for pid=12478 comm="syz.5.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 591.562487][ T29] audit: type=1400 audit(1733847539.535:1224): avc: denied { mount } for pid=12498 comm="syz.8.1751" name="/" dev="autofs" ino=33701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 591.594481][ T29] audit: type=1400 audit(1733847539.535:1225): avc: denied { read } for pid=12498 comm="syz.8.1751" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 591.618447][ T29] audit: type=1400 audit(1733847539.535:1226): avc: denied { open } for pid=12498 comm="syz.8.1751" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 591.643800][ T29] audit: type=1400 audit(1733847539.605:1227): avc: denied { mounton } for pid=12498 comm="syz.8.1751" path="/233/file1" dev="autofs" ino=33701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 591.643960][ T29] audit: type=1400 audit(1733847539.976:1228): avc: denied { ioctl } for pid=12506 comm="syz.7.1755" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 591.998677][ T29] audit: type=1400 audit(1733847540.316:1229): avc: denied { unmount } for pid=8020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 592.012960][T12501] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 592.140654][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.391841][T12510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.409374][T12510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.423660][ T29] audit: type=1400 audit(1733847540.767:1230): avc: denied { listen } for pid=12520 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 593.308087][ T117] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 593.516755][ T117] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 593.717255][ T117] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.737099][ T117] usb 10-1: Product: syz [ 593.745772][ T117] usb 10-1: Manufacturer: syz [ 593.752283][ T117] usb 10-1: SerialNumber: syz [ 593.764168][ T117] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 593.800161][ T5869] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 594.060860][ T117] usb 10-1: USB disconnect, device number 14 [ 594.738879][ T5898] usb 6-1: USB disconnect, device number 30 [ 594.864995][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 594.865013][ T29] audit: type=1400 audit(1733847543.209:1235): avc: denied { write } for pid=12549 comm="syz.5.1765" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 594.903569][ T5869] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 594.903696][ T5869] ath9k_htc: Failed to initialize the device [ 594.904543][ T117] usb 10-1: ath9k_htc: USB layer deinitialized [ 594.955698][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1768'. [ 594.987938][T12556] vlan2: entered promiscuous mode [ 594.987955][T12556] team0: entered promiscuous mode [ 594.987964][T12556] team_slave_0: entered promiscuous mode [ 594.988047][T12556] team_slave_1: entered promiscuous mode [ 595.044765][T12551] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 595.049883][ T29] audit: type=1400 audit(1733847543.389:1236): avc: denied { name_connect } for pid=12549 comm="syz.5.1765" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 595.152761][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.311981][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1771'. [ 595.316844][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1772'. [ 595.361772][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1771'. [ 596.281966][T12580] sp0: Synchronizing with TNC [ 596.981544][T12588] input: syz1 as /devices/virtual/input/input63 [ 597.271657][T12589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.829795][ T29] audit: type=1400 audit(1733847546.172:1237): avc: denied { watch_reads } for pid=12598 comm="syz.8.1783" path="/242" dev="tmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 598.103925][ T5870] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 598.132635][T12607] FAULT_INJECTION: forcing a failure. [ 598.132635][T12607] name failslab, interval 1, probability 0, space 0, times 0 [ 598.145691][T12607] CPU: 0 UID: 0 PID: 12607 Comm: syz.9.1785 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 598.156458][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 598.166502][T12607] Call Trace: [ 598.169771][T12607] [ 598.172692][T12607] dump_stack_lvl+0x16c/0x1f0 [ 598.177379][T12607] should_fail_ex+0x497/0x5b0 [ 598.182063][T12607] should_failslab+0xc2/0x120 [ 598.186745][T12607] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 598.192110][T12607] ? trace_lock_acquire+0x14e/0x1f0 [ 598.197310][T12607] ? skb_clone+0x190/0x3f0 [ 598.201725][T12607] skb_clone+0x190/0x3f0 [ 598.205963][T12607] dev_queue_xmit_nit+0x38f/0xbc0 [ 598.211007][T12607] ? netif_skb_features+0x3b0/0xd50 [ 598.216203][T12607] dev_hard_start_xmit+0x283/0x7b0 [ 598.221312][T12607] __dev_queue_xmit+0x7f0/0x43e0 [ 598.226254][T12607] ? __pfx___dev_queue_xmit+0x10/0x10 [ 598.231644][T12607] ? __skb_clone+0x570/0x760 [ 598.236241][T12607] netlink_deliver_tap+0xa87/0xd30 [ 598.241356][T12607] netlink_unicast+0x5e1/0x7f0 [ 598.246117][T12607] ? __pfx_netlink_unicast+0x10/0x10 [ 598.251406][T12607] netlink_sendmsg+0x8b8/0xd70 [ 598.256170][T12607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.261465][T12607] ____sys_sendmsg+0xaaf/0xc90 [ 598.266225][T12607] ? copy_msghdr_from_user+0x10b/0x160 [ 598.271684][T12607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.276972][T12607] ___sys_sendmsg+0x135/0x1e0 [ 598.281647][T12607] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.286852][T12607] ? __pfx_lock_release+0x10/0x10 [ 598.291868][T12607] ? trace_lock_acquire+0x14e/0x1f0 [ 598.297076][T12607] ? __fget_files+0x206/0x3a0 [ 598.301753][T12607] __sys_sendmsg+0x16e/0x220 [ 598.306344][T12607] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.311470][T12607] do_syscall_64+0xcd/0x250 [ 598.315973][T12607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.321862][T12607] RIP: 0033:0x7efc9d37ff19 [ 598.326267][T12607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.345864][T12607] RSP: 002b:00007efc9e20b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.354272][T12607] RAX: ffffffffffffffda RBX: 00007efc9d546160 RCX: 00007efc9d37ff19 [ 598.362262][T12607] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 598.370243][T12607] RBP: 00007efc9e20b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 598.378218][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.386192][T12607] R13: 0000000000000000 R14: 00007efc9d546160 R15: 00007ffcdd1d06f8 [ 598.394170][T12607] [ 599.976256][ T5870] usb 9-1: Using ep0 maxpacket: 32 [ 599.987168][ T5870] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 600.000389][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.026687][ T5870] usb 9-1: config 0 descriptor?? [ 600.090904][ T5870] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 600.208938][T12613] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1787'. [ 600.371523][ T5870] gspca_vc032x: reg_r err -71 [ 600.383776][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.417107][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.439352][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.466049][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.483706][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.499413][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.534589][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 600.976610][T12626] ip6t_REJECT: ECHOREPLY is not supported [ 601.482598][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 601.488011][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 601.493519][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 601.498884][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 601.504316][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 601.509658][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 601.515507][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 601.520982][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 601.616974][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 601.692827][T12628] hub 6-0:1.0: USB hub found [ 601.699084][T12628] hub 6-0:1.0: 1 port detected [ 602.002926][ T29] audit: type=1400 audit(1733847550.015:1238): avc: denied { bind } for pid=12620 comm="syz.7.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 602.147735][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.153171][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.158474][ T5870] gspca_vc032x: Unknown sensor... [ 602.163594][ T5870] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 602.412643][ T5870] usb 9-1: USB disconnect, device number 29 [ 602.610275][T12630] sp0: Synchronizing with TNC [ 602.636792][T12634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.612457][ T29] audit: type=1400 audit(1733847550.816:1239): avc: denied { ioctl } for pid=12633 comm="syz.7.1795" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33872 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 603.647791][ T29] audit: type=1400 audit(1733847551.987:1240): avc: denied { bind } for pid=12633 comm="syz.7.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 604.685242][T12654] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1798'. [ 605.003061][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1799'. [ 605.012098][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1799'. [ 605.246307][ T29] audit: type=1400 audit(1733847553.488:1241): avc: denied { bind } for pid=12657 comm="syz.5.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 605.334728][ T29] audit: type=1400 audit(1733847553.488:1242): avc: denied { setopt } for pid=12657 comm="syz.5.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 605.758968][T12676] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 608.614425][ T117] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 608.794640][ T117] usb 2-1: device descriptor read/64, error -71 [ 609.019221][ T29] audit: type=1400 audit(1733847557.361:1243): avc: denied { setopt } for pid=12679 comm="syz.8.