last executing test programs: 3m49.550612706s ago: executing program 4 (id=75): socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10001}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1c, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) eventfd(0x8) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4018, r3}, 0x18) 3m48.644183348s ago: executing program 4 (id=78): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) 3m47.472018072s ago: executing program 4 (id=81): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3m47.471472372s ago: executing program 4 (id=82): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_off}]}) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0xcb0a) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r3, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000856000/0x3000)=nil, 0x3000}, 0x1000000}) chdir(&(0x7f0000000140)='./bus\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x7fffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 3m45.844103555s ago: executing program 4 (id=85): socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd9e, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b2f, 0x1000000000011) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000003f000b0025bd700000000000020000000c00f3a40500000000000000d3bc170c38f63c141e149aac324693356b8747fbb121da676e8e48f0884e08693890b7deeeb04772d74355ff3438bf837c407e2d3681ceb67016a87b07020962dc4b778bb6ad8fe00fd0fe068ec5878a47c8f776bf9468efa9dbfc81968f3dbbf52b609b7ea7cbae2b69814c199f19f5edd0217e75f621397717efeefa37bee7c7f4c638e98be8f4db511ba86f4869b73a85d28b7a04ce8361"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001bc0)=@mangle={'mangle\x00', 0x44, 0x6, 0xcb0, 0x138, 0x138, 0xb48, 0x9b0, 0x138, 0xc18, 0xc18, 0xc18, 0xc18, 0xc18, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x8}, {0x6, 0x1}, {0x9, 0x3}, {0x9, 0x1}, {0xa8e5}, {0x11}, {0x400, 0x2}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0x3}, {0x6, 0x1}], [{0x7fff, 0x9}, {0x4, 0x3}, {0xd, 0xb}, {0x6, 0x5}, {0x0, 0xfffff228}, {0x6, 0x8}, {0xfffffffc, 0xe000}, {0x5, 0x6}, {0x948, 0x37}, {0x101, 0x7}, {0x2, 0x6}], 0x0, 0xb}, {[{0x2, 0x2}, {0x9}, {0x8, 0x1}, {0x80, 0x2}, {0x4, 0x2}, {0x2, 0x2}, {0x2, 0x2}, {0x80000001, 0x2}, {0xe7e, 0x1}, {0x7fffffff, 0x3}, {0x7, 0x2}], [{0x373d, 0x7}, {0x7fffffff, 0xa}, {0x5, 0xfffff000}, {0xc771, 0x10}, {0x81, 0x3}, {0x3}, {0x3, 0x9}, {0x8, 0x10001}, {0x3, 0x7}, {0xecb, 0x5d2}, {0x9, 0x1}], 0x1, 0x9}, {[{0x4, 0x2}, {0x4, 0x2}, {0x8000, 0x2}, {0x7, 0x2}, {0x3ff, 0x1}, {0x8000, 0x3}, {0x3ff, 0x3}, {0x6, 0x2}, {0xc2, 0x2}, {0x1, 0x1}, {0x6e898bc6, 0x3}], [{0xd, 0x2}, {0x10000, 0x6bd}, {0x8000, 0x2}, {0x4, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0xd9, 0x9}, {0x3, 0x5410}, {0x7, 0x9}, {0x2eb, 0x1}, {0x2, 0x5}], 0x8, 0x7}, {[{0x5, 0x2}, {0x3}, {0x6, 0x1}, {0xaa, 0x1}, {0xaeb6}, {0x7}, {0x81, 0x2}, {0x80000001, 0x1}, {0x7}, {0x100, 0x1}, {0x64}], [{0x0, 0x6}, {0x3, 0x55a}, {0x9, 0x328c}, {0x1, 0x4}, {0x8000, 0x6}, {0x471f, 0x8171}, {0x1, 0x1}, {0x0, 0x400}, {0x7fff, 0x5}, {0x7fff, 0x4}, {0x800, 0x3c69}], 0x9, 0x8}, {[{0x13, 0x1}, {0x4, 0x3}, {0x81, 0x2}, {0x2, 0x1}, {0x7e}, {0x82c7, 0x2}, {0x3ff, 0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x8000, 0x1}, {0x1000, 0x1}], [{0x800, 0x5}, {0x0, 0x7ff}, {0x31cec858, 0xc73}, {0x2, 0x3}, {0x9, 0x100}, {0x6, 0x7}, {0x101, 0x101}, {0xfffffff7, 0xfffffffc}, {0x8d2d2a6, 0x8000}, {0x3e43}, {0x7fff, 0x4}], 0x7, 0x6}, {[{0x1, 0x1}, {0xc, 0x1}, {0x1, 0x2}, {0x9, 0x3}, {0x2}, {0xffffffff, 0x2}, {0x7}, {0x5, 0x3}, {0x7}, {0xfee}, {0x6, 0x1}], [{0x80, 0x21a2}, {0x2, 0x4}, {0x8000, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x7, 0x2b1}, {0x8, 0x9}, {0x3, 0x1}, {0x4, 0x7ff}, {0x9, 0x48c2}, {0x10001, 0x5}], 0x7, 0x1}, {[{0x1, 0x1}, {0x3, 0x3}, {0x84, 0x3}, {0x400, 0x3}, {0x6e31, 0x1}, {0x2, 0x3}, {0x9, 0x2}, {0x4, 0x2}, {0x8, 0x1}, {0x9, 0x3}, {0x3914}], [{0x5, 0x2f35}, {0x3, 0x8}, {0x6, 0x6870}, {0xfffffff9}, {0x8e3, 0x200}, {0x9, 0xbfd5}, {0x7, 0x226}, {0x0, 0xfffffffd}, {0xffffffa5, 0x3d}, {0x3, 0x6}, {0x5, 0x3}], 0x3, 0x1}, {[{0x5, 0x2}, {0x85f, 0x2}, {0x5}, {0xfff, 0x3}, {0x80000001, 0x3}, {0xb58, 0x3}, {0x10, 0x1}, {0x53, 0x3}, {0x40}, {0x5c, 0x3}, {0x474f, 0x2}], [{0x3, 0x183}, {0x6, 0x5efb5271}, {0x4, 0x1ff}, {0x9, 0x5}, {0x3, 0x1}, {0x10, 0x1}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x5}, {0xe79f, 0x2}, {0x10, 0x2}], 0x5, 0x6}, {[{0x21b1, 0x1}, {0x200}, {}, {0x159d2f81, 0x3}, {0x8, 0x2}, {0x80}, {0x296, 0x3}, {0x7, 0x1ddaba58ff2d2f41}, {}, {0xe, 0x1}, {0x4, 0x3}], [{0xfffffe18, 0xffffffff}, {0x80, 0x8}, {0x7, 0x6}, {0x85, 0x7}, {0x3, 0x2acb}, {0xab05, 0x3}, {0x0, 0xffffffff}, {0x1, 0x8}, {0x1f, 0x1000}, {0x3, 0x4}], 0x5, 0x3}, {[{0xeca5, 0x3}, {0x1, 0x3}, {0x9, 0x3}, {0x2, 0x2}, {0xaf27, 0x3}, {0x9}, {0xa9e, 0x1}, {0x8c96}, {0x101}, {0x4}, {0x7, 0x3}], [{0x4, 0x10001}, {0x1000, 0x8}, {0x8, 0x4}, {0x4, 0x4}, {0xc8, 0x9}, {0x8, 0x3}, {0xcbf, 0x24}, {0x7, 0xf5}, {0x7, 0x4}, {0x2, 0x5}, {0x3329, 0xcf7}], 0x4, 0x9}, {[{0xfffffff9, 0x3}, {0x2, 0x2}, {0x1}, {0x6}, {0x7, 0x1}, {0x8001, 0x2}, {0x4, 0x2}, {0xffff, 0x2}, {0xfffffffe, 0x2}, {0x2, 0x1}, {0xf, 0x2}], [{0xfffffff9, 0xff}, {0xbe03, 0x6}, {0xee0, 0x7fffffff}, {0x9, 0x8}, {0x1, 0xffffffff}, {0x2, 0x9}, {0xfffffffe, 0x11000}, {0x7, 0x1}, {0x5a6, 0x4}, {0x1}, {0x7}], 0xb, 0xb}], 0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xd10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) 3m43.791108458s ago: executing program 4 (id=89): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x1012, r0, 0x100000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x82083, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000840)={0x7, 0x4d, 0x103}, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffffaf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) 3m42.983501056s ago: executing program 32 (id=89): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x1012, r0, 0x100000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x82083, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000840)={0x7, 0x4d, 0x103}, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffffaf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) 1m30.742282675s ago: executing program 5 (id=448): userfaultfd(0x80001) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) setgroups(0x0, &(0x7f0000000080)) lseek(0xffffffffffffffff, 0x9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000070000000000000e02000000001b78ae92898124ed00000c00000000000000000000002e2e"], &(0x7f00000001c0)=""/250, 0x3e, 0xfa, 0x1, 0x0, 0x0, @void, @value}, 0x28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) setgroups(0x2, &(0x7f0000001100)=[0x0, r3]) 1m26.595192283s ago: executing program 5 (id=456): userfaultfd(0x80001) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) setgroups(0x0, &(0x7f0000000080)) lseek(0xffffffffffffffff, 0x9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000070000000000000e02000000001b78ae92898124ed00000c00000000000000000000002e2e"], &(0x7f00000001c0)=""/250, 0x3e, 0xfa, 0x1, 0x0, 0x0, @void, @value}, 0x28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) setgroups(0x2, &(0x7f0000001100)=[0x0, r3]) 1m21.926515783s ago: executing program 5 (id=464): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0xc0}, @timestamp_prespec={0x44, 0x4, 0x30, 0x3, 0x8}, @noop, @rr={0x7, 0x3, 0x5}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sysinfo(&(0x7f0000000300)=""/166) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d8b6010203010902120001000000e2090401000015cc1c00"], 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$kcm(0x29, 0x8, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m16.706591365s ago: executing program 5 (id=480): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "91cf254bf5fe255d", "3ada753cf5218d6f778cd129a62163719d8bd735bb9cac4e08006ff9229fcb57", "0200", "4a2112c97a93bca7"}, 0x38) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0x4040814}, 0xee) close(r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 1m15.122534397s ago: executing program 5 (id=486): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000791840000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r6, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) 1m14.711940492s ago: executing program 5 (id=488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x0, 0x2cb}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) 1m14.485678529s ago: executing program 33 (id=488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x0, 0x2cb}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) 28.683756456s ago: executing program 1 (id=643): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff96) sysfs$2(0x2, 0xde, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(r1, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23894) syz_80211_inject_frame(&(0x7f0000000d40)=@device_b, &(0x7f0000000d80)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_a, @broadcast, @device_a, {0x7, 0x5}, @device_b}}, 0x1e) timer_create(0x2, 0x0, &(0x7f0000001040)) clock_gettime(0x0, &(0x7f0000001080)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$inet6(0xa, 0x3, 0x2f) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 26.573039879s ago: executing program 1 (id=647): socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000021, &(0x7f0000001ec0)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) utime(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000001b00), 0x0, 0x0, 0x0, 0x2004c894}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000005c0), 0xc80c0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x8008631e, &(0x7f0000000000)) 23.04401685s ago: executing program 1 (id=655): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}], 0x1, 0x16, 0xfffffff9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b00), 0x0, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) socket(0x200000100000011, 0x3, 0x3) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}}, 0x0) 21.531037277s ago: executing program 1 (id=659): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "91cf254bf5fe255d", "3ada753cf5218d6f778cd129a62163719d8bd735bb9cac4e08006ff9229fcb57", "0200", "4a2112c97a93bca7"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0x4040814}, 0xee) close(r4) 18.901216588s ago: executing program 0 (id=662): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000791840000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) 17.266392189s ago: executing program 1 (id=666): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/cgroup\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create1(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10009}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)=0x10001) 16.72015636s ago: executing program 1 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0xf0ffff}, 0x57) 15.945839403s ago: executing program 34 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0xf0ffff}, 0x57) 15.60712487s ago: executing program 0 (id=671): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x3c}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000003c0)='/dev/i2c-#\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c) r2 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) futex(0x0, 0x4, 0x801, 0x0, &(0x7f0000000040)=0xfffffffd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) fstat(r3, &(0x7f0000000080)) read$FUSE(r2, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000500)=[@ioring_restriction_register_op={0x0, 0x15}], 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x8010) socket(0x10, 0x80003, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="180000002c0001000000000000000000040000a304001880"], 0x18}], 0x1}, 0x0) 14.768338707s ago: executing program 0 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 13.629264738s ago: executing program 0 (id=675): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "91cf254bf5fe255d", "3ada753cf5218d6f778cd129a62163719d8bd735bb9cac4e08006ff9229fcb57", "0200", "4a2112c97a93bca7"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0x4040814}, 0xee) close(r4) 12.231306255s ago: executing program 0 (id=678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x3c}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000003c0)='/dev/i2c-#\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c) r3 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) futex(0x0, 0x4, 0x801, 0x0, &(0x7f0000000040)=0xfffffffd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) fstat(r4, &(0x7f0000000080)) read$FUSE(r3, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000500)=[@ioring_restriction_register_op={0x0, 0x15}], 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x8010) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="180000002c0001000000000000000000040000a304001880"], 0x18}], 0x1}, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x4000055}, 0x4000000) 10.200654085s ago: executing program 3 (id=683): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x3c}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000003c0)='/dev/i2c-#\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c) r2 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) futex(0x0, 0x4, 0x801, 0x0, &(0x7f0000000040)=0xfffffffd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) fstat(r3, &(0x7f0000000080)) read$FUSE(r2, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000500)=[@ioring_restriction_register_op={0x0, 0x15}], 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x8010) socket(0x10, 0x80003, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="180000002c0001000000000000000000040000a304001880"], 0x18}], 0x1}, 0x0) 10.049273186s ago: executing program 0 (id=685): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x3, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x2b, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x8000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000077e50bf63e2eea0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="36f99499aed4d63daadff0ffe465bce64bf6ab4d0aec5836d0f9cf3eacd036e394e37b0424786746b2de3554c3f4bc8f32d64b03fbe9d82640dcc6ac6677c1f42c784402df344618b748a2929f04772bb0051174c6afc91f7fc117d795790be4aed8a9c06e434245a5eaeedcf72ad090add36916b21e82bbfcd8016c", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100dfaafdae0000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r2, @ANYBLOB="8ef7b40bb6e9c0170100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x10}}, {{&(0x7f0000005c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005d40)=[{&(0x7f0000005cc0)="0a078a69d77a1708ed15034eded3464e749d746a44592ba814e1bf43b08fb8bcebcf0f7b404b8ce799255d486e9857b4ea9515c6700a80dd7372693f17983f5320e3de37bf1251c2917c584fe63cf6312e3c5c1c4e7794cd7f6d9d969310ec7feb7b36d9ab189812285e9f5072f42957be079d25654be2a783229fb4d5", 0x7d}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1800000000000000010000000100000019a0e2eb4a705cd6e591f79d717127255b8e5d6a7434fa5b9cc5ecf637ea99f412abfc4a5dac649bac5d6c87a7fd0bed13d4d82957a438858f16d1ef37c6b89c3804d871de20fe26a1c3d75fb61f4aac1f48f97801420cd719de7826c745b65e5e3771f13c699af8410a15bbc5358f068d2884768fce83f790924446f3369f39de2f1ecaaba13923ea2e7caa3019dc558841dd50864ec4bd8b3a881ce3a8d4a490740e4a19559a8b96baf09f9e9dd4ca399e57c308e55b8ea5f5d0769e57a69265a1d06eb5c776d1e28d3334a922ed641083a259507c43b3598372f67c3001d6489c", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES64=r1, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x100, 0x800}}, {{&(0x7f0000006000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006640)=[{&(0x7f00000002c0)="15c9d73c690a7e8aa23c300749ab8719c0b3236a464ba8db7afe787245e35adb6b522e997e01f61f79030599e215a17ad32d54a23e5628509c75234eac98b7cb6f4bc441139e6e81c111957263c864090943ef127deef0309313562310ecc692d6c64b76723a8a50295f55f376a3d0132cff5f0926b850a523f3ccaac6d920a5a7ec9fcde5e5b03171e23b3aac066035f18d31146d1f6be96200184a97c78e011753c99af6c9523666f79df613c6db713600a353821b9cb208816d77ed9893be01cf82466c43d75afb07e8e84bafd1b80b58d80010d359abce504dd78d496b11ce9b46784eaa776c3fd937354e9a", 0xee}, {&(0x7f0000006180)="18b0842c67d79a22d87db2cb9405d23621a773788d9078951ed1e037715b3809e4e7a310c9d4cbf2cb2aa19eb3bd9304a4aa87549753e50f0d64f57e56bf92f7a663977c724f5cf335e466ffab13b6c03a667ac330e23074afd8ced84f219a098656865105e9f5c73245798972083bba0220fba3c0299b89237a02bed805562ff3ecfe8655be5c2686e54f4779e230e861a11f9e666745ddf6688bb67ab158418a60edc9727d6909dca7de396a2efca1e16b6b309063f8cded9a5b1570ad848f508b5eea3141cd1854e27ba196dd86e6633bcc2d3245a7802babcecdd4ecc52665b6bf5225fdff3b865e2fdeae", 0xed}, {&(0x7f0000006280)="fbfe8a1550f276b3d1071417094b8adc46690b9504047b094a813cf513b97cf61eade8fc53c7430f8ea263f2052510c71fc80c11f1e5da4cb05622e365cd626ca5c1ffba5c62678ee9c7182830edd4e193cbb526ac770aa04da654db61e0b2d301f7794f3e38e3113c8f3a32a9", 0x6d}, {&(0x7f0000006300)="1b825fe595b027f484914af4a23d3664e0c3bf90cf908c32f7398f25108cc9eedd6d67464b9ba49a0195c0e518b470a85d8d6bff7c7538602c1fc865e9f4b65d3c04e075c6b604ba004514246e4620a406cb748b37f43e7b9e4e0ba69e74374091f4e95a20c0f70b2411aa47dc03834bdbc7", 0x72}, {&(0x7f0000006380)="826b2d6e48591f72a90a85466c61847dd8689b4dd572a8ee7a94b2c5339ca402576ee177c00a363ee3417b9e0f6ca9803a5577cc1c9edba50a63dda6e160d5e73b6b72a6419403d184f07d9a7230049806d0c47d068ffc86c427e04a66344fe94be1e13499a1d1b41ed8bb45a5d1d3140730b7dc", 0x74}, {&(0x7f0000006400)="9441bc70270b1a609d19b6e3d782f4ef4df8cecb848623e027d95abb8eee5ace387c035e1a8efaec760d4646c564c8bb50da471a4c84d488659b82575c99d742e2a3906d9965c2fe9a30abb1fef71316a4abab160cf50ade4ed9696e44921e7378", 0x61}, {&(0x7f0000006480)="c3b7c81058f62ab392ce1d6445084fa7fa8d1d7a752dbb70c118d87eafd92e3a608c97aa84bc491a8626d0834d32327738d94d5358d0a8f113bd8fd302a2916c27650ac7ecc2b55f03d88cec5947bc1e12b2fd0e216c604a8955fa75643a8522e60a3ffc0d7907421127320f892a99b36905cc9116b553bf5422e22be0576b53b8669f63494086fb6f4cd364e84bea8d9709b85a4ce886674064775020a28bd4bacfbb22c58bbb02bff0d75fac1e1e02d933a11e6519220165137808a8caefed786c8277a76ae8e95df2e160f44944232626a0ecd1505af79ce7472e89b247ecdb4b3e30ebcd2a6c1f75c2082fb78424", 0xf0}, {&(0x7f0000006580)="6e75a4d0f85853d275f6567fad0d8545481632eaa6fe7fc5c840b512d073229c5dc080eaae45ddc2bfa17b6c306bba1ded0a0160b3aa503de80a78c80ba8c7d2e24528574bb0460ce937bddb9005a4d8cac99130d510db2379c7b8ffce7107dbd17ef17db5a418fdfa327aebc2ea873e35025fe8ff9994fc98ea9c7b1617d06460bd05852b54bc6f0e120d75", 0x8c}], 0x8, &(0x7f0000006800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58, 0x44000}}, {{0x0, 0x0, &(0x7f0000008b00)=[{&(0x7f0000006880)="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", 0x1000}, {&(0x7f0000007880)="1ab47510dad5881523260cefb294304eecc368f87b220b1f8c189a79bed0b8391ca72f43db4fe5074e1405fc7d1e5d5e321a75612fad215ae186502f99c6363acfc12c34c688fa243d19d3aa2b4a7a1980b03f336745a17e4569268dc84d1430ea7a69f24d876c89325ff41d78b338bbfaf9a1f88952fec86641337a16fed91ec1d1193783b1ada18416d76568685c6087e9fffb6c9cef3c738b6d62d40bff2983fc2fb63aadcc2e9d86ef0e8d2a881fc0478bb2b1a238a2931e2306bd42d5c673", 0xc1}, {&(0x7f0000007980)="8da75112bd7ca99ca3a5d723c4c0d9", 0xf}, {&(0x7f00000079c0)="9c8762b203a51dbe2581", 0xa}, {&(0x7f0000007a00)="5b0eb74162f2dde819cbebd3413c2d3be90dd1107a5c258349d612ce49eaf9885b796370a1e3a6923c584b2753f3183eee9f63144a497c1f04daefd12a72b74c76148613913dcc4adeda4ddd4ec7ab476d490b4663fbc6f62d9d351ccb933a35cff39d5e657f6311a85debf9b5ae7361c71acf61e90ed3304193fed031463245472242f5226e617b064400d541b0fe9bdcf204a8a56db9b0088978963980da1c255826aa483ae9e0f8f3b766f2615e41587db96950cd8e7c8977abe5d071c5187e1aec9bba7a", 0xc6}, {&(0x7f0000007b00)="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", 0x1000}], 0x6, &(0x7f0000008bc0)=ANY=[@ANYBLOB="2800ac59ee3000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x28}}], 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 9.346979036s ago: executing program 35 (id=685): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x3, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x2b, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x8000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000077e50bf63e2eea0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="36f99499aed4d63daadff0ffe465bce64bf6ab4d0aec5836d0f9cf3eacd036e394e37b0424786746b2de3554c3f4bc8f32d64b03fbe9d82640dcc6ac6677c1f42c784402df344618b748a2929f04772bb0051174c6afc91f7fc117d795790be4aed8a9c06e434245a5eaeedcf72ad090add36916b21e82bbfcd8016c", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100dfaafdae0000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r2, @ANYBLOB="8ef7b40bb6e9c0170100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x10}}, {{&(0x7f0000005c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005d40)=[{&(0x7f0000005cc0)="0a078a69d77a1708ed15034eded3464e749d746a44592ba814e1bf43b08fb8bcebcf0f7b404b8ce799255d486e9857b4ea9515c6700a80dd7372693f17983f5320e3de37bf1251c2917c584fe63cf6312e3c5c1c4e7794cd7f6d9d969310ec7feb7b36d9ab189812285e9f5072f42957be079d25654be2a783229fb4d5", 