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 609.054114][ T117] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 609.054479][ T5870] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 609.187777][T12711] xt_NFQUEUE: number of total queues is 0 [ 609.213827][ T117] usb 2-1: device descriptor read/64, error -71 [ 609.213847][ T5870] usb 10-1: Using ep0 maxpacket: 16 [ 609.245613][ T5870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.280965][ T5870] usb 10-1: config 0 has no interfaces? [ 609.299307][ T5870] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 609.333967][ T117] usb usb2-port1: attempt power cycle [ 609.359401][ T5870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.400061][ T5870] usb 10-1: config 0 descriptor?? [ 609.694014][ T117] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 609.714036][ T117] usb 2-1: device descriptor read/8, error -71 [ 609.740689][T12706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.948102][T12706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.986217][ T117] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 610.001903][ T9854] usb 10-1: USB disconnect, device number 15 [ 610.036436][ T117] usb 2-1: device descriptor read/8, error -71 [ 610.153894][ T117] usb usb2-port1: unable to enumerate USB device [ 610.160855][T12721] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1820'. [ 610.313953][T12723] block device autoloading is deprecated and will be removed. [ 610.328464][T12723] syz.5.1819: attempt to access beyond end of device [ 610.328464][T12723] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 610.649134][T12740] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 610.667313][T12723] mkiss: ax0: crc mode is auto. [ 611.312230][ T9854] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 611.442150][ T9854] usb 9-1: device descriptor read/64, error -71 [ 612.050722][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1827'. [ 612.209508][T12753] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 612.291515][ T9854] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 612.469043][ T9854] usb 9-1: device descriptor read/64, error -71 [ 612.674223][ T9854] usb usb9-port1: attempt power cycle [ 613.612764][ T9854] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 613.710219][T12772] ip6t_REJECT: ECHOREPLY is not supported [ 613.887162][ T29] audit: type=1400 audit(1733847562.137:1244): avc: denied { read } for pid=5175 comm="acpid" name="event7" dev="devtmpfs" ino=3345 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 613.940830][T12773] SELinux: policydb version -1456520632 does not match my version range 15-33 [ 613.951369][ T9854] usb 9-1: device not accepting address 32, error -71 [ 614.069552][T12773] SELinux: failed to load policy [ 614.138127][T12774] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1834'. [ 614.153280][ T29] audit: type=1400 audit(1733847562.137:1245): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=3345 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 614.168093][T12774] vlan0: entered promiscuous mode [ 614.483444][T12774] team0: entered promiscuous mode [ 614.550809][ T29] audit: type=1400 audit(1733847562.137:1246): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=3345 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 614.606800][T12774] team_slave_0: entered promiscuous mode [ 614.626747][T12774] team_slave_1: entered promiscuous mode [ 614.634133][ T29] audit: type=1400 audit(1733847562.183:1247): avc: denied { load_policy } for pid=12769 comm="syz.8.1835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 614.837958][T12784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.852474][ T5866] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 614.860514][ T29] audit: type=1400 audit(1733847563.053:1248): avc: denied { read write } for pid=12783 comm="syz.8.1839" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 614.974140][ T29] audit: type=1400 audit(1733847563.053:1249): avc: denied { open } for pid=12783 comm="syz.8.1839" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 615.055632][ T5866] usb 6-1: Invalid ep0 maxpacket: 32 [ 615.825390][ T5866] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 616.007087][ T5866] usb 6-1: Invalid ep0 maxpacket: 32 [ 616.016534][ T5866] usb usb6-port1: attempt power cycle [ 616.113986][ T5817] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 616.296503][ T5817] usb 8-1: Using ep0 maxpacket: 32 [ 616.318805][ T5817] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 616.328307][ T5817] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 616.337611][ T5817] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 616.350628][ T5817] usb 8-1: config 1 has no interface number 0 [ 616.363719][ T5817] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 616.403995][ T5866] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 616.419202][ T5817] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 616.438295][ T5817] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 616.456104][ T5866] usb 6-1: Invalid ep0 maxpacket: 32 [ 616.475151][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.496362][ T5817] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 616.595620][ T5866] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 616.774254][ T29] audit: type=1400 audit(1733847564.793:1250): avc: denied { mount } for pid=12812 comm="syz.1.1850" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 616.847688][T12814] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 617.160846][ T29] audit: type=1400 audit(1733847564.962:1251): avc: denied { write } for pid=12808 comm="syz.8.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 617.167172][ T5866] usb 6-1: Invalid ep0 maxpacket: 32 [ 617.192555][ T29] audit: type=1400 audit(1733847565.205:1252): avc: denied { write } for pid=12808 comm="syz.8.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 617.210251][ T5866] usb usb6-port1: unable to enumerate USB device [ 617.363626][ T29] audit: type=1326 audit(1733847565.392:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fadd377ff19 code=0x7ffc0000 [ 617.393345][ T29] audit: type=1326 audit(1733847565.392:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fadd377ff19 code=0x7ffc0000 [ 618.370034][ T5866] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 618.555153][ T5866] usb 6-1: config 255 has an invalid interface number: 210 but max is 0 [ 618.583211][ T5866] usb 6-1: config 255 has no interface number 0 [ 618.597966][ T5866] usb 6-1: config 255 interface 210 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 618.623604][ T5866] usb 6-1: config 255 interface 210 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 618.648480][ T5866] usb 6-1: config 255 interface 210 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 618.717815][ T5866] usb 6-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=7f.33 [ 618.728054][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.764687][ T5866] usb 6-1: Product: ꏤⰙ铇₯釼䅥ᄾ쏗萚凋넰㷓㞛污趞਋뙹瓾픜ም烛팷熌ͦ嶢喏ᙑ఺教힥౩礷刟竕夦鮰ᅫ䯵멧伟믗ꮷ邐䀝䮡盍く唸뙚탋ᄆ빭殺量꟢짺袶䀬偃˻ᒁỞ嗴돴曍툐㸭효岖ɜᬻ愄㎥啨괌㽚썲忶卦䙄⎫읞䰹幋ం‿률툌璺फ꩜٦뮆崎엩訌ᣄ [ 619.855760][T12853] siw: device registration error -23 [ 620.415165][ T5866] usb 6-1: Manufacturer: 䀁 [ 620.574492][T12861] vlan2: entered promiscuous mode [ 620.590242][T12861] vlan2: entered allmulticast mode [ 620.610487][T12861] vlan0: entered allmulticast mode [ 620.628609][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 620.628624][ T29] audit: type=1400 audit(1733847568.385:1322): avc: denied { ioctl } for pid=12859 comm="syz.8.1861" path="socket:[35419]" dev="sockfs" ino=35419 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 620.659222][T12861] veth0_vlan: entered allmulticast mode [ 620.677137][T12861] vlan0: entered promiscuous mode [ 620.681176][T12833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.694140][T12861] team0: Port device vlan2 added [ 620.714694][T12833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.781066][ T5898] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 620.890368][T12833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.972486][T12833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.980776][ T5898] usb 10-1: Using ep0 maxpacket: 32 [ 620.989828][ T5898] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 621.047644][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.187027][ T5898] usb 10-1: config 0 descriptor?? [ 621.209302][T12833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.258015][ T5898] gspca_main: sunplus-2.14.0 probing 041e:400b [ 621.343495][T12833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.632257][ T5866] usb 6-1: USB disconnect, device number 35 [ 621.648949][ T5817] snd_usb_pod 8-1:1.1: set_interface failed [ 621.677015][ T5817] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 621.743111][ T5817] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 621.777358][ T5817] usb 8-1: USB disconnect, device number 24 [ 621.821974][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1864'. [ 621.916646][T12874] FAULT_INJECTION: forcing a failure. [ 621.916646][T12874] name failslab, interval 1, probability 0, space 0, times 0 [ 621.927896][T12860] team0 (unregistering): Port device team_slave_0 removed [ 621.943106][T12874] CPU: 0 UID: 0 PID: 12874 Comm: syz.7.1865 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 621.953889][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.960945][T12860] team0 (unregistering): Port device team_slave_1 removed [ 621.963931][T12874] Call Trace: [ 621.963969][T12874] [ 621.963979][T12874] dump_stack_lvl+0x16c/0x1f0 [ 621.981945][T12874] should_fail_ex+0x497/0x5b0 [ 621.986642][T12874] ? fs_reclaim_acquire+0xae/0x150 [ 621.991764][T12874] should_failslab+0xc2/0x120 [ 621.996465][T12874] __kmalloc_node_noprof+0xd1/0x510 [ 622.001668][T12874] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 622.007149][T12874] ? lockdep_init_map_type+0x16d/0x7d0 [ 622.012615][T12874] __kvmalloc_node_noprof+0xad/0x1a0 [ 622.017902][T12874] bucket_table_alloc.isra.0+0x86/0x460 [ 622.023457][T12874] rhashtable_init_noprof+0x41a/0x7e0 [ 622.028844][T12874] rhltable_init_noprof+0x20/0x60 [ 622.033879][T12874] nf_tables_newtable+0xfb6/0x1b80 [ 622.039026][T12874] ? net_generic+0xea/0x2a0 [ 622.043517][T12874] ? __pfx_nf_tables_newtable+0x10/0x10 [ 622.049070][T12874] ? __nla_parse+0x40/0x60 [ 622.053485][T12874] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 622.058773][T12874] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 622.064433][T12874] ? avc_has_perm_noaudit+0x119/0x3a0 [ 622.069842][T12874] ? avc_has_perm_noaudit+0x143/0x3a0 [ 622.075344][T12874] ? __nla_parse+0x40/0x60 [ 622.079773][T12874] nfnetlink_rcv+0x3c3/0x430 [ 622.084374][T12874] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 622.089510][T12874] netlink_unicast+0x53c/0x7f0 [ 622.094286][T12874] ? __pfx_netlink_unicast+0x10/0x10 [ 622.099593][T12874] netlink_sendmsg+0x8b8/0xd70 [ 622.104364][T12874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.109659][T12874] ____sys_sendmsg+0xaaf/0xc90 [ 622.114423][T12874] ? copy_msghdr_from_user+0x10b/0x160 [ 622.119881][T12874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.125171][T12874] ___sys_sendmsg+0x135/0x1e0 [ 622.129852][T12874] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.135078][T12874] ? __pfx_lock_release+0x10/0x10 [ 622.140108][T12874] ? trace_lock_acquire+0x14e/0x1f0 [ 622.145322][T12874] ? __fget_files+0x206/0x3a0 [ 622.150000][T12874] __sys_sendmsg+0x16e/0x220 [ 622.154607][T12874] ? __pfx___sys_sendmsg+0x10/0x10 [ 622.159747][T12874] do_syscall_64+0xcd/0x250 [ 622.164240][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.170152][T12874] RIP: 0033:0x7fcdb4b7ff19 [ 622.174561][T12874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.176814][T12876] netlink: 596 bytes leftover after parsing attributes in process `syz.9.1860'. [ 622.194155][T12874] RSP: 002b:00007fcdb5a15058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.194180][T12874] RAX: ffffffffffffffda RBX: 00007fcdb4d45fa0 RCX: 00007fcdb4b7ff19 [ 622.194194][T12874] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 622.194206][T12874] RBP: 00007fcdb5a150a0 R08: 0000000000000000 R09: 0000000000000000 [ 622.194218][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.194230][T12874] R13: 0000000000000000 R14: 00007fcdb4d45fa0 R15: 00007ffdd1ba0768 [ 622.194257][T12874] [ 622.263326][T12860] vlan0: left allmulticast mode [ 622.268227][T12860] veth0_vlan: left allmulticast mode [ 622.282997][T12860] vlan0: left promiscuous mode [ 622.292792][T12860] team0 (unregistering): Port device vlan2 removed [ 622.359508][ T29] audit: type=1400 audit(1733847570.078:1323): avc: denied { create } for pid=12856 comm="syz.9.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 622.379341][ T29] audit: type=1400 audit(1733847570.078:1324): avc: denied { read } for pid=12856 comm="syz.9.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 622.440164][T12857] netlink: 'syz.9.1860': attribute type 29 has an invalid length. [ 622.449085][T12875] netlink: 'syz.9.1860': attribute type 29 has an invalid length. [ 622.999409][ T5898] gspca_sunplus: reg_r err -110 [ 623.007166][ T5898] sunplus 10-1:0.0: probe with driver sunplus failed with error -110 [ 623.130787][T12891] netlink: 'syz.8.1870': attribute type 48 has an invalid length. [ 623.201040][ T29] audit: type=1400 audit(1733847570.855:1325): avc: denied { create } for pid=12893 comm="syz.8.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 623.227887][ T29] audit: type=1400 audit(1733847570.855:1326): avc: denied { append } for pid=12893 comm="syz.8.1871" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 623.380805][T12897] can0: slcan on ttyS3. [ 624.191576][ T5869] usb 10-1: USB disconnect, device number 16 [ 624.527588][ T5898] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 624.613393][T12893] can0 (unregistered): slcan off ttyS3. [ 624.730663][ T5898] usb 6-1: device descriptor read/64, error -71 [ 624.998033][ T5898] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 625.511092][ T29] audit: type=1400 audit(1733847573.006:1327): avc: denied { create } for pid=12919 comm="syz.8.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 625.551452][ T29] audit: type=1400 audit(1733847573.053:1328): avc: denied { sys_admin } for pid=12919 comm="syz.8.1878" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 625.611767][ T29] audit: type=1400 audit(1733847573.100:1329): avc: denied { sys_nice } for pid=12919 comm="syz.8.1878" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 625.711959][ T5898] usb 6-1: device descriptor read/64, error -71 [ 625.813382][T12929] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 625.837642][ T5898] usb usb6-port1: attempt power cycle [ 626.024226][ T29] audit: type=1400 audit(1733847573.474:1330): avc: denied { ioctl } for pid=12925 comm="syz.1.1879" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 626.396366][ T5898] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 626.563926][ T5898] usb 6-1: device descriptor read/8, error -71 [ 626.670490][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.825997][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 626.994590][ T5898] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 627.031044][ T5898] usb 6-1: device descriptor read/8, error -71 [ 627.159829][ T5898] usb usb6-port1: unable to enumerate USB device [ 627.548999][T12955] netlink: 'syz.5.1890': attribute type 10 has an invalid length. [ 627.607143][T12955] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 627.734916][ T5898] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 627.966501][ T5898] usb 2-1: config 255 has an invalid interface number: 210 but max is 0 [ 628.024808][ T5898] usb 2-1: config 255 has no interface number 0 [ 628.032266][ T5898] usb 2-1: config 255 interface 210 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 628.216778][ T5898] usb 2-1: config 255 interface 210 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 628.228355][ T5898] usb 2-1: config 255 interface 210 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 628.264601][ T5898] usb 2-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=7f.33 [ 628.273844][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.281893][ T5898] usb 2-1: Product: ꏤⰙ铇₯釼䅥ᄾ쏗萚凋넰㷓㞛污趞਋뙹瓾픜ም烛팷熌ͦ嶢喏ᙑ఺教힥౩礷刟竕夦鮰ᅫ䯵멧伟믗ꮷ邐䀝䮡盍く唸뙚탋ᄆ빭殺量꟢짺袶䀬偃˻ᒁỞ嗴돴曍툐㸭효岖ɜᬻ愄㎥啨괌㽚썲忶卦䙄⎫읞䰹幋ం‿률툌璺फ꩜٦뮆崎엩訌ᣄ [ 628.313868][ C1] vkms_vblank_simulate: vblank timer overrun [ 628.982051][ T5898] usb 2-1: Manufacturer: 䀁 [ 629.237084][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.249464][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.282535][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.291339][ T29] audit: type=1400 audit(1733847576.533:1331): avc: denied { mounton } for pid=12971 comm="syz.5.1896" path="/311/file0" dev="tmpfs" ino=1637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 629.350587][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.357199][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.357439][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.386657][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.387964][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.403064][ T5898] usb 2-1: USB disconnect, device number 42 [ 629.616447][ T5817] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 629.765756][ T5817] usb 6-1: device descriptor read/64, error -71 [ 629.947656][ T5866] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 630.036342][ T5817] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 630.119091][ T5866] usb 10-1: Using ep0 maxpacket: 32 [ 630.139551][ T5866] usb 10-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 630.150986][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.172336][ T5866] usb 10-1: Product: syz [ 630.182658][ T5817] usb 6-1: device descriptor read/64, error -71 [ 630.190207][ T5866] usb 10-1: Manufacturer: syz [ 630.206102][ T5866] usb 10-1: SerialNumber: syz [ 630.226005][ T5866] usb 10-1: config 0 descriptor?? [ 630.312219][ T5817] usb usb6-port1: attempt power cycle [ 630.578747][ T29] audit: type=1400 audit(1733847577.739:1332): avc: denied { connect } for pid=12985 comm="syz.9.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 630.674790][ T5817] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 630.706607][ T9854] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 630.775905][ T5817] usb 6-1: device descriptor read/8, error -71 [ 630.840319][ T5866] rtl8150 10-1:0.0: couldn't reset the device [ 630.847198][ T5866] rtl8150 10-1:0.0: probe with driver rtl8150 failed with error -5 [ 630.865709][ T5866] usb 10-1: USB disconnect, device number 17 [ 630.876577][ T9854] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 630.893496][ T9854] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.930688][ T9854] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 630.946785][ T9854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 630.970994][ T9854] usb 2-1: SerialNumber: syz [ 631.070052][ T5817] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 631.075903][T13003] 9pnet_fd: Insufficient options for proto=fd [ 631.093146][ T5817] usb 6-1: device descriptor read/8, error -71 [ 631.209347][ T5817] usb usb6-port1: unable to enumerate USB device [ 631.530152][T13011] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1907'. [ 631.539385][T13011] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1907'. [ 631.581620][ T29] audit: type=1400 audit(1733847578.693:1333): avc: denied { write } for pid=13008 comm="syz.8.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 632.192493][ T5869] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 632.202807][T13018] sp0: Synchronizing with TNC [ 632.363566][ T5869] usb 8-1: device descriptor read/64, error -71 [ 632.517354][ T29] audit: type=1400 audit(1733847579.573:1334): avc: denied { unmount } for pid=6927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 632.698971][ T5869] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 632.878549][ T5869] usb 8-1: device descriptor read/64, error -71 [ 632.996431][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'. [ 633.005511][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1911'. [ 633.416833][ T5869] usb usb8-port1: attempt power cycle [ 633.476655][ T9854] usb 2-1: skipping empty audio interface (v1) [ 633.629099][ T9854] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 633.651952][ T29] audit: type=1400 audit(1733847580.592:1335): avc: denied { ioctl } for pid=13028 comm="syz.1.1914" path="socket:[34600]" dev="sockfs" ino=34600 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 633.732355][ T6552] udevd[6552]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.756218][ T9854] usb 2-1: USB disconnect, device number 43 [ 633.839574][ T5869] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 633.861833][ T5869] usb 8-1: device descriptor read/8, error -71 [ 634.729930][T13047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.811388][ T5869] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 634.852359][ T5869] usb 8-1: device descriptor read/8, error -71 [ 634.983531][ T5869] usb usb8-port1: unable to enumerate USB device [ 635.374682][T13056] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 635.418445][ T29] audit: type=1400 audit(1733847582.285:1336): avc: denied { write } for pid=13050 comm="syz.5.1921" path="socket:[34628]" dev="sockfs" ino=34628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 635.587176][T13059] netlink: 'syz.7.1924': attribute type 10 has an invalid length. [ 635.595886][T13059] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 635.630796][ T29] audit: type=1400 audit(1733847582.482:1337): avc: denied { write } for pid=13063 comm="syz.8.1925" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 635.650735][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1925'. [ 635.698305][T13066] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 635.709022][T13066] netlink: 'syz.1.1927': attribute type 2 has an invalid length. [ 635.717726][T13066] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 635.726314][T13066] netlink: 'syz.1.1927': attribute type 2 has an invalid length. [ 635.808337][T13066] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 636.063035][ T29] audit: type=1400 audit(1733847582.884:1338): avc: denied { bind } for pid=13069 comm="syz.8.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 636.107064][ T29] audit: type=1400 audit(1733847582.884:1339): avc: denied { name_bind } for pid=13069 comm="syz.8.1929" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 636.173212][T13074] sp0: Synchronizing with TNC [ 636.207427][ T29] audit: type=1400 audit(1733847582.884:1340): avc: denied { node_bind } for pid=13069 comm="syz.8.1929" saddr=fe80::b src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 636.346141][T13083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.674890][ T29] audit: type=1400 audit(1733847584.400:1341): avc: denied { name_bind } for pid=13090 comm="syz.1.1935" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 637.748330][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1936'. [ 637.999107][ T9854] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 638.161224][ T9854] usb 2-1: Using ep0 maxpacket: 16 [ 638.170360][ T9854] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 638.194391][ T9854] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 638.203943][ T1205] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 638.219920][ T9854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.231734][ T9854] usb 2-1: Product: syz [ 638.249222][ T9854] usb 2-1: Manufacturer: syz [ 638.256858][ T9854] usb 2-1: SerialNumber: syz [ 638.274055][ T9854] usb 2-1: config 0 descriptor?? [ 638.291826][ T9854] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 638.304848][ T9854] usb 2-1: Detected FT232R [ 638.426252][ T1205] usb 9-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 638.446099][ T1205] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.789628][T13091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.929998][T13091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.181783][ T1205] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 639.191775][ T1205] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 639.222616][ T1205] usb 9-1: SerialNumber: syz [ 639.246297][ T9854] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 639.513283][ T9854] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 639.521301][ T9854] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 640.285655][T13120] openvswitch: netlink: IP tunnel dst address not specified [ 640.318310][ T1205] usb 9-1: 0:2 : does not exist [ 640.323281][ T1205] usb 9-1: unit 102 not found! [ 640.331887][ T9854] usb 2-1: USB disconnect, device number 44 [ 640.350944][ T9854] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 640.364269][ T9854] ftdi_sio 2-1:0.0: device disconnected [ 640.399988][ T1205] usb 9-1: USB disconnect, device number 34 [ 640.446291][T13123] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=13123 comm=syz.5.1946 [ 640.579263][T13121] Cannot find map_set index 0 as target [ 640.618345][ T29] audit: type=1400 audit(1733847587.159:1342): avc: denied { create } for pid=13122 comm="syz.5.