0x7d}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1800000000000000010000000100000019a0e2eb4a705cd6e591f79d717127255b8e5d6a7434fa5b9cc5ecf637ea99f412abfc4a5dac649bac5d6c87a7fd0bed13d4d82957a438858f16d1ef37c6b89c3804d871de20fe26a1c3d75fb61f4aac1f48f97801420cd719de7826c745b65e5e3771f13c699af8410a15bbc5358f068d2884768fce83f790924446f3369f39de2f1ecaaba13923ea2e7caa3019dc558841dd50864ec4bd8b3a881ce3a8d4a490740e4a19559a8b96baf09f9e9dd4ca399e57c308e55b8ea5f5d0769e57a69265a1d06eb5c776d1e28d3334a922ed641083a259507c43b3598372f67c3001d6489c", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES64=r1, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x100, 0x800}}, {{&(0x7f0000006000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006640)=[{&(0x7f00000002c0)="15c9d73c690a7e8aa23c300749ab8719c0b3236a464ba8db7afe787245e35adb6b522e997e01f61f79030599e215a17ad32d54a23e5628509c75234eac98b7cb6f4bc441139e6e81c111957263c864090943ef127deef0309313562310ecc692d6c64b76723a8a50295f55f376a3d0132cff5f0926b850a523f3ccaac6d920a5a7ec9fcde5e5b03171e23b3aac066035f18d31146d1f6be96200184a97c78e011753c99af6c9523666f79df613c6db713600a353821b9cb208816d77ed9893be01cf82466c43d75afb07e8e84bafd1b80b58d80010d359abce504dd78d496b11ce9b46784eaa776c3fd937354e9a", 0xee}, {&(0x7f0000006180)="18b0842c67d79a22d87db2cb9405d23621a773788d9078951ed1e037715b3809e4e7a310c9d4cbf2cb2aa19eb3bd9304a4aa87549753e50f0d64f57e56bf92f7a663977c724f5cf335e466ffab13b6c03a667ac330e23074afd8ced84f219a098656865105e9f5c73245798972083bba0220fba3c0299b89237a02bed805562ff3ecfe8655be5c2686e54f4779e230e861a11f9e666745ddf6688bb67ab158418a60edc9727d6909dca7de396a2efca1e16b6b309063f8cded9a5b1570ad848f508b5eea3141cd1854e27ba196dd86e6633bcc2d3245a7802babcecdd4ecc52665b6bf5225fdff3b865e2fdeae", 0xed}, {&(0x7f0000006280)="fbfe8a1550f276b3d1071417094b8adc46690b9504047b094a813cf513b97cf61eade8fc53c7430f8ea263f2052510c71fc80c11f1e5da4cb05622e365cd626ca5c1ffba5c62678ee9c7182830edd4e193cbb526ac770aa04da654db61e0b2d301f7794f3e38e3113c8f3a32a9", 0x6d}, {&(0x7f0000006300)="1b825fe595b027f484914af4a23d3664e0c3bf90cf908c32f7398f25108cc9eedd6d67464b9ba49a0195c0e518b470a85d8d6bff7c7538602c1fc865e9f4b65d3c04e075c6b604ba004514246e4620a406cb748b37f43e7b9e4e0ba69e74374091f4e95a20c0f70b2411aa47dc03834bdbc7", 0x72}, {&(0x7f0000006380)="826b2d6e48591f72a90a85466c61847dd8689b4dd572a8ee7a94b2c5339ca402576ee177c00a363ee3417b9e0f6ca9803a5577cc1c9edba50a63dda6e160d5e73b6b72a6419403d184f07d9a7230049806d0c47d068ffc86c427e04a66344fe94be1e13499a1d1b41ed8bb45a5d1d3140730b7dc", 0x74}, {&(0x7f0000006400)="9441bc70270b1a609d19b6e3d782f4ef4df8cecb848623e027d95abb8eee5ace387c035e1a8efaec760d4646c564c8bb50da471a4c84d488659b82575c99d742e2a3906d9965c2fe9a30abb1fef71316a4abab160cf50ade4ed9696e44921e7378", 0x61}, {&(0x7f0000006480)="c3b7c81058f62ab392ce1d6445084fa7fa8d1d7a752dbb70c118d87eafd92e3a608c97aa84bc491a8626d0834d32327738d94d5358d0a8f113bd8fd302a2916c27650ac7ecc2b55f03d88cec5947bc1e12b2fd0e216c604a8955fa75643a8522e60a3ffc0d7907421127320f892a99b36905cc9116b553bf5422e22be0576b53b8669f63494086fb6f4cd364e84bea8d9709b85a4ce886674064775020a28bd4bacfbb22c58bbb02bff0d75fac1e1e02d933a11e6519220165137808a8caefed786c8277a76ae8e95df2e160f44944232626a0ecd1505af79ce7472e89b247ecdb4b3e30ebcd2a6c1f75c2082fb78424", 0xf0}, {&(0x7f0000006580)="6e75a4d0f85853d275f6567fad0d8545481632eaa6fe7fc5c840b512d073229c5dc080eaae45ddc2bfa17b6c306bba1ded0a0160b3aa503de80a78c80ba8c7d2e24528574bb0460ce937bddb9005a4d8cac99130d510db2379c7b8ffce7107dbd17ef17db5a418fdfa327aebc2ea873e35025fe8ff9994fc98ea9c7b1617d06460bd05852b54bc6f0e120d75", 0x8c}], 0x8, &(0x7f0000006800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58, 0x44000}}, {{0x0, 0x0, &(0x7f0000008b00)=[{&(0x7f0000006880)="720d2583d49d02f9e25a0c682fba902d5e072fa3e366379cc8c22850ce9db207ff9acc158c798dfc5dd101c4568fb7d69243087e5038a33f067ed830c3573560133696396b0771c00bdaa011d68bc46ddf9836fc637f56af1507f47c415895fe5ac5fbc9e83aa76eff0253204cc2d09bd71dec43c0193645bee58bb6e143dd0ef112102c998b91718b774c0151abd2600e58f6e33602a684aa3b90aabe20f1a0c7c889b08c4d06c69afec4abcc6fea99565a4e8375c50219d63ae6ddec1639c57adc4b972e9040a7f3b03784b4bf794c1c6cdbce9606fff115bd1e62ff17e58d58e773fb348375273964d1aaf081f8c430c5938902f03bb9d74427bf96a79c349324110d6523e1411f4bfa7098ce2b4110ead193a17c837d81c312bbb4e4ce6701931e094b081740240a22dea79e7ee12f4eefe9da9f427a07f41bf2a70d1f4077f321ebc6b19dab63e30f1cef1796c5d09bdfcfd6db11a59e79b2a8e9acbe458ed217909f7441d40b0feb218bdd5ef5ecd06c085bf534d0f31b8b4406743bd3612b61d6270a9baca6dd58cc75e3c977c47009d46a62bcf1072cd369776021716e2db03ad3cc85d0a2e6bd1bee6b35fed07a91b219015c15e389999288b701a0a77176a7b10aaa2b80360a21654d3d8672dc710f4d3adccd92fb1986a57fd2ab371b776e126e67a9a231437f7180d21d8600b4272c93fac8a18eb754d60feb435f17309beef161394d80827a1c3c05e556ce04b91ebc8cb15ae2c99f85f85a9c7cf123ec2dda8e6bf178285decf3b4ceec913b58a1b40dd4e99cd501817cca8cfc693a20679e68d62ebc3f1a8cdc2de4cb8d447add45fa5332398f1c4d7a4b09d2f61eb46cd8d5f400aae1e2627ad91d4dbe76fbf7d7100996345fbabe3ee55e90b8e6f981e9f291a1f5e0e1d4be4acd1769aab10ecb4aa22b7f0e1c24ab44dcad5aa975dbdb23c8cba83daaf53bce0009a52913b92a7b9ad89763fe73846990c3cc4379ecc1705b1736aae6555952d8be93b537c1e74f68100becec64435c2e9982080b9adfab6845defc6b3178dfe0032dffae71b8f211e533db029f63219ae510b04074335995c6663984c4c1a9419dad9aa560f00a3774335e6f9056017fc1a26633495e647f6291667e5efe44760957bfb9f32dcca42910da2775d1800db65f8d6fdc17db4638bb47c5837a40fa5190f33d11a258401a567cd6c22911c008dc9aa99ebf87199e2da928eb78bc5bf3a489c031f05557b8126695c631e1dbb06bc8c1030f173514b91207583d1f14ac7fa1c198c363f986bce788eff3fec1c139557062ab77ae863a9bfd33ba7014778d2a7f51ed81c1417e502756b4815dd32136c987fbff87aac3b8eedcd279566130d49f6e21916477a37ab15b902db4041f6add425c94f54569d862cf2dba209ea357726d57d1b394184873cb53e94e0db368d27af78895f8a24eca6dd561f11577c2ca41d0493d1f60f8c23bc56250b314554baf0a1c8b6e7f55c4bccedc745b33b1b46d262cf77a7c170cfd30a97c9280c6d1275ad66ed56d8f4ca748ee060d6b87b903d7df7dd5ef0f1ed56fbd9f11812be12e72dca6c09dd19912c80e678f0d96b9662b71e1fc68cc2e214515384d1690b79abf5b47cfe07052887bffcd6cecc4697611e301d2e9bb948323c91b7de7a0095f019a92b6c5d774651cd8c94f05b333b65dffaae71557e8777fc4430a9641975827e1816b2360b2a12fd1ce1b4a1c2ea0980596bb097e772cc130090e4729558861b3325957854f6fa55e441eafd078a88cffc0745386fc0d140a687b4818324e901f9d5bd2c23daf9a54f3f337c722fdf692602c5ca1c24ed76624be59f0af8bb22c6173c9474e1c8e9e20e4684b1633ff722d975b6bb90718fc76f7643e4c94198e71d577e74984dd10adaa912f378a1a6cbba1b06f2fafc8e3d417beabfbed5d6ca5e30e73d4df7eb15b4dac278bd238aa50da1f0c62ef1448d00af540e017cbaad37263e72a2d66bb1e900cd083e467638557aa07e6230888b62dfa5ba18152581bbc1aaf3e0fc31d1aac7124b1acb841b5e8339c999d76dce1a6e9ae52f23e779ed7903e426133dbb7e794567287ad7e9a94d2b827e3820b823ae40c203db7ce194fce10d6b44bd5dd89b008c219eb5a39ee41e074426e67207d741f3324203a85fa0f51bab77e2982f5a5c76920cf52611bacf919f130f728142a004e1dfc7d3c24e54b7d94c72dc75492f85fd11c16a404ee7ba2df4a43a23f4e468d73c8f4b8976fbe3be7c2399b194ed6aba465cd22891debb39d6e2b1e611264a92f13af645ef07bdd0410baf84cd988edcc369a8c06dcd1af9941cf646fa2f7d796efc419cf2fe3c930cc88a303bcaaae0644c2254f8a6fe55bd6e24e9f56def8ddbbd538f2e7f6af2e120f9621b5b35f7860d02d0bcb3884aecc632f9bd7525224885f0252baccaf61acde6cef3da3157d631f7307a4bf5f88766c28ce784cf132e3f54d7a042441a2e350786eff4e823120b9a0030b6293fa7d6753c529b968c3b47e11ffc6b545901b38b62531a7d69124cb219a52f8c8397bc23318373c1f900251bd847c5e9a49c2ff13723158a0e722923945a25c783fc5d13c0e7ee881c0844e70fc893eeb483e8e615110c7ee1a7288680c1d6bcc4ff22bb4e33181253cc30328f54c5b9a4df1611f552835619fc173dcc1ffb2c9b56a3578513c89139ff9980e554d2bed3d3762b4cdbbb92ad6091c5b743be9ebe12c42800842083ec794b5979d37d4f4c26b838cdfce8e68124a7677e96116a57811e72654cdb0a1bce506b43c7ea018035f27b0dcc263258bcfd93a225f1cbbc3a97de861301dbbe0283792d6eeceecc54394fc359ffb305896684cf782ea484a2b9a7e72caa0cfd58a3c75bab2497157189713c4e9db6521056967449b5f53bb6dfcdfa0d4849a1408c3a2b2d99559fc1433aac86faac4cd0f9ce58f3da3421d54453af77e519558b53ce208567910c415a35aed1740026d1bbd3db1dcfd8059af5e0cd67144ec0f55f783785dd7234a78742059aa9ba1f58e241fd5ee664dcb451976495677525e1dfd98c10c7d4691e332890b4a9b5a30b59d9cfdd1ef0a3780daa10313482cf3cac1b4cb3276d1ad1bc75bcedfeeaca494b73fb588ea7162ee8ae49e4377bd7bc2aed467653f1bb533093300dcba7dd856710c900d2e395ad3c49753d399f9144fe8a96a05284c884c4d81a50bde24ffa34e871c46d42ac3a79133531397d9ec2ece5a33ee31195a5ac1bc3326291930a5b74741f336f83eba4833eb173c00ee8008bc21104ac1009ad9eb1c43ea01fe347cca4772381dcf693d01221461dca7c35c16eab47e46266eccb339450183b611563fed6ae9738e2b686884a77f03b6eb2cbd0367228e9c9266833e7e48d511da7692d57125119e0dac8d5896ca2ca4464ca99b3489af10ca598ba7a2f65e75f157423b1d84bc0c621f4008f3cb5cdf7e259a263bbc3748c6e22cb1cb02639f7b33cdd237fec5c3d8cfaa8d4f042a70a7bdac8c11223862c40edf0dd4a4177eef9e70d4192ef485eaab5b708af059777065c759bcfb6b71bc8792520dfe700331ab5de453f10a79cbcc56c3ad4aa6b9b43bebbef13b969646337102e17caa2362a5b8bc4a93a92b42801689e4c7e5fe3659f3c6e10b3a57666b24f64e3cc8cfc7ba2a1b3dcc0e6b7d823b1c39feca2a36c652b9165efd61646572a01e45ba720f105498d5fcc872c0ec3e7dda15d60df28711f137dc408c253f2d52600ca0091f52715863bbddfc98710758c2195dded47d296b6aca2226d1b774fc035a983b412cdce63f76a7045504510af9374f14b2d35f98b52e48d1afbd0d5848f538789dbcd77623bc15e7a7d3b99ef6b712b896feac2aa95a493d38f9295528f1fab995c6939bf25eed7d7c3a5835842603357b88607c515fc0d7b874b7a50be4200e150d629849c633ec4c5e8ba69b39f13ac4e5768f5a249e2540269b35b15aee3b70f3f073a9629d85202bd2b4799ef86dd2370c1dfb6549dd347681f243629f3c7042ea01f41b650d1bfdbff790485017b8712430438a545ab9fe2747fa5efd6e78bee3998d4022a4f398b88638f831e841694342caef5722347d2064a6f3457cc439c80428301bfbd4592a448f60fb2111dc7381a325bb78d5848d4a42c417915a9fc49ba3879a8b63d3d9895edf015b9757179064869d15d1083e970b7cee616bf1c1ca8229bc743a1841b4d74cac23a55ac03e98b258a84d2b1137e7cbc8ec2f29d41d50bbf856e9c552bf20549641053e62c724a26eb8d607e2fa2ce39cf48dbec47d010e6c23f7f97dab7168c49e34af339d54800ffacf791056a9fed96c6e92b7ad8e1fe877f4ebb4eb3adccb95f91d7f0296e1c56193ff38a659911de80c420c254cefeb348990e60be39cd910a1379ca6fd608c2295ae50ccf6004b81c3155578214d031f270fc2d591a117b2a9637cd4d424d669d8649a9a03e21c948dfa258ed6741a99a34a06042c8cf17bd5b8ffa91062878166f84f79815730c3db3cf7b