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 640.682788][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.133668][T13151] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 642.216372][T13153] sp0: Synchronizing with TNC [ 642.412736][ T1205] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 643.325872][ T1205] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.391150][ T1205] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 643.432161][ T1205] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.493087][ T1205] usb 9-1: config 0 descriptor?? [ 643.511215][ T1205] pwc: Askey VC010 type 2 USB webcam detected. [ 643.563057][T13161] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1958'. [ 643.922582][ T29] audit: type=1400 audit(1733847590.246:1343): avc: denied { connect } for pid=13166 comm="syz.1.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 643.952679][ T1205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 643.974828][ T1205] pwc: recv_control_msg error -32 req 02 val 2700 [ 644.003905][ T1205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 644.024661][ T1205] pwc: recv_control_msg error -32 req 04 val 1000 [ 644.036555][ T1205] pwc: recv_control_msg error -32 req 04 val 1300 [ 644.044562][ T9854] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 644.062381][ T1205] pwc: recv_control_msg error -32 req 04 val 1400 [ 644.073996][ T1205] pwc: recv_control_msg error -32 req 02 val 2000 [ 644.215066][ T9854] usb 8-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 644.251832][ T9854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.259852][ T9854] usb 8-1: Product: syz [ 644.279169][ T9854] usb 8-1: Manufacturer: syz [ 644.294154][ T9854] usb 8-1: SerialNumber: syz [ 644.305021][ T5817] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 644.316306][ T9854] usb 8-1: config 0 descriptor?? [ 644.352485][T13171] IPVS: set_ctl: invalid protocol: 41 172.20.20.28:20001 [ 644.475985][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 644.487762][ T5817] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 644.497240][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.505426][ T5817] usb 2-1: Product: syz [ 644.510390][ T5817] usb 2-1: Manufacturer: syz [ 644.515701][ T1205] pwc: recv_control_msg error -71 req 02 val 2500 [ 644.525333][ T5817] usb 2-1: SerialNumber: syz [ 644.531061][ T1205] pwc: recv_control_msg error -71 req 02 val 2400 [ 644.542054][ T5817] usb 2-1: config 0 descriptor?? [ 644.560189][ T1205] pwc: recv_control_msg error -71 req 02 val 2600 [ 644.569305][ T5817] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 644.585988][ T1205] pwc: recv_control_msg error -71 req 02 val 2900 [ 644.603811][ T1205] pwc: recv_control_msg error -71 req 02 val 2800 [ 644.613332][ T1205] pwc: recv_control_msg error -71 req 04 val 1100 [ 644.625621][ T1205] pwc: recv_control_msg error -71 req 04 val 1200 [ 644.637456][ T1205] pwc: Registered as video103. [ 644.643554][ T1205] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input64 [ 644.669214][ T1205] usb 9-1: USB disconnect, device number 35 [ 644.688101][ T29] audit: type=1400 audit(1733847590.957:1344): avc: denied { append } for pid=13164 comm="syz.7.1960" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 644.700475][ T9854] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 644.825312][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 644.833016][T13169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.854510][ T5817] gspca_sn9c2028: read1 error -32 [ 644.935811][T13169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.968556][ T29] audit: type=1400 audit(1733847591.078:1345): avc: denied { read write } for pid=13168 comm="syz.1.1962" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 644.986226][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.024930][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.034250][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.041755][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.042992][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.049483][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.067702][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.075216][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.082771][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.090322][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.096256][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.097833][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.112908][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.120669][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.128277][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.135819][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.145098][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.152720][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.160317][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.167855][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.175477][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.183127][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.190586][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.198206][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.205814][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.213322][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.220831][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.229601][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.237079][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.244500][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.251962][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.259435][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.266875][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.274352][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.282350][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.289861][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.297333][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.304958][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.312576][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.320074][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.327807][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.335247][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.342948][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.350405][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.358004][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.365895][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.373302][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.380849][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.388308][ T5866] hid-generic 0000:0000:0003.0013: unknown main item tag 0x0 [ 645.395409][ T29] audit: type=1400 audit(1733847591.078:1346): avc: denied { open } for pid=13168 comm="syz.1.1962" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 645.406617][ T5817] gspca_sn9c2028: read1 error -32 [ 645.562675][ T5866] hid-generic 0000:0000:0003.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 645.586257][ T9854] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 645.595551][ T9854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.603716][ T9854] usb 10-1: Product: syz [ 645.608009][ T9854] usb 10-1: Manufacturer: syz [ 645.612800][ T9854] usb 10-1: SerialNumber: syz [ 645.641080][ T9854] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 645.660193][ T5817] gspca_sn9c2028: read1 error -71 [ 645.665754][ T5817] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 645.713493][ T5817] usb 2-1: USB disconnect, device number 45 [ 645.940432][ T9854] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 645.984602][T13187] batadv1: entered promiscuous mode [ 646.001896][T13187] batadv1: entered allmulticast mode [ 646.299113][T13192] geneve2: entered promiscuous mode [ 646.420614][T13192] geneve2: entered allmulticast mode [ 646.474797][ T5817] usb 10-1: USB disconnect, device number 18 [ 647.105729][ T9854] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 647.113191][ T9854] ath9k_htc: Failed to initialize the device [ 647.120365][ T5817] usb 10-1: ath9k_htc: USB layer deinitialized [ 647.125410][T13196] netlink: 'syz.9.1969': attribute type 1 has an invalid length. [ 647.151774][ T5867] usb 8-1: USB disconnect, device number 29 [ 647.276264][T13196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.318243][T13199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 647.463034][T13199] bond1: (slave bond2): making interface the new active one [ 647.486943][T13199] bond1: (slave bond2): Enslaving as an active interface with an up link [ 647.523144][T13205] sp0: Synchronizing with TNC [ 647.543996][ T5869] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 647.800592][ T5867] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 647.840354][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 647.847329][ T5869] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 647.856513][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.872606][ T5869] usb 2-1: config 0 descriptor?? [ 647.880384][ T5869] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 648.020690][ T117] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 648.456694][ T5869] gspca_nw80x: reg_w err -110 [ 648.461536][ T5869] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 648.474213][ T5867] usb 8-1: Using ep0 maxpacket: 32 [ 648.483690][ T5867] usb 8-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 648.493697][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.501982][ T5867] usb 8-1: Product: syz [ 648.506792][ T5867] usb 8-1: Manufacturer: syz [ 648.511659][ T5867] usb 8-1: SerialNumber: syz [ 648.518647][ T5867] usb 8-1: config 0 descriptor?? [ 648.618605][ T117] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.630131][ T117] usb 9-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.641671][ T117] usb 9-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.651701][ T117] usb 9-1: config 0 interface 0 has no altsetting 0 [ 648.658730][ T117] usb 9-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 648.667819][ T117] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.688295][ T117] usb 9-1: config 0 descriptor?? [ 648.780325][ T5867] rtl8150 8-1:0.0: couldn't reset the device [ 648.787536][ T5867] rtl8150 8-1:0.0: probe with driver rtl8150 failed with error -5 [ 648.798740][ T5867] usb 8-1: USB disconnect, device number 30 [ 649.148474][T13211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.164972][T13211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.208347][ T117] usbhid 9-1:0.0: can't add hid device: -71 [ 649.227506][ T117] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 649.267948][ T117] usb 9-1: USB disconnect, device number 36 [ 650.192637][ T5821] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 650.604241][ T29] audit: type=1400 audit(1733847596.476:1347): avc: denied { create } for pid=13197 comm="syz.1.