14db19038fa11a0c7490dee4e57ad58dafaa1e9fef1d674f8cf1852106becf0ed8d2df85e020f8518ace28ae0e87ce3f9a7c2b5e2b3676ba1c17855cc7516b323fa76aef1195483d35144aa9d6958953ee772e2ca0e5ec2551ab990d76ee224a13dcba6c3bd2812db327cf74ec7ed5779ab49e01be00451c5a0a9e0615b0c2657596a68b7cd8817060ebbb6706b1abc6107d85d20711d41dddd3496605b8cb87260845f419ceb35bdcd5cc699716cbf5d850dc6a3a94036f2f003abee1d03cfe56d304cd9802054eb06e83b106739a5b09dc0724446c344733080dc87a69ad7263672a9f694aa181439fc50eecc9a1820f31f514f0f243d4966ccc862bec0baf4c4766fa37f25efe0c2d16fe834006c3b3ba20c493722599b25477b660c3a46e61a1c45dc97aa5dacf00100947aaf2fbbdce4502ddb22742b0bf15e4f1ab0810b29c2be893bdeacfa02bc9967a8e9985648b5ee8476a79fc59768d5043c2df439c682fe469de8e820351c14272f85738927dbe177ccfbbf1d5820dd624089b7d9a268be1a3422b828124dcd86bb1b4bbf09b212b5e2dec0fed2d7a7e6993f370d1c002f46e5c3dd623273759c9fbd53dd14cf3c36487ee562a06a50545735e9c06cf230bd9c26eba75ab4a2e09e50a124667d2a1c529077fdeadf54a9a21ee634cf85386730fbae7f50fc15d6a5269c6d07fbd43df6cd5172a556e45c31d8c06510de54dadff53020e640dc69995b66b75451980551cff2e6e00d5332fd8a788e883ec13459f9f8eb3c3df924ca890e1b0bf0851e403244608f0c958e8fa03d052ff67ef477e127a0b7fd6d34071a5a926eb14424818b572e51327f74a39f9ae608d9eee996176ee9d286b72db19408efdaaf81ef1c12e0b738872d8014207200b72039e38751136b00e300c5df23835f9c584a71829fc479a06819439c6f3f4535b8a32b0a65b211437c74113e2e7e1f80ffcb3da5a718f71bc24be37ec45f91a8ba93f95e5b5a17de97b81841afaf950a4c0d11c1edeb8c513b15fdecc4a7fb8ece34f8a4699685b8a04fc0c35f7fee0c2da5a98471d88bb3e65d71625d98fdf1673d70282b8a1ece6cef56c8f1364672d682fd1a15e72024922ff96d6940d4e7a12a1825a5bbf8ce1b1eba6ba33a164ffb8208f79e6d296b19c5a0bfa1af458eb5e71ac859467d5cdffb6228a8c1312581458d19b52b8e6d805f2cf4c10e1e08de54c34a716b", 0x1000}, {&(0x7f0000007880)="1ab47510dad5881523260cefb294304eecc368f87b220b1f8c189a79bed0b8391ca72f43db4fe5074e1405fc7d1e5d5e321a75612fad215ae186502f99c6363acfc12c34c688fa243d19d3aa2b4a7a1980b03f336745a17e4569268dc84d1430ea7a69f24d876c89325ff41d78b338bbfaf9a1f88952fec86641337a16fed91ec1d1193783b1ada18416d76568685c6087e9fffb6c9cef3c738b6d62d40bff2983fc2fb63aadcc2e9d86ef0e8d2a881fc0478bb2b1a238a2931e2306bd42d5c673", 0xc1}, {&(0x7f0000007980)="8da75112bd7ca99ca3a5d723c4c0d9", 0xf}, {&(0x7f00000079c0)="9c8762b203a51dbe2581", 0xa}, {&(0x7f0000007a00)="5b0eb74162f2dde819cbebd3413c2d3be90dd1107a5c258349d612ce49eaf9885b796370a1e3a6923c584b2753f3183eee9f63144a497c1f04daefd12a72b74c76148613913dcc4adeda4ddd4ec7ab476d490b4663fbc6f62d9d351ccb933a35cff39d5e657f6311a85debf9b5ae7361c71acf61e90ed3304193fed031463245472242f5226e617b064400d541b0fe9bdcf204a8a56db9b0088978963980da1c255826aa483ae9e0f8f3b766f2615e41587db96950cd8e7c8977abe5d071c5187e1aec9bba7a", 0xc6}, {&(0x7f0000007b00)="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", 0x1000}], 0x6, &(0x7f0000008bc0)=ANY=[@ANYBLOB="2800ac59ee3000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x28}}], 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 7.118222474s ago: executing program 2 (id=689): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x10001ff, 0x200, 0x2, {0x4, @pix={0x7, 0x7c51, 0x34565559, 0x5, 0x20000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) 7.069830646s ago: executing program 3 (id=690): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000022c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x4008080) 6.954072164s ago: executing program 6 (id=692): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0xfffffffd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRESDEC], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x64}}, 0x0) 6.514165188s ago: executing program 6 (id=693): ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x453, 0x800, 0x70bd25, 0x25dfdc02, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r7, 0x0, &(0x7f00006a2000/0x2000)=nil, 0x2000, 0x1000000001}) lseek(0xffffffffffffffff, 0x851, 0x400000000000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 6.335998072s ago: executing program 2 (id=694): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@mmap={0x3e4d, 0x7, 0x4, 0x800, 0x55, {}, {0x5, 0xc, 0x0, 0xe, 0x8, 0xf8, "3082a0f6"}, 0x2, 0x1, {}, 0x4}) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)='!', 0x1}], 0x1}}], 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000000c0)=@fragment={0x16, 0x0, 0x3, 0x0, 0x0, 0xa, 0x67}, 0x8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r6, 0x301, 0xfffffffc, 0x0, {0x2b}}, 0x14}}, 0x0) 5.590283748s ago: executing program 2 (id=695): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c59900dfd553cc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001c40)="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", 0x2d5}, {&(0x7f0000001f40)="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", 0x298}, {&(0x7f00000003c0)="6e2ae0830484c8a9a1b8ecd1300a056f3b2e75", 0x13}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x24000004) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0x0, 0xe}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44050) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x222000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x34a7, r0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) 5.486984567s ago: executing program 6 (id=696): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = dup(r0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x8a000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@can_newroute={0x13, 0x18, 0x3, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff9}}], 0x40}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x48}}], 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @private2}, r9}}, 0x48) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x111403, 0x0) openat$cgroup_ro(r11, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r7}}, 0x48) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x8c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, '%+>-\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'xfrm0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x3, r9, 0x10, 0x0, @in6={0xa, 0x4e23, 0x8, @local, 0x9}}}, 0xa0) 5.256767237s ago: executing program 2 (id=697): userfaultfd(0x80001) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) setgroups(0x0, &(0x7f0000000080)) lseek(0xffffffffffffffff, 0x9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000070000000000000e02000000001b78ae92898124ed00000c00000000000000000000002e2e"], &(0x7f00000001c0)=""/250, 0x3e, 0xfa, 0x1, 0x0, 0x0, @void, @value}, 0x28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) setgroups(0x2, &(0x7f0000001100)=[0x0, r3]) 4.472227014s ago: executing program 6 (id=698): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRES32], 0x0) r0 = syz_io_uring_setup(0xec4, &(0x7f00000004c0)={0x0, 0x2f4c, 0x400, 0x20000007, 0x26d}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x2004, @fd_index=0x1, 0x1, &(0x7f0000001b80)=[{&(0x7f0000000ac0)="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", 0xf24}, {&(0x7f0000001ac0)="e3ead1fa2809052aff234150ffed9780a33da8c231e7dcf0a0edd219818a2937b6a518a1332b99826becc60359550a46acd1ed01c0279a6e54788da840b0b97390fa91f5fa0534dda18d384144e408ff674eaf342533557814835aff9858c841d51ead6875af3e5964d773d32b9fb7947bc9f9f3f4ae69cc2ae1986c1cb07d588e4366b5c8bdc83a574d9d18a2e2200f348d083b4bc2eee5b04d1e55cac7ece435e630d23737c6d6b95e64cc10", 0xad}, {&(0x7f0000000200)="4623a36b0333a0f8cf4f3193958e1eba87fdf1cce1edbf0a1dc7581a9f0d74981363ead3b1e16384b2af7fceccfa9ba8", 0x30}], 0x3, 0x1c, 0x0, {0x3}}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="2b0d911f56551ad9ff000000000000", 0xf}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b10f78fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e1960227826acb24311ed0e67f84565dd8858ca3be23409569e15ba75120c35dffdc8a4b7688d5d02fedf88434274b828fec979ea029405cd1e7cadc867ebdc98c4a523178715828c1a6361e60ff1f2968efc20d6888ac2a6f81e37cbc7f1e89f3421825cc278df26c8722e1672fc9672a8d0a60dded6f0765ac61f8a91acf0195abc177e56cc91a9c11ccf95d2a58de5494e66cfa1e758438ee4bb163ee059", 0x472}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @local=@item_4={0x3, 0x2, 0x3, "33789a1e"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_012={0x2, 0x0, 0x8, "12f5"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0xe2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5, 0x9, 0x3, 0x20, 0xa}, 0x44, &(0x7f00000000c0)={0x5, 0xf, 0x44, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "9fac186d6fe7a79d12a3eca08b2eb9af"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "09006f737c12eecb9914689d9fae8df0"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7ffffff, 0xff00, 0x7, [0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x3, 0xfff8}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3001}}, {0x16, &(0x7f0000000180)=@string={0x16, 0x3, "ce2fd7775c4423868c37cedd28d88b441132f3ab"}}]}) 4.130260266s ago: executing program 3 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x4044814) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @empty, 0x3}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 4.119565298s ago: executing program 2 (id=700): syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='block_rq_requeue\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x10200}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, &(0x7f00000006c0)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 3.367896636s ago: executing program 3 (id=701): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0xfffffffd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRESDEC], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x64}}, 0x0) 2.62931975s ago: executing program 3 (id=702): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="a087eefc1ac72a1dd3d5ee8cbff09eb14231c38d54ed83d21d25f39b85f88657cb8c628c493737168a5c2d925e535592aa3eacff7c95e521fda545bda9180006ab0000", @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) rmdir(&(0x7f0000000140)='./file0\x00') 1.884100558s ago: executing program 3 (id=703): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0x5}, &(0x7f00000001c0)=0x8) syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0xd0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffc}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0xfe, 0x3, [0x8, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x8, 0x0, 0x10, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x7], 