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 651.849992][T13256] sp0: Synchronizing with TNC [ 651.940704][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1987'. [ 652.002317][ T5867] usb 2-1: USB disconnect, device number 46 [ 652.292916][T13273] overlayfs: failed to resolve './file0': -2 [ 653.205666][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1997'. [ 653.652080][T13303] sp0: Synchronizing with TNC [ 653.979940][ T29] audit: type=1400 audit(1733847599.563:1348): avc: denied { associate } for pid=13304 comm="syz.7.2002" name="1" dev="devpts" ino=4 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 654.920557][ T5817] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 654.936223][ T5821] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 655.713594][ T29] audit: type=1400 audit(1733847601.274:1349): avc: denied { open } for pid=13309 comm="syz.5.2003" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 655.932831][ T29] audit: type=1400 audit(1733847601.274:1350): avc: denied { ioctl } for pid=13309 comm="syz.5.2003" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 656.245629][ T29] audit: type=1400 audit(1733847601.274:1351): avc: denied { accept } for pid=13309 comm="syz.5.2003" lport=44985 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 656.969044][ T5817] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.980277][ T5817] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.990202][ T5817] usb 8-1: config 0 interface 0 has no altsetting 0 [ 656.996906][ T5817] usb 8-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 657.006077][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.015833][ T5817] usb 8-1: config 0 descriptor?? [ 657.159282][T13324] can0: slcan on ttyS3. [ 657.216421][ T29] audit: type=1400 audit(1733847602.677:1352): avc: denied { map } for pid=13328 comm="syz.5.2010" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 657.240246][ T29] audit: type=1400 audit(1733847602.677:1353): avc: denied { execute } for pid=13328 comm="syz.5.2010" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 657.265452][T13324] can0 (unregistered): slcan off ttyS3. [ 657.331878][T13313] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 657.367375][T13334] cgroup: noprefix used incorrectly [ 657.373147][T13313] CIFS mount error: No usable UNC path provided in device string! [ 657.373147][T13313] [ 657.390697][T13313] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 657.581411][ T5870] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 657.797612][ T5817] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 657.817928][ T5817] wacom 0003:056A:0084.0014: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.7-1/input0 [ 657.893049][ T5898] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 657.918926][ T5817] usb 8-1: USB disconnect, device number 31 [ 657.925362][ T5870] usb 9-1: Using ep0 maxpacket: 8 [ 657.939757][ T5870] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 657.950231][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.963256][ T5870] usb 9-1: config 0 descriptor?? [ 658.088212][ T5898] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 658.098402][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.118708][ T5898] usb 10-1: config 0 descriptor?? [ 658.127565][ T117] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 658.138909][ T5898] usbtest 10-1:0.0: Linux user mode test driver [ 658.145180][ T5898] usbtest 10-1:0.0: low-speed {control} tests [ 658.288258][ T117] usb 6-1: device descriptor read/64, error -71 [ 659.275639][T13334] kernel profiling enabled (shift: 9) [ 659.312163][ T29] audit: type=1400 audit(1733847604.632:1354): avc: denied { getopt } for pid=13333 comm="syz.9.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 659.352408][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2012'. [ 659.382977][T13334] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 659.428707][T13334] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 659.442489][ T117] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 659.483085][T13354] loop2: detected capacity change from 0 to 7 [ 659.487888][ T5867] usb 10-1: USB disconnect, device number 19 [ 659.508703][T13354] Dev loop2: unable to read RDB block 7 [ 659.525217][T13354] loop2: unable to read partition table [ 659.539418][T13354] loop2: partition table beyond EOD, truncated [ 659.549363][T13354] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 659.602966][ T117] usb 6-1: device descriptor read/64, error -71 [ 659.720683][ T117] usb usb6-port1: attempt power cycle [ 660.297717][ T117] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 660.331240][ T117] usb 6-1: device descriptor read/8, error -71 [ 661.880473][ T5867] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 662.182482][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2022'. [ 662.191954][T13378] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2022'. [ 662.628542][ T117] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 662.651440][ T5867] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 662.659630][ T5867] usb 10-1: config 0 has no interface number 0 [ 662.666118][ T5867] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 662.682658][ T5867] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 662.861152][ T117] usb 6-1: device not accepting address 47, error -71 [ 662.876752][ T117] usb usb6-port1: unable to enumerate USB device [ 663.147575][ T5867] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 663.163077][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.179694][ T5867] usb 10-1: Product: syz [ 663.184530][ T5867] usb 10-1: Manufacturer: syz [ 663.189307][ T5867] usb 10-1: SerialNumber: syz [ 663.205088][ T5867] usb 10-1: config 0 descriptor?? [ 663.274774][ T29] audit: type=1400 audit(1733847608.337:1355): avc: denied { connect } for pid=13384 comm="syz.5.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 663.295517][T13377] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 663.307046][ T5867] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 663.330707][ T5867] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 663.331932][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 663.349389][ T29] audit: type=1400 audit(1733847608.393:1356): avc: denied { write } for pid=13384 comm="syz.5.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 663.489420][ T29] audit: type=1400 audit(1733847608.393:1357): avc: denied { setopt } for pid=13384 comm="syz.5.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 663.611969][T13390] Cannot find set identified by id 0 to match [ 663.740798][T13376] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2024'. [ 663.897829][T13400] can0: slcan on ttyS3. [ 663.932505][ T117] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 664.131040][ T117] usb 6-1: config 255 has an invalid interface number: 210 but max is 0 [ 664.663236][ T117] usb 6-1: config 255 has no interface number 0 [ 664.669618][ T117] usb 6-1: config 255 interface 210 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 664.688640][ T117] usb 6-1: config 255 interface 210 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 664.700986][T13393] can0 (unregistered): slcan off ttyS3. [ 664.707936][ T117] usb 6-1: config 255 interface 210 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 664.857049][ T5867] usb 10-1: USB disconnect, device number 20 [ 664.889761][ T5867] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 664.906907][ T5867] cyberjack 10-1:0.69: device disconnected [ 664.942949][ T117] usb 6-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=7f.33 [ 664.980297][ T117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.988408][ T117] usb 6-1: Product: ꏤⰙ铇₯釼䅥ᄾ쏗萚凋넰㷓㞛污趞਋뙹瓾픜ም烛팷熌ͦ嶢喏ᙑ఺教힥౩礷刟竕夦鮰ᅫ䯵멧伟믗ꮷ邐䀝䮡盍く唸뙚탋ᄆ빭殺量꟢짺袶䀬偃˻ᒁỞ嗴돴曍툐㸭효岖ɜᬻ愄㎥啨괌㽚썲忶卦䙄⎫읞䰹幋ం‿률툌璺फ꩜٦뮆崎엩訌ᣄ [ 665.021140][ T117] usb 6-1: Manufacturer: 䀁 [ 665.274802][T13392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.288096][T13392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.339861][T13392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.376715][T13392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.449003][ T117] usb 6-1: USB disconnect, device number 48 [ 666.335548][ T5870] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 666.345782][ T5817] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 666.355858][ T5870] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 666.375281][ T5870] asix 9-1:0.0: probe with driver asix failed with error -71 [ 666.400080][ T5870] usb 9-1: USB disconnect, device number 37 [ 666.519725][ T5817] usb 10-1: Using ep0 maxpacket: 32 [ 666.528431][ T5817] usb 10-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 666.540971][ T5817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.567859][ T5817] usb 10-1: Product: syz [ 666.601841][ T5817] usb 10-1: Manufacturer: syz [ 666.614566][ T5817] usb 10-1: SerialNumber: syz [ 666.660118][ T5817] usb 10-1: config 0 descriptor?? [ 667.317701][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.361126][ T5817] rtl8150 10-1:0.0: couldn't reset the device [ 667.389960][ T5817] rtl8150 10-1:0.0: probe with driver rtl8150 failed with error -5 [ 667.434691][ T5817] usb 10-1: USB disconnect, device number 21 [ 667.806292][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2050'. [ 667.912292][T13450] x_tables: duplicate underflow at hook 2 [ 667.964090][ T5898] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 668.255199][ T29] audit: type=1326 audit(1733847613.004:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13453 comm="syz.8.2052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e1677ff19 code=0x0 [ 668.296783][T13457] netlink: 'syz.8.2052': attribute type 5 has an invalid length. [ 668.311193][ T5898] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 668.324010][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.462617][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.510287][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.519141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.880145][ T5898] usb 6-1: config 0 descriptor?? [ 669.010521][ T5833] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 669.555867][ T5817] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 669.589787][ T29] audit: type=1400 audit(1733847614.220:1359): avc: denied { ioctl } for pid=13429 comm="syz.5.2045" path="socket:[37400]" dev="sockfs" ino=37400 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 669.614912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.716255][ T5817] usb 2-1: device descriptor read/64, error -71 [ 669.968712][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.984778][ T5817] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 670.122509][ T5898] ath6kl: Failed to submit usb control message: -110 [ 670.129363][ T5898] ath6kl: unable to send the bmi data to the device: -110 [ 670.133274][ T5817] usb 2-1: device descriptor read/64, error -71 [ 670.136951][ T5898] ath6kl: Unable to send get target info: -110 [ 670.162321][ T5898] ath6kl: Failed to init ath6kl core: -110 [ 670.168947][ T5898] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 670.261751][ T5817] usb usb2-port1: attempt power cycle [ 670.318235][T13481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=13481 comm=syz.7.2059 [ 670.375430][ T29] audit: type=1400 audit(1733847614.987:1360): avc: denied { ioctl } for pid=13482 comm="syz.7.2060" path="socket:[36658]" dev="sockfs" ino=36658 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 670.463714][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.472368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.625237][ T5821] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 670.667522][ T5817] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 670.789271][ T5817] usb 2-1: device descriptor read/8, error -71 [ 671.206414][ T5817] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 671.234833][ T5817] usb 2-1: device descriptor read/8, error -71 [ 671.280365][T13494] sp0: Synchronizing with TNC [ 671.293588][ T29] audit: type=1400 audit(1733847615.848:1361): avc: denied { shutdown } for pid=13495 comm="syz.8.