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x8, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2, 0x2}}}}}}}]}}, 0x0) 1.318579664s ago: executing program 6 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x7, @win={{0xe9aa, 0x80000000, 0x5, 0x7}, 0x0, 0x5, &(0x7f0000002240)={{0x10, 0xf, 0xffffc0e4, 0x80}, &(0x7f0000002200)={{0xfff, 0x7, 0x401, 0x80}, &(0x7f00000021c0)={{0xfa9b, 0x3, 0x92, 0x1}}}}, 0x8000, &(0x7f0000002280)="2a2a42b6820d1e9c6a401202947dfed20e17108cba31e7addec4129b770a7381caf748476fddb3e9c523cbf73691054b3187bb7710053b1157f44f489479542f7e", 0x7}}) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='io_uring_cqe_overflow\x00', r3, 0x0, 0x9135}, 0x18) r4 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) io_uring_enter(r4, 0x7a98, 0x6d6c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003240)={&(0x7f0000002300)=ANY=[@ANYBLOB="28000000241cc5ca532b53c45d00000d07ea00000500010007000013f4ffffffffffffff983c000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x222000) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000040)=0x2, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 917.395588ms ago: executing program 2 (id=705): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xf, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xac, &(0x7f0000000000)=""/172, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x404200, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000008c0)={"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"}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x40800) (fail_nth: 3) 0s ago: executing program 6 (id=706): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x27ff, 0x200006, 0x2, 0xb, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x4, 0x0, &(0x7f0000000100)=[{0x0, 0x1}, {0x80000000, 0xfffffffffffffffb}, {0x3, 0x6}, {0x80, 0x3}]}) socket(0x2000000000000021, 0x2, 0x10000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000000)='./bus\x00', 0x90) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x20000004, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x100, 0xd615, 0x9, 0xe8f, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) kernel console output (not intermixed with test programs): " dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.425776][ T29] audit: type=1400 audit(1737281751.088:311): avc: denied { rename } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.448037][ T29] audit: type=1400 audit(1737281751.098:312): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.677991][ T6567] syz.0.145: attempt to access beyond end of device [ 118.677991][ T6567] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 118.692313][ T6567] hfsplus: unable to find HFS+ superblock [ 118.965028][ T6573] nbd: must specify at least one socket [ 120.571539][ T5867] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 120.842381][ T5867] usb 4-1: device descriptor read/64, error -71 [ 120.883109][ T6597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.359730][ T5867] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 122.541616][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 122.541632][ T29] audit: type=1400 audit(1737281756.508:318): avc: denied { connect } for pid=6610 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.920224][ T6624] netlink: 'syz.2.151': attribute type 3 has an invalid length. [ 122.949875][ T6624] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.151'. [ 123.432217][ T29] audit: type=1400 audit(1737281757.388:319): avc: denied { create } for pid=6631 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.969361][ T29] audit: type=1400 audit(1737281757.948:320): avc: denied { ioctl } for pid=6631 comm="syz.0.155" path="socket:[10059]" dev="sockfs" ino=10059 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.994837][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.072280][ T6633] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.078931][ T29] audit: type=1400 audit(1737281758.058:321): avc: denied { write } for pid=6631 comm="syz.0.155" path="socket:[9901]" dev="sockfs" ino=9901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.151557][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 124.199889][ T5891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.458242][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 124.527525][ T5891] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.571711][ T5891] usb 2-1: config 0 has no interface number 0 [ 124.664736][ T5891] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 124.730638][ T5897] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.738668][ T5897] usb 6-1: config 0 has no interface number 0 [ 124.747976][ T5897] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 124.757059][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.765247][ T5897] usb 6-1: Product: syz [ 124.830639][ T5897] usb 6-1: Manufacturer: syz [ 125.070385][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.079080][ T5891] usb 2-1: Product: syz [ 125.088769][ T5891] usb 2-1: Manufacturer: syz [ 125.094901][ T5897] usb 6-1: SerialNumber: syz [ 125.101927][ T5897] usb 6-1: config 0 descriptor?? [ 125.102667][ T5891] usb 2-1: SerialNumber: syz [ 125.140674][ T5897] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 125.175850][ T5897] usb 6-1: selecting invalid altsetting 1 [ 125.274061][ T5897] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 125.280589][ T5891] usb 2-1: config 0 descriptor?? [ 125.290599][ T5897] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.300966][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 125.309227][ T5897] usb 6-1: media controller created [ 125.311866][ T5891] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 125.323936][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.330548][ T5891] usb 2-1: selecting invalid altsetting 1 [ 125.343525][ T5891] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 125.416740][ T5891] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.833082][ T5891] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 125.869922][ T5891] usb 2-1: media controller created [ 125.963883][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.110277][ T29] audit: type=1400 audit(1737281760.088:322): avc: denied { mounton } for pid=6675 comm="syz.3.162" path="/36/file0" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.194192][ T29] audit: type=1400 audit(1737281760.138:323): avc: denied { read } for pid=6675 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.397670][ T29] audit: type=1400 audit(1737281760.158:324): avc: denied { mount } for pid=6678 comm="syz.2.164" name="/" dev="hugetlbfs" ino=10095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 126.440725][ T5897] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 126.450231][ T5897] zl10353_read_register: readreg error (reg=127, ret==-110) [ 126.501734][ T29] audit: type=1400 audit(1737281760.448:325): avc: denied { read } for pid=6675 comm="syz.3.162" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 126.634934][ T29] audit: type=1400 audit(1737281760.448:326): avc: denied { open } for pid=6675 comm="syz.3.162" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 126.699931][ T29] audit: type=1400 audit(1737281760.568:327): avc: denied { connect } for pid=6675 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.793110][ T5867] usb 6-1: USB disconnect, device number 2 [ 127.161538][ T5891] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 127.174332][ T5891] zl10353_read_register: readreg error (reg=127, ret==-110) [ 127.316783][ T5891] usb 2-1: USB disconnect, device number 5 [ 127.794675][ T6696] netlink: 'syz.0.168': attribute type 3 has an invalid length. [ 127.884337][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 127.884370][ T29] audit: type=1400 audit(1737281761.868:331): avc: denied { bind } for pid=6689 comm="syz.5.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.934809][ T6696] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.168'. [ 127.998483][ T5897] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.362293][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 128.376629][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 128.453544][ T6720] nbd: must specify at least one socket [ 129.090841][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 129.100695][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 129.110771][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 129.119883][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.144705][ T5897] usb 4-1: config 0 descriptor?? [ 129.162022][ T29] audit: type=1400 audit(1737281763.138:332): avc: denied { ioctl } for pid=6711 comm="syz.1.170" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.366705][ T5897] hdpvr 4-1:0.0: unexpected answer of status request, len 0 [ 129.493915][ T5897] hdpvr 4-1:0.0: device init failed [ 129.502196][ T5897] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 130.501656][ T933] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 130.693190][ T5891] usb 4-1: USB disconnect, device number 5 [ 130.889930][ T933] usb 6-1: Using ep0 maxpacket: 32 [ 131.004961][ T933] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.030108][ T933] usb 6-1: config 0 has no interface number 0 [ 131.039576][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.099702][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.888970][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.896392][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.082824][ T933] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 133.094191][ T933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.102398][ T933] usb 6-1: Product: syz [ 133.106604][ T933] usb 6-1: Manufacturer: syz [ 133.111268][ T933] usb 6-1: SerialNumber: syz [ 133.133740][ T933] usb 6-1: config 0 descriptor?? [ 133.188800][ T933] usb 6-1: can't set config #0, error -71 [ 133.195037][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.219131][ T933] usb 6-1: USB disconnect, device number 3 [ 133.302289][ T29] audit: type=1400 audit(1737281767.278:333): avc: denied { setrlimit } for pid=6775 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 133.361182][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 133.380404][ T5891] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 133.433925][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.475438][ T5891] usb 1-1: Product: syz [ 133.493469][ T5891] usb 1-1: Manufacturer: syz [ 133.505455][ T6782] IPv6: Can't replace route, no match found [ 133.518244][ T5891] usb 1-1: SerialNumber: syz [ 133.556718][ T5891] usb 1-1: config 0 descriptor?? [ 133.924329][ T5891] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 133.952129][ T5891] gspca_sunplus: reg_w_riv err -71 [ 133.968751][ T5891] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 133.989180][ T5891] usb 1-1: USB disconnect, device number 4 [ 134.040532][ T5897] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 134.202579][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 134.213753][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 134.262176][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 134.307946][ T5897] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 134.323027][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.349654][ T5897] usb 4-1: Product: syz [ 134.361665][ T5897] usb 4-1: Manufacturer: syz [ 134.371622][ T5897] usb 4-1: SerialNumber: syz [ 134.383816][ T5897] usb 4-1: config 0 descriptor?? [ 134.394630][ T6790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 134.410310][ T5897] usb 4-1: ucan: probing device on interface #0 [ 134.430067][ T5897] usb 4-1: ucan: invalid endpoint configuration [ 134.449900][ T5897] usb 4-1: ucan: probe failed; try to update the device firmware [ 134.685217][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.701171][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.729715][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.822123][ T6808] nbd: must specify at least one socket [ 135.400171][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.408605][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.417539][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.426740][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.436412][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.444817][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.453397][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.473258][ T5891] usb 4-1: USB disconnect, device number 6 [ 138.151497][ T5891] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.855391][ T5891] usb 4-1: device descriptor read/all, error -71 [ 140.919973][ T5870] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 141.652518][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 141.942470][ T5870] usb 6-1: device descriptor read/all, error -71 [ 142.495825][ T6897] IPv6: Can't replace route, no match found [ 142.608063][ T5867] IPVS: starting estimator thread 0... [ 142.730087][ T6904] IPVS: using max 25 ests per chain, 60000 per kthread [ 144.776391][ T29] audit: type=1400 audit(1737281778.748:334): avc: denied { setopt } for pid=6945 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.251134][ T29] audit: type=1400 audit(1737281779.218:335): avc: denied { read } for pid=6953 comm="syz.5.211" name="mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 145.300639][ T6958] nbd0: detected capacity change from 0 to 22 [ 145.311174][ T6949] block nbd0: shutting down sockets [ 145.343969][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.353638][ T58] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.534972][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.544431][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.553045][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.562273][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.571399][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.580611][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.590209][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.599392][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.608582][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.617847][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.626463][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.635680][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.644835][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.654030][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.662954][ T5818] ldm_validate_partition_table(): Disk read failed. [ 145.670066][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.680348][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.688821][ T5818] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.698016][ T5818] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.708716][ T5818] Dev nbd0: unable to read RDB block 0 [ 145.716088][ T5818] nbd0: unable to read partition table [ 145.722720][ T5818] nbd0: partition table beyond EOD, truncated [ 145.731076][ T5818] ldm_validate_partition_table(): Disk read failed. [ 145.738032][ T5818] Dev nbd0: unable to read RDB block 0 [ 145.743755][ T5818] nbd0: unable to read partition table [ 145.750101][ T5818] nbd0: partition table beyond EOD, truncated [ 146.137765][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.549890][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 146.580083][ T5891] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.713911][ T5891] usb 3-1: config 0 has no interface number 0 [ 146.749019][ T5891] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 146.952386][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.068088][ T5891] usb 3-1: Product: syz [ 147.132840][ T5891] usb 3-1: Manufacturer: syz [ 147.261133][ T6994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.612198][ T29] audit: type=1400 audit(1737281781.598:336): avc: denied { write } for pid=6999 comm="syz.5.218" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 147.666894][ T5891] usb 3-1: SerialNumber: syz [ 147.673364][ T5891] usb 3-1: config 0 descriptor?? [ 147.691546][ T5891] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 147.700445][ T5891] usb 3-1: selecting invalid altsetting 1 [ 147.706184][ T5891] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 147.724984][ T29] audit: type=1400 audit(1737281781.628:337): avc: denied { read } for pid=6999 comm="syz.5.218" dev="sockfs" ino=12908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.756993][ T5917] IPVS: starting estimator thread 0... [ 147.764617][ T5891] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.785344][ T5891] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 147.797007][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 147.809179][ T5891] usb 3-1: media controller created [ 147.848882][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.890111][ T7008] IPVS: using max 26 ests per chain, 62400 per kthread [ 147.910196][ T7013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.927643][ T5891] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 148.971791][ T5891] zl10353_read_register: readreg error (reg=127, ret==-110) [ 149.855025][ T7038] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.367014][ T970] usb 3-1: USB disconnect, device number 5 [ 150.977536][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 151.852366][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.969921][ T29] audit: type=1400 audit(1737281785.928:338): avc: denied { bind } for pid=7056 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.012644][ T7058] vlan2: entered allmulticast mode [ 152.049837][ T7058] erspan0: entered allmulticast mode [ 152.209201][ T7071] FAULT_INJECTION: forcing a failure. [ 152.209201][ T7071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.359943][ T7071] CPU: 1 UID: 0 PID: 7071 Comm: syz.1.229 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 152.370569][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.380628][ T7071] Call Trace: [ 152.383907][ T7071] [ 152.386836][ T7071] dump_stack_lvl+0x16c/0x1f0 [ 152.391550][ T7071] should_fail_ex+0x497/0x5b0 [ 152.396244][ T7071] _copy_to_user+0x32/0xd0 [ 152.400666][ T7071] simple_read_from_buffer+0xd0/0x160 [ 152.406053][ T7071] proc_fail_nth_read+0x198/0x270 [ 152.411090][ T7071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.416647][ T7071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.422205][ T7071] vfs_read+0x1df/0xbe0 [ 152.426371][ T7071] ? __fget_files+0x1fc/0x3a0 [ 152.431053][ T7071] ? __pfx___mutex_lock+0x10/0x10 [ 152.436091][ T7071] ? __pfx_vfs_read+0x10/0x10 [ 152.440781][ T7071] ? __fget_files+0x206/0x3a0 [ 152.445469][ T7071] ksys_read+0x12b/0x250 [ 152.449718][ T7071] ? __pfx_ksys_read+0x10/0x10 [ 152.454491][ T7071] do_syscall_64+0xcd/0x250 [ 152.459003][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.464911][ T7071] RIP: 0033:0x7f79b4d8473c [ 152.469335][ T7071] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.488949][ T7071] RSP: 002b:00007f79b5b39030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.497364][ T7071] RAX: ffffffffffffffda RBX: 00007f79b4f75fa0 RCX: 00007f79b4d8473c [ 152.505324][ T7071] RDX: 000000000000000f RSI: 00007f79b5b390a0 RDI: 0000000000000004 [ 152.513280][ T7071] RBP: 00007f79b5b39090 R08: 0000000000000000 R09: 0000000000000000 [ 152.521238][ T7071] R10: 0000000020001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 152.529195][ T7071] R13: 0000000000000000 R14: 00007f79b4f75fa0 R15: 00007ffd94d0c8d8 [ 152.537166][ T7071] [ 154.515035][ T29] audit: type=1400 audit(1737281788.488:339): avc: denied { write } for pid=7083 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.573666][ T29] audit: type=1400 audit(1737281788.498:340): avc: denied { mount } for pid=7101 comm="syz.0.234" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 154.812241][ T5891] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.050040][ T5867] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 156.085017][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.129495][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.196289][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.221772][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.240208][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.250576][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.273879][ T5867] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 156.303385][ T5891] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.314570][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.363087][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.411338][ T5867] usb 3-1: config 0 descriptor?? [ 