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 671.352044][ T5817] usb usb2-port1: unable to enumerate USB device [ 671.734706][ T5870] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 671.918575][ T5870] usb 9-1: Using ep0 maxpacket: 8 [ 671.939764][ T5870] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 671.974319][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.060129][ T5870] usb 9-1: Product: syz [ 672.101317][ T5870] usb 9-1: Manufacturer: syz [ 672.141259][ T5870] usb 9-1: SerialNumber: syz [ 672.153188][ T5870] usb 9-1: config 0 descriptor?? [ 672.170443][ T5817] usb 6-1: USB disconnect, device number 49 [ 672.180590][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.264581][ T5870] gspca_main: sq930x-2.14.0 probing 2770:930c [ 672.391286][ T29] audit: type=1400 audit(1733847616.821:1362): avc: denied { write } for pid=13501 comm="syz.9.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 672.434293][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2068'. [ 672.444237][ T5870] gspca_sq930x: reg_r 001f failed -32 [ 672.449681][ T5870] sq930x 9-1:0.0: probe with driver sq930x failed with error -32 [ 672.632549][T13512] netlink: 'syz.7.2070': attribute type 16 has an invalid length. [ 673.272631][T13511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.296782][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.656072][T13524] SET target dimension over the limit! [ 673.906264][T13534] sp0: Synchronizing with TNC [ 673.916492][T13535] ptrace attach of "./syz-executor exec"[5820] was attempted by ""[13535] [ 674.045753][ T29] audit: type=1400 audit(1733847618.402:1363): avc: denied { getopt } for pid=13528 comm="syz.1.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 674.261016][ T5817] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 674.445362][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.500027][ T5898] usb 9-1: USB disconnect, device number 38 [ 674.538463][ T5817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.686951][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.695321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.711154][ T5817] usb 6-1: config 0 has no interfaces? [ 674.733163][ T5817] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 674.742461][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.064083][ T5817] usb 6-1: config 0 descriptor?? [ 675.253818][T13544] Cannot find set identified by id 0 to match [ 675.616416][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.760739][T13552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.921053][ T5898] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 676.397569][ T5898] usb 8-1: device descriptor read/64, error -71 [ 676.623330][ T2971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.631673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.116194][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.263633][ T5898] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 677.317105][ T5817] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 677.413635][ T5898] usb 8-1: device descriptor read/64, error -71 [ 677.530569][ T5867] usb 6-1: USB disconnect, device number 50 [ 677.544951][ T5898] usb usb8-port1: attempt power cycle [ 677.597179][ T5817] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 677.631800][ T5817] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.790087][ T5817] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 677.799377][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 677.807500][ T5817] usb 9-1: SerialNumber: syz [ 677.937143][ T5898] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 677.980084][ T5898] usb 8-1: device descriptor read/8, error -71 [ 678.408248][T13586] netlink: 'syz.1.2090': attribute type 1 has an invalid length. [ 678.416059][T13586] netlink: 'syz.1.2090': attribute type 3 has an invalid length. [ 678.423906][T13586] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2090'. [ 678.443865][ T5898] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 678.457401][T13587] sp0: Synchronizing with TNC [ 678.468417][ T29] audit: type=1400 audit(1733847622.499:1364): avc: denied { bind } for pid=13577 comm="syz.1.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 678.523139][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.534742][ T5898] usb 8-1: device descriptor read/8, error -71 [ 678.667899][ T5898] usb usb8-port1: unable to enumerate USB device [ 679.607132][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.813999][ T5817] usb 9-1: skipping empty audio interface (v1) [ 680.193101][ T25] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 680.415530][ T5817] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 680.502607][ T25] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 680.524491][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.546742][ T25] usb 8-1: Product: syz [ 680.698681][ T5817] usb 9-1: USB disconnect, device number 39 [ 680.716741][ T25] usb 8-1: Manufacturer: syz [ 680.723419][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.731802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.742086][ T25] usb 8-1: SerialNumber: syz [ 680.747657][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.899902][ T6552] udevd[6552]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 680.916802][ T25] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 680.937776][T13623] random: crng reseeded on system resumption [ 680.944236][ T29] audit: type=1400 audit(1733847624.865:1365): avc: denied { write } for pid=13622 comm="syz.5.2104" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 680.969802][ T5898] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 681.014900][ T29] audit: type=1400 audit(1733847624.865:1366): avc: denied { open } for pid=13622 comm="syz.5.2104" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 681.304680][ T5817] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 681.350176][ T5867] usb 8-1: USB disconnect, device number 36 [ 681.458019][T13631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2106'. [ 681.475679][ T5817] usb 9-1: Using ep0 maxpacket: 32 [ 681.483792][ T5817] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.494944][ T5817] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 681.822051][ T5817] usb 9-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 681.838556][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.846807][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.867118][ T5817] usb 9-1: config 0 descriptor?? [ 681.882582][ T5817] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 682.106625][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.114945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.147948][ T5870] usb 9-1: USB disconnect, device number 40 [ 682.257556][T13639] IPVS: set_ctl: invalid protocol: 135 172.20.20.30:20004 [ 682.341587][ T5898] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 682.348580][ T5898] ath9k_htc: Failed to initialize the device [ 682.361921][ T5867] usb 8-1: ath9k_htc: USB layer deinitialized [ 682.526019][T13647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.403681][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.384833][ T5867] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 684.597266][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.618608][ T5917] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 684.671999][ T5867] usb 9-1: Using ep0 maxpacket: 16 [ 684.683890][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.747439][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.811535][T13673] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 685.125728][ T5867] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 685.168879][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.183469][ T5867] usb 9-1: config 0 descriptor?? [ 685.234009][T13677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.242794][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 685.248278][T13677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.256991][T13677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.266625][ T5917] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 685.272646][T13677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.275239][ T5917] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 685.292205][T13677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.300393][T13677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.308594][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 685.359164][T13677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.374729][T13677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.383761][T13677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.389119][ T5917] usb 2-1: config 1 has no interface number 0 [ 685.392323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.397891][ T5917] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.397925][ T5917] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 685.430507][ T5917] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 685.439606][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.462515][ T5917] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 685.591769][ T25] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 685.594683][T13681] ksmbd: Unknown IPC event: 8, ignore. [ 685.675455][ T5867] corsair 0003:1B1C:1B02.