156.453369][ T5891] usb 1-1: config 0 descriptor?? [ 158.013459][ T29] audit: type=1400 audit(1737281791.998:341): avc: denied { bind } for pid=7153 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.113007][ T5891] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 158.210723][ T29] audit: type=1400 audit(1737281791.998:342): avc: denied { listen } for pid=7153 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.635684][ T5891] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 158.729958][ T29] audit: type=1400 audit(1737281791.998:343): avc: denied { connect } for pid=7153 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.755851][ T5891] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 158.837474][ T29] audit: type=1400 audit(1737281792.038:344): avc: denied { accept } for pid=7153 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.919992][ T7146] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 159.529892][ T5828] usb 1-1: USB disconnect, device number 5 [ 159.742437][ T7181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.247'. [ 160.805242][ T7192] IPv6: Can't replace route, no match found [ 163.453359][ T5867] usbhid 3-1:0.0: can't add hid device: -32 [ 163.461753][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 164.057482][ T7223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.210012][ T5828] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 165.638194][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 166.226237][ T5828] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 166.266287][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 166.291784][ T5828] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 166.318328][ T5828] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 166.340059][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.437956][ T5828] usb 6-1: config 0 descriptor?? [ 166.715568][ T5828] hdpvr 6-1:0.0: unexpected answer of status request, len 0 [ 167.077098][ T5828] hdpvr 6-1:0.0: device init failed [ 167.126326][ T7264] netlink: 'syz.3.256': attribute type 3 has an invalid length. [ 167.143475][ T5866] usb 3-1: USB disconnect, device number 6 [ 167.177947][ T5828] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 167.197690][ T7264] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.256'. [ 168.279856][ T7249] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 168.439892][ T5867] usb 6-1: USB disconnect, device number 6 [ 170.369823][ T7285] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 170.809047][ T29] audit: type=1400 audit(1737281804.788:345): avc: denied { bind } for pid=7304 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.954516][ T7306] openvswitch: netlink: Message has 1275 unknown bytes. [ 170.961599][ T7306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.732702][ T7334] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 173.979926][ T970] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.990430][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 174.936406][ T970] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.101335][ T970] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.210298][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 175.220352][ T970] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.257327][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.273949][ T7359] netlink: 196 bytes leftover after parsing attributes in process `syz.0.283'. [ 175.274810][ T7358] vlan2: entered allmulticast mode [ 175.288822][ T7360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7360 comm=syz.5.282 [ 175.332194][ T7336] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 175.340139][ T7358] erspan0: entered allmulticast mode [ 175.348647][ T970] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.738797][ T970] usb 2-1: USB disconnect, device number 6 [ 177.186326][ T29] audit: type=1400 audit(1737281811.168:346): avc: denied { ioctl } for pid=7367 comm="syz.1.288" path="socket:[13594]" dev="sockfs" ino=13594 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.572754][ T7373] delete_channel: no stack [ 177.597042][ T29] audit: type=1400 audit(1737281811.208:347): avc: denied { create } for pid=7368 comm="syz.5.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 179.118382][ T29] audit: type=1400 audit(1737281812.778:348): avc: denied { read } for pid=7385 comm="syz.3.291" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.429322][ T29] audit: type=1400 audit(1737281812.778:349): avc: denied { open } for pid=7385 comm="syz.3.291" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.452606][ T29] audit: type=1400 audit(1737281812.778:350): avc: denied { ioctl } for pid=7385 comm="syz.3.291" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.603803][ T7395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.150401][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 180.186869][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.298'. [ 180.205132][ T7404] vlan2: entered allmulticast mode [ 180.225617][ T7404] erspan0: entered allmulticast mode [ 180.233177][ T7405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7405 comm=syz.3.296 [ 180.240344][ T970] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 180.437814][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 180.468109][ T970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.552560][ T29] audit: type=1400 audit(1737281814.538:351): avc: denied { setopt } for pid=7408 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.623649][ T970] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 181.204664][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.212804][ T970] usb 2-1: Product: syz [ 181.217336][ T970] usb 2-1: Manufacturer: syz [ 181.222067][ T970] usb 2-1: SerialNumber: syz [ 181.240615][ T970] usb 2-1: config 0 descriptor?? [ 181.249660][ T970] usb 2-1: bad CDC descriptors [ 181.255519][ T970] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 181.257117][ T7416] xt_SECMARK: invalid mode: 2 [ 181.263366][ T970] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 181.263397][ T970] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 181.412203][ T29] audit: type=1400 audit(1737281815.388:352): avc: denied { map } for pid=7423 comm="syz.5.305" path="socket:[14606]" dev="sockfs" ino=14606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 181.438541][ T7413] ALSA: mixer_oss: invalid OSS volume '‰Pã' [ 181.488436][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.511133][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 181.517316][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 181.524751][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 181.554223][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.570822][ T5867] usb 2-1: USB disconnect, device number 7 [ 181.631655][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 181.684773][ T7427] binder: 7425:7427 ioctl c0306201 20000080 returned -22 [ 181.695582][ T7427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=7427 comm=syz.0.306 [ 181.718557][ T7429] FAULT_INJECTION: forcing a failure. [ 181.718557][ T7429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.798274][ T7429] CPU: 0 UID: 0 PID: 7429 Comm: syz.5.307 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 181.808906][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 181.818963][ T7429] Call Trace: [ 181.822226][ T7429] [ 181.825139][ T7429] dump_stack_lvl+0x16c/0x1f0 [ 181.829809][ T7429] should_fail_ex+0x497/0x5b0 [ 181.834476][ T7429] _copy_from_user+0x2e/0xd0 [ 181.839133][ T7429] copy_msghdr_from_user+0x99/0x160 [ 181.844316][ T7429] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 181.850129][ T7429] ___sys_sendmsg+0xff/0x1e0 [ 181.854729][ T7429] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.859936][ T7429] ? __pfx_lock_release+0x10/0x10 [ 181.864968][ T7429] ? trace_lock_acquire+0x14e/0x1f0 [ 181.870159][ T7429] ? __fget_files+0x206/0x3a0 [ 181.874820][ T7429] __sys_sendmsg+0x16e/0x220 [ 181.879416][ T7429] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.884521][ T7429] do_syscall_64+0xcd/0x250 [ 181.889009][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.894886][ T7429] RIP: 0033:0x7ff96a185d29 [ 181.899282][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.918873][ T7429] RSP: 002b:00007ff96afe0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.927272][ T7429] RAX: ffffffffffffffda RBX: 00007ff96a375fa0 RCX: 00007ff96a185d29 [ 181.935228][ T7429] RDX: 0000000000000000 RSI: 0000000020006040 RDI: 0000000000000003 [ 181.943182][ T7429] RBP: 00007ff96afe0090 R08: 0000000000000000 R09: 0000000000000000 [ 181.951138][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.959103][ T7429] R13: 0000000000000000 R14: 00007ff96a375fa0 R15: 00007ffeeb3e2648 [ 181.967155][ T7429] [ 182.227903][ T7438] syz.3.308: attempt to access beyond end of device [ 182.227903][ T7438] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 182.241368][ T7438] SQUASHFS error: Failed to read block 0x0: -5 [ 182.247709][ T7438] unable to read squashfs_super_block [ 182.372890][ T29] audit: type=1400 audit(1737281816.298:353): avc: denied { setopt } for pid=7431 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.749817][ T29] audit: type=1400 audit(1737281816.308:354): avc: denied { bind } for pid=7431 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.779051][ T29] audit: type=1400 audit(1737281816.328:355): avc: denied { getopt } for pid=7431 comm="syz.3.308" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.937053][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 182.964625][ T7426] binder: 7425:7426 ioctl 5606 626bf083 returned -22 [ 182.997940][ T7442] vlan3: entered allmulticast mode [ 183.097422][ T29] audit: type=1400 audit(1737281817.078:356): avc: denied { read } for pid=7448 comm="syz.0.313" dev="sockfs" ino=14665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 183.128751][ T7450] 9pnet_fd: Insufficient options for proto=fd [ 183.143753][ T7453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7453 comm=syz.2.312 [ 184.021659][ T29] audit: type=1400 audit(1737281817.978:357): avc: denied { bind } for pid=7465 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 184.046715][ T29] audit: type=1400 audit(1737281817.978:358): avc: denied { name_bind } for pid=7465 comm="syz.2.316" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 184.089524][ T29] audit: type=1400 audit(1737281817.978:359): avc: denied { node_bind } for pid=7465 comm="syz.2.316" saddr=ff01::1 src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 184.146337][ T29] audit: type=1400 audit(1737281817.978:360): avc: denied { connect } for pid=7465 comm="syz.2.316" laddr=ff01::1 lport=128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 184.168183][ T29] audit: type=1400 audit(1737281817.978:361): avc: denied { name_connect } for pid=7465 comm="syz.2.316" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 184.192277][ T29] audit: type=1400 audit(1737281818.168:362): avc: denied { accept } for pid=7465 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 184.273421][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 184.280359][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 184.464566][ T7480] IPv6: Can't replace route, no match found [ 184.658155][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 184.664472][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 184.806402][ T7471] ceph: No mds server is up or the cluster is laggy [ 185.412480][ T7489] syz.2.320: attempt to access beyond end of device [ 185.412480][ T7489] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 185.460192][ T7489] syz.2.320: attempt to access beyond end of device [ 185.460192][ T7489] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 185.591192][ T7489] syz.2.320: attempt to access beyond end of device [ 185.591192][ T7489] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 185.897391][ T7489] syz.2.320: attempt to access beyond end of device [ 185.897391][ T7489] nbd2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 185.996394][ T7489] syz.2.320: attempt to access beyond end of device [ 185.996394][ T7489] nbd2: rw=0, sector=30, nr_sectors = 2 limit=0 [ 186.144554][ T7489] syz.2.320: attempt to access beyond end of device [ 186.144554][ T7489] nbd2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 186.440421][ T7499] xt_hashlimit: max too large, truncated to 1048576 [ 186.452795][ T7499] No such timeout policy "syz1" [ 186.475487][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 186.516873][ T7501] vlan3: entered allmulticast mode [ 187.899566][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 187.899583][ T29] audit: type=1400 audit(1737281820.788:368): avc: denied { ioctl } for pid=7510 comm="syz.0.327" path="socket:[13867]" dev="sockfs" ino=13867 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.930541][ T29] audit: type=1400 audit(1737281821.218:369): avc: denied { getopt } for pid=7510 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 187.949908][ T29] audit: type=1400 audit(1737281821.848:370): avc: denied { create } for pid=7522 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.187904][ T7525] sg_read: process 168 (syz.5.332) changed security contexts after opening file descriptor, this is not allowed. [ 188.235602][ T29] audit: type=1400 audit(1737281822.168:371): avc: denied { write } for pid=7524 comm="syz.5.332" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 188.604266][ T29] audit: type=1400 audit(1737281822.588:372): avc: denied { shutdown } for pid=7532 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.329932][ T5870] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 190.481577][ T5870] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.575277][ T5870] usb 6-1: config 0 has no interface number 0 [ 190.591171][ T5870] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 190.600908][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.207688][ T5870] usb 6-1: Product: syz [ 191.211970][ T5870] usb 6-1: Manufacturer: syz [ 191.216578][ T5870] usb 6-1: SerialNumber: syz [ 191.223267][ T5870] usb 6-1: config 0 descriptor?? [ 191.236164][ T29] audit: type=1400 audit(1737281824.658:373): avc: denied { write } for pid=7546 comm="syz.1.339" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 191.767162][ T5870] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 191.798853][ T5870] usb 6-1: USB disconnect, device number 7 [ 191.882011][ T7557] netlink: 'syz.2.341': attribute type 4 has an invalid length. [ 191.969916][ T29] audit: type=1400 audit(1737281824.658:374): avc: denied { ioctl } for pid=7546 comm="syz.1.339" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 191.994758][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.051130][ T29] audit: type=1400 audit(1737281824.918:375): avc: denied { ioctl } for pid=7546 comm="syz.1.339" path="socket:[14901]" dev="sockfs" ino=14901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.085224][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 192.153351][ T7570] vlan2: entered allmulticast mode [ 192.179314][ T29] audit: type=1400 audit(1737281826.158:376): avc: denied { ioctl } for pid=7573 comm="syz.5.346" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 192.281232][ T7566] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 192.308349][ T29] audit: type=1400 audit(1737281826.278:377): avc: denied { setopt } for pid=7578 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.719956][ T5870] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 192.769914][ T5867] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 192.904567][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.919241][ T5870] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 192.928542][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.936640][ T5870] usb 6-1: Product: syz [ 192.940859][ T5870] usb 6-1: Manufacturer: syz [ 192.945540][ T5870] usb 6-1: SerialNumber: syz [ 193.489132][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 193.495777][ T5870] usb 6-1: config 0 descriptor?? [ 193.552062][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 193.582449][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.592871][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.605896][ T5867] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 193.615386][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.630484][ T5867] usb 3-1: config 0 descriptor?? [ 193.775022][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 193.787994][ T7601] vlan3: entered allmulticast mode [ 193.936956][ T7587] xt_HMARK: spi-set and port-set can't be combined [ 194.586635][ T7610] netlink: 80 bytes leftover after parsing attributes in process `syz.1.355'. [ 194.872780][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.941079][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 194.941096][ T29] audit: type=1400 audit(1737281828.778:379): avc: denied { create } for pid=7603 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 194.976863][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.132240][ T5867] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 195.139392][ T5867] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 195.146667][ T5867] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 195.153785][ T5867] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 195.175391][ T5867] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 195.730124][ T5828] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.831697][ T5867] waltop 0003:172F:0500.0002: hidraw0: USB HID v0.00 Device [HID 172f:0500] on usb-dummy_hcd.2-1/input0 [ 195.866583][ T5867] usb 3-1: USB disconnect, device number 7 [ 195.885566][ T5917] usb 6-1: USB disconnect, device number 8 [ 195.899870][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 195.915466][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.148718][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.259678][ T5828] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 196.436453][ T29] audit: type=1400 audit(1737281830.418:380): avc: denied { ioctl } for pid=7622 comm="syz.5.360" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 196.446477][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.572208][ T7629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.603432][ T5828] usb 2-1: config 0 descriptor?? [ 196.914928][ T7633] nbd: must specify at least one socket [ 197.053168][ T5828] usbhid 2-1:0.0: can't add hid device: -32 [ 197.065211][ T5828] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 198.043071][ T5828] usb 2-1: USB disconnect, device number 8 [ 199.717363][ T7641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.879840][ T7637] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 200.010236][ T7658] FAULT_INJECTION: forcing a failure. [ 200.010236][ T7658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.010341][ T7658] CPU: 0 UID: 0 PID: 7658 Comm: syz.1.367 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 200.010366][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 200.010378][ T7658] Call Trace: [ 200.010386][ T7658] [ 200.010394][ T7658] dump_stack_lvl+0x16c/0x1f0 [ 200.010425][ T7658] should_fail_ex+0x497/0x5b0 [ 200.010456][ T7658] _copy_from_iter+0x2a1/0x1560 [ 200.010486][ T7658] ? register_lock_class+0xb1/0x1240 [ 200.010518][ T7658] ? __pfx__copy_from_iter+0x10/0x10 [ 200.010548][ T7658] ? __lock_acquire+0xcc5/0x3c40 [ 200.010573][ T7658] ? hlock_class+0x4e/0x130 [ 200.010599][ T7658] ? __lock_acquire+0xcc5/0x3c40 [ 200.010627][ T7658] tun_get_user+0x241/0x3e50 [ 200.010662][ T7658] ? find_held_lock+0x2d/0x110 [ 200.010691][ T7658] ? __pfx_tun_get_user+0x10/0x10 [ 200.010720][ T7658] ? find_held_lock+0x2d/0x110 [ 200.010752][ T7658] ? __pfx_lock_release+0x10/0x10 [ 200.010790][ T7658] tun_chr_write_iter+0xdc/0x210 [ 200.010820][ T7658] vfs_write+0x5ae/0x1150 [ 200.010842][ T7658] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 200.010875][ T7658] ? __pfx_vfs_write+0x10/0x10 [ 200.010898][ T7658] ? __fget_files+0x40/0x3a0 [ 200.010929][ T7658] ksys_write+0x12b/0x250 [ 200.010951][ T7658] ? __pfx_ksys_write+0x10/0x10 [ 200.010978][ T7658] do_syscall_64+0xcd/0x250 [ 200.011006][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.011034][ T7658] RIP: 0033:0x7f79b4d85d29 [ 200.011054][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.011072][ T7658] RSP: 002b:00007f79b5b18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.011091][ T7658] RAX: ffffffffffffffda RBX: 00007f79b4f76080 RCX: 00007f79b4d85d29 [ 200.011105][ T7658] RDX: 0000000000000056 RSI: 0000000020000640 RDI: 0000000000000003 [ 200.011118][ T