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 685.762776][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 686.020738][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.055063][ T25] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 686.092301][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.123674][ T25] usb 6-1: Product: syz [ 686.147345][ T25] usb 6-1: Manufacturer: syz [ 686.152021][ T25] usb 6-1: SerialNumber: syz [ 686.204322][ T25] usb 6-1: config 0 descriptor?? [ 686.224846][ T25] gspca_main: etoms-2.14.0 probing 102c:6151 [ 686.287814][ T29] audit: type=1400 audit(1733847629.879:1367): avc: denied { unmount } for pid=7968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 686.384394][ T29] audit: type=1400 audit(1733847629.954:1368): avc: denied { ioctl } for pid=13656 comm="syz.8.2115" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 686.707468][ T25] usb 6-1: USB disconnect, device number 51 [ 687.436616][T13706] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 688.114443][ T5867] usb 9-1: USB disconnect, device number 41 [ 688.208384][ T29] audit: type=1400 audit(1733847631.554:1369): avc: denied { mount } for pid=13712 comm="syz.8.2130" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 688.423581][ T29] audit: type=1400 audit(1733847631.563:1370): avc: denied { ioctl } for pid=13712 comm="syz.8.2130" path="socket:[38006]" dev="sockfs" ino=38006 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 689.129614][T13721] SET target dimension over the limit! [ 689.617944][ T29] audit: type=1400 audit(1733847632.985:1371): avc: denied { setopt } for pid=13722 comm="syz.9.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 690.591975][T13745] trusted_key: encrypted_key: key user:syz not found [ 691.071649][ T25] net_ratelimit: 218 callbacks suppressed [ 691.071664][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.111415][ T29] audit: type=1400 audit(1733847633.911:1372): avc: denied { ioctl } for pid=13740 comm="syz.9.2137" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 691.147547][ T5917] snd_usb_pod 2-1:1.1: set_interface failed [ 691.153722][ T5917] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 691.160966][ T5917] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -110 [ 691.335000][T13751] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2138'. [ 691.357502][T13751] input: syz0 as /devices/virtual/input/input68 [ 691.372504][ T25] usb 2-1: USB disconnect, device number 51 [ 692.841629][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.914553][T13765] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2144'. [ 692.952320][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.064063][ T5867] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 693.066911][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.080060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.102290][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.111143][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 693.121831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.130896][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.143123][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.151960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.202620][T13776] overlayfs: conflicting lowerdir path [ 693.332126][ T5867] usb 9-1: Using ep0 maxpacket: 32 [ 693.352354][ T5867] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 693.361969][ T5867] usb 9-1: config 0 has no interface number 0 [ 693.508259][ T5867] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.523876][ T5867] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.534479][ T5867] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 694.075911][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.096611][ T5867] usb 9-1: config 0 descriptor?? [ 694.101972][ T29] audit: type=1400 audit(1733847637.175:1373): avc: denied { ioctl } for pid=13766 comm="syz.7.2145" path="socket:[38081]" dev="sockfs" ino=38081 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 694.165266][ T9854] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 694.295876][ T29] audit: type=1400 audit(1733847637.362:1374): avc: denied { bind } for pid=13788 comm="syz.9.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 694.411990][ T29] audit: type=1400 audit(1733847637.362:1375): avc: denied { name_bind } for pid=13788 comm="syz.9.2152" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 694.456220][ T29] audit: type=1400 audit(1733847637.362:1376): avc: denied { node_bind } for pid=13788 comm="syz.9.2152" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 694.475239][ T9854] usb 2-1: Using ep0 maxpacket: 8 [ 694.493134][ T9854] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 694.503721][ T9854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.529366][ T9854] usb 2-1: Product: syz [ 694.539855][ T29] audit: type=1400 audit(1733847637.400:1377): avc: denied { listen } for pid=13788 comm="syz.9.2152" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 694.560564][ T9854] usb 2-1: Manufacturer: syz [ 694.570837][ T9854] usb 2-1: SerialNumber: syz [ 694.597285][ T9854] usb 2-1: config 0 descriptor?? [ 694.615310][ T29] audit: type=1400 audit(1733847637.400:1378): avc: denied { connect } for pid=13788 comm="syz.9.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 694.657063][ T29] audit: type=1400 audit(1733847637.400:1379): avc: denied { name_connect } for pid=13788 comm="syz.9.2152" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 694.689880][ T29] audit: type=1400 audit(1733847637.400:1380): avc: denied { accept } for pid=13788 comm="syz.9.2152" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 694.728507][ T29] audit: type=1400 audit(1733847637.400:1381): avc: denied { write } for pid=13788 comm="syz.9.2152" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=47220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 694.764586][ T29] audit: type=1400 audit(1733847637.409:1382): avc: denied { read } for pid=13788 comm="syz.9.2152" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=47220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 694.923562][ T5867] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0094.0016/input/input69 [ 694.963685][T13802] syz.5.2158: attempt to access beyond end of device [ 694.963685][T13802] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 695.018992][T13802] befs: (nbd5): unable to read superblock [ 695.196959][ T5867] uclogic 0003:28BD:0094.0016: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.8-1/input1 [ 695.215654][ T5867] usb 9-1: USB disconnect, device number 42 [ 695.887773][T13769] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2147'. [ 695.962245][ T9854] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 695.975952][ T9854] gspca_sunplus: reg_w_riv err -71 [ 695.987054][ T9854] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 695.997394][ T9854] usb 2-1: USB disconnect, device number 52 [ 696.464586][ T5917] net_ratelimit: 13 callbacks suppressed [ 696.464606][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.634276][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2162'. [ 697.364531][T13827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.372894][T13827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.381998][T13827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.428870][T13827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.460285][T13827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.555848][T13827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.565607][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.810697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.819500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.832613][T13833] ceph: No mds server is up or the cluster is laggy [ 699.089451][T13866] [ 699.091806][T13866] ====================================================== [ 699.098824][T13866] WARNING: possible circular locking dependency detected [ 699.105843][T13866] 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Not tainted [ 699.112947][T13866] ------------------------------------------------------ [ 699.119968][T13866] syz.8.2174/13866 is trying to acquire lock: [ 699.126030][T13866] ffff88802463ef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x1bc/0x280 [ 699.135106][T13866] [ 699.135106][T13866] but task is already holding lock: [ 699.142470][T13866] ffff88805fbf6d18 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x340/0xc30 [ 699.152336][T13866] [ 699.152336][T13866] which lock already depends on the new lock. [ 699.152336][T13866] [ 699.162730][T13866] [ 699.162730][T13866] the existing dependency chain (in reverse order) is: [ 699.171738][T13866] [ 699.171738][T13866] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}: [ 699.180018][T13866] _raw_spin_lock+0x2e/0x40 [ 699.185051][T13866] sch_direct_xmit+0x340/0xc30 [ 699.190358][T13866] __dev_queue_xmit+0x13d4/0x43e0 [ 699.195933][T13866] hsr_forward_skb+0xca3/0x2650 [ 699.201322][T13866] hsr_dev_xmit+0x1c7/0x280 [ 699.206354][T13866] dev_hard_start_xmit+0x9a/0x7b0 [ 699.211898][T13866] __dev_queue_xmit+0x7f0/0x43e0 [ 699.217353][T13866] neigh_connected_output+0x45c/0x630 [ 699.223244][T13866] ip6_finish_output2+0xb1b/0x2070 [ 699.228871][T13866] ip6_finish_output+0x3f9/0x1360 [ 699.234412][T13866] ip6_output+0x1f8/0x540 [ 699.239257][T13866] mld_sendpack+0x9f0/0x11d0 [ 699.244358][T13866] mld_ifc_work+0x740/0xca0 [ 699.249377][T13866] process_one_work+0x9c5/0x1ba0 [ 699.254833][T13866] worker_thread+0x6c8/0xf00 [ 699.259931][T13866] kthread+0x2c1/0x3a0 [ 699.264515][T13866] ret_from_fork+0x45/0x80 [ 699.269445][T13866] ret_from_fork_asm+0x1a/0x30 [ 699.274724][T13866] [ 699.274724][T13866] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 699.282444][T13866] __lock_acquire+0x249e/0x3c40 [ 699.287805][T13866] lock_acquire.part.0+0x11b/0x380 [ 699.293424][T13866] _raw_spin_lock_bh+0x33/0x40 [ 699.298696][T13866] hsr_dev_xmit+0x1bc/0x280 [ 699.303710][T13866] dev_hard_start_xmit+0x9a/0x7b0 [ 699.309245][T13866] __dev_queue_xmit+0x7f0/0x43e0 [ 699.314692][T13866] neigh_connected_output+0x45c/0x630 [ 699.320623][T13866] ip6_finish_output2+0xb1b/0x2070 [ 699.326245][T13866] ip6_finish_output+0x3f9/0x1360 [ 699.331776][T13866] ip6_output+0x1f8/0x540 [ 699.336613][T13866] ndisc_send_skb+0xa69/0x1c50 [ 699.341884][T13866] ndisc_send_ns+0xc7/0x150 [ 699.346894][T13866] ndisc_solicit+0x2f7/0x510 [ 699.351991][T13866] neigh_probe+0xcb/0x110 [ 699.356831][T13866] __neigh_event_send+0xace/0x13e0 [ 699.362448][T13866] neigh_resolve_output+0x5ed/0x950 [ 699.368151][T13866] ip6_finish_output2+0xb1b/0x2070 [ 699.373770][T13866] ip6_finish_output+0x3f9/0x1360 [ 699.379303][T13866] ip6_output+0x1f8/0x540 [ 699.384139][T13866] ip6_local_out+0xcd/0x4a0 [ 699.389158][T13866] ip6_send_skb+0x112/0x460 [ 699.394168][T13866] ip6_push_pending_frames+0xe0/0x110 [ 699.400048][T13866] icmpv6_push_pending_frames+0x2dc/0x460 [ 699.406285][T13866] icmp6_send+0x1c4a/0x2970 [ 699.411307][T13866] ip6_link_failure+0x31/0x5a0 [ 699.416595][T13866] ip_tunnel_xmit+0x2f54/0x3580 [ 699.421978][T13866] __gre_xmit+0x8bc/0xc00 [ 699.426819][T13866] erspan_xmit+0x570/0x25b0 [ 699.431832][T13866] dev_hard_start_xmit+0x9a/0x7b0 [ 699.437369][T13866] sch_direct_xmit+0x1ae/0xc30 [ 699.442667][T13866] __dev_queue_xmit+0x13d4/0x43e0 [ 699.448200][T13866] neigh_resolve_output+0x5bc/0x950 [ 699.453905][T13866] ip6_finish_output2+0xb1b/0x2070 [ 699.459526][T13866] ip6_finish_output+0x3f9/0x1360 [ 699.465056][T13866] ip6_output+0x1f8/0x540 [ 699.469891][T13866] rawv6_sendmsg+0x2306/0x4440 [ 699.475170][T13866] inet_sendmsg+0x119/0x140 [ 699.480184][T13866] ____sys_sendmsg+0x98c/0xc90 [ 699.485458][T13866] ___sys_sendmsg+0x135/0x1e0 [ 699.490649][T13866] __sys_sendmmsg+0x201/0x420 [ 699.495839][T13866] __x64_sys_sendmmsg+0x9c/0x100 [ 699.501288][T13866] do_syscall_64+0xcd/0x250 [ 699.506299][T13866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.512705][T13866] [ 699.512705][T13866] other info that might help us debug this: [ 699.512705][T13866] [ 699.522912][T13866] Possible unsafe locking scenario: [ 699.522912][T13866] [ 699.530345][T13866] CPU0 CPU1 [ 699.535703][T13866] ---- ---- [ 699.541057][T13866] lock(&qdisc_xmit_lock_key#3); [ 699.546081][T13866] lock(&hsr->seqnr_lock); [ 699.553102][T13866] lock(&qdisc_xmit_lock_key#3); [ 699.560647][T13866] lock(&hsr->seqnr_lock); [ 699.565140][T13866] [ 699.565140][T13866] *** DEADLOCK *** [ 699.565140][T13866] [ 699.573278][T13866] 12 locks held by syz.8.2174/13866: [ 699.578548][T13866] #0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: rawv6_sendmsg+0x2153/0x4440 [ 699.588040][T13866] #1: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x3db/0x2070 [ 699.597882][T13866] #2: ffffffff8e1bb4a0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x43e0 [ 699.607814][T13866] #3: ffff88807ebf9258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x11b2/0x43e0 [ 699.620434][T13866] #4: ffff88805fbf6d18 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x340/0xc30 [ 699.630702][T13866] #5: ffff8880320d0958 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0x8a4/0x2970 [ 699.640100][T13866] #6: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0xfec/0x2970 [ 699.649232][T13866] #7: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0xc4/0x460 [ 699.658367][T13866] #8: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x3db/0x2070 [ 699.668194][T13866] #9: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x8a0/0x1c50 [ 699.677670][T13866] #10: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x3db/0x2070 [ 699.687582][T13866] #11: ffffffff8e1bb4a0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x43e0 [ 699.697578][T13866] [ 699.697578][T13866] stack backtrace: [ 699.703449][T13866] CPU: 1 UID: 0 PID: 13866 Comm: syz.8.2174 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 699.714194][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 699.724233][T13866] Call Trace: [ 699.727496][T13866] [ 699.730414][T13866] dump_stack_lvl+0x116/0x1f0 [ 699.735091][T13866] print_circular_bug+0x419/0x5d0 [ 699.740105][T13866] check_noncircular+0x31a/0x400 [ 699.745027][T13866] ? __pfx_check_noncircular+0x10/0x10 [ 699.750475][T13866] ? add_lock_to_list+0x17d/0x390 [ 699.755496][T13866] __lock_acquire+0x249e/0x3c40 [ 699.760346][T13866] ? __pfx___lock_acquire+0x10/0x10 [ 699.765532][T13866] ? mark_lock+0xb5/0xc60 [ 699.769845][T13866] ? ip6_push_pending_frames+0xe0/0x110 [ 699.775466][T13866] ? icmpv6_push_pending_frames+0x2dc/0x460 [ 699.781347][T13866] ? icmp6_send+0x1c4a/0x2970 [ 699.786008][T13866] ? ip6_link_failure+0x31/0x5a0 [ 699.790944][T13866] lock_acquire.part.0+0x11b/0x380 [ 699.796046][T13866] ? hsr_dev_xmit+0x1bc/0x280 [ 699.800721][T13866] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 699.806339][T13866] ? rcu_is_watching+0x12/0xc0 [ 699.811097][T13866] ? trace_lock_acquire+0x14e/0x1f0 [ 699.816285][T13866] ? __pfx_skb_network_protocol+0x10/0x10 [ 699.821992][T13866] ? hsr_dev_xmit+0x1bc/0x280 [ 699.826661][T13866] ? lock_acquire+0x2f/0xb0 [ 699.831149][T13866] ? hsr_dev_xmit+0x1bc/0x280 [ 699.835821][T13866] _raw_spin_lock_bh+0x33/0x40 [ 699.840569][T13866] ? hsr_dev_xmit+0x1bc/0x280 [ 699.845234][T13866] hsr_dev_xmit+0x1bc/0x280 [ 699.849730][T13866] dev_hard_start_xmit+0x9a/0x7b0 [ 699.854745][T13866] __dev_queue_xmit+0x7f0/0x43e0 [ 699.859672][T13866] ? __lock_acquire+0x15a9/0x3c40 [ 699.864685][T13866] ? __pfx___dev_queue_xmit+0x10/0x10 [ 699.870047][T13866] ? hlock_class+0x4e/0x130 [ 699.874549][T13866] ? mark_lock+0xb5/0xc60 [ 699.878864][T13866] ? __pfx___lock_acquire+0x10/0x10 [ 699.884053][T13866] ? __pfx_mark_lock+0x10/0x10 [ 699.888809][T13866] ? find_held_lock+0x2d/0x110 [ 699.893572][T13866] ? __asan_memcpy+0x3c/0x60 [ 699.898151][T13866] ? eth_header+0x11c/0x1f0 [ 699.902645][T13866] neigh_connected_output+0x45c/0x630 [ 699.908012][T13866] ip6_finish_output2+0xb1b/0x2070 [ 699.913115][T13866] ip6_finish_output+0x3f9/0x1360 [ 699.918127][T13866] ip6_output+0x1f8/0x540 [ 699.922446][T13866] ? __pfx_ip6_output+0x10/0x10 [ 699.927285][T13866] ndisc_send_skb+0xa69/0x1c50 [ 699.932041][T13866] ? __pfx_ndisc_send_skb+0x10/0x10 [ 699.937232][T13866] ? __pfx_dst_output+0x10/0x10 [ 699.942074][T13866] ? __ndisc_fill_addr_option+0xcd/0x110 [ 699.947696][T13866] ? ipv6_get_lladdr+0x2d3/0x4f0 [ 699.952622][T13866] ndisc_send_ns+0xc7/0x150 [ 699.957113][T13866] ? __pfx_ndisc_send_ns+0x10/0x10 [ 699.962212][T13866] ? ipv6_chk_addr_and_flags+0x3b/0x60 [ 699.967665][T13866] ndisc_solicit+0x2f7/0x510 [ 699.972242][T13866] ? __pfx_ndisc_solicit+0x10/0x10 [ 699.977345][T13866] ? __pfx_ndisc_solicit+0x10/0x10 [ 699.982444][T13866] neigh_probe+0xcb/0x110 [ 699.986764][T13866] __neigh_event_send+0xace/0x13e0 [ 699.991863][T13866] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 699.997486][T13866] neigh_resolve_output+0x5ed/0x950 [ 700.002671][T13866] ? ip6_finish_output2+0x3db/0x2070 [ 700.007948][T13866] ip6_finish_output2+0xb1b/0x2070 [ 700.013054][T13866] ip6_finish_output+0x3f9/0x1360 [ 700.018076][T13866] ip6_output+0x1f8/0x540 [ 700.022394][T13866] ? __pfx_ip6_output+0x10/0x10 [ 700.027234][T13866] ip6_local_out+0xcd/0x4a0 [ 700.031732][T13866] ip6_send_skb+0x112/0x460 [ 700.036225][T13866] ip6_push_pending_frames+0xe0/0x110 [ 700.041586][T13866] icmpv6_push_pending_frames+0x2dc/0x460 [ 700.047299][T13866] icmp6_send+0x1c4a/0x2970 [ 700.051793][T13866] ? __pfx_icmp6_send+0x10/0x10 [ 700.056629][T13866] ? lock_acquire.part.0+0x11b/0x380 [ 700.061905][T13866] ? find_held_lock+0x2d/0x110 [ 700.066662][T13866] ? trace_lock_acquire+0x14e/0x1f0 [ 700.071858][T13866] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 700.077230][T13866] ? ip6_link_failure+0x31/0x5a0 [ 700.082163][T13866] ip6_link_failure+0x31/0x5a0 [ 700.086919][T13866] ? __pfx_ip6_link_failure+0x10/0x10 [ 700.092303][T13866] ip_tunnel_xmit+0x2f54/0x3580 [ 700.097147][T13866] ? __free_zapped_classes+0x2e1/0x320 [ 700.102602][T13866] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 700.107787][T13866] ? __pfx_mark_lock+0x10/0x10 [ 700.112537][T13866] ? mark_lock+0x9f/0xc60 [ 700.116856][T13866] ? find_held_lock+0x2d/0x110 [ 700.121615][T13866] ? hlock_class+0x4e/0x130 [ 700.126111][T13866] ? mark_lock+0xb5/0xc60 [ 700.130431][T13866] ? mark_lock+0xb5/0xc60 [ 700.134752][T13866] __gre_xmit+0x8bc/0xc00 [ 700.139075][T13866] ? __pfx___gre_xmit+0x10/0x10 [ 700.143919][T13866] ? skb_network_protocol+0x127/0x6d0 [ 700.149284][T13866] erspan_xmit+0x570/0x25b0 [ 700.153802][T13866] ? lock_acquire.part.0+0x11b/0x380 [ 700.159081][T13866] ? __pfx_erspan_xmit+0x10/0x10 [ 700.164010][T13866] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 700.169636][T13866] ? rcu_is_watching+0x12/0xc0 [ 700.174404][T13866] dev_hard_start_xmit+0x9a/0x7b0 [ 700.179427][T13866] sch_direct_xmit+0x1ae/0xc30 [ 700.184179][T13866] ? rcu_is_watching+0x12/0xc0 [ 700.188935][T13866] ? __pfx_sch_direct_xmit+0x10/0x10 [ 700.194209][T13866] ? do_raw_spin_trylock+0xb1/0x180 [ 700.199407][T13866] ? __dev_queue_xmit+0x11b2/0x43e0 [ 700.204595][T13866] ? lock_acquire+0x2f/0xb0 [ 700.209091][T13866] ? __dev_queue_xmit+0x11b2/0x43e0 [ 700.214280][T13866] __dev_queue_xmit+0x13d4/0x43e0 [ 700.219299][T13866] ? __lock_acquire+0x15a9/0x3c40 [ 700.224314][T13866] ? __pfx___dev_queue_xmit+0x10/0x10 [ 700.229677][T13866] ? xfs_bmapi_write+0x4d/0xcf0 [ 700.234525][T13866] ? find_held_lock+0x2d/0x110 [ 700.239287][T13866] ? __asan_memcpy+0x3c/0x60 [ 700.243864][T13866] ? eth_header+0x11c/0x1f0 [ 700.248360][T13866] neigh_resolve_output+0x5bc/0x950 [ 700.253552][T13866] ip6_finish_output2+0xb1b/0x2070 [ 700.258659][T13866] ip6_finish_output+0x3f9/0x1360 [ 700.263676][T13866] ip6_output+0x1f8/0x540 [ 700.267994][T13866] rawv6_sendmsg+0x2306/0x4440 [ 700.272758][T13866] ? avc_has_perm_noaudit+0x119/0x3a0 [ 700.278131][T13866] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 700.283241][T13866] ? avc_has_perm_noaudit+0x143/0x3a0 [ 700.288606][T13866] ? avc_has_perm+0x11b/0x1c0 [ 700.293278][T13866] ? __pfx_dst_output+0x10/0x10 [ 700.298126][T13866] ? __pfx___lock_acquire+0x10/0x10 [ 700.303324][T13866] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 700.308432][T13866] ? inet_sendmsg+0x119/0x140 [ 700.313101][T13866] inet_sendmsg+0x119/0x140 [ 700.317601][T13866] ____sys_sendmsg+0x98c/0xc90 [ 700.322357][T13866] ? copy_msghdr_from_user+0x10b/0x160 [ 700.327811][T13866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.333092][T13866] ? __lock_acquire+0xcc5/0x3c40 [ 700.338022][T13866] ___sys_sendmsg+0x135/0x1e0 [ 700.342701][T13866] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.347895][T13866] ? trace_lock_acquire+0x14e/0x1f0 [ 700.353098][T13866] __sys_sendmmsg+0x201/0x420 [ 700.357788][T13866] ? __pfx___sys_sendmmsg+0x10/0x10 [ 700.362982][T13866] ? __pfx_do_futex+0x10/0x10 [ 700.367825][T13866] ? xfd_validate_state+0x5d/0x180 [ 700.372926][T13866] ? rcu_is_watching+0x12/0xc0 [ 700.377683][T13866] __x64_sys_sendmmsg+0x9c/0x100 [ 700.382616][T13866] ? lockdep_hardirqs_on+0x7c/0x110 [ 700.387804][T13866] do_syscall_64+0xcd/0x250 [ 700.392300][T13866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.398185][T13866] RIP: 0033:0x7f9e1677ff19 [ 700.402587][T13866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.422189][T13866] RSP: 002b:00007f9e145f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 700.430593][T13866] RAX: ffffffffffffffda RBX: 00007f9e16945fa0 RCX: 00007f9e1677ff19 [ 700.438568][T13866] RDX: 0000000000000002 RSI: 0000000020001e80 RDI: 0000000000000003 [ 700.446524][T13866] RBP: 00007f9e167f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 700.454481][T13866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.462437][T13866] R13: 0000000000000000 R14: 00007f9e16945fa0 R15: 00007ffe0084a428 [ 700.470413][T13866] [ 700.473500][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.516435][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 700.516447][ T29] audit: type=1400 audit(1733847643.181:1391): avc: denied { ioctl } for pid=13867 comm="syz.5.2177" path="socket:[38340]" dev="sockfs" ino=38340 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 700.557866][T13866] syz.8.2174 (13866) used greatest stack depth: 19888 bytes left [ 700.558594][T13873] SELinux: policydb version 0 does not match my version range 15-33 [ 700.600419][T13873] SELinux: failed to load policy [ 701.926620][ C0] net_ratelimit: 14 callbacks suppressed [ 701.926634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.940451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.948612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.956730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.964913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.973077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.981260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.989407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.997597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.005753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.255706][ T5906] net_ratelimit: 100 callbacks suppressed [ 708.255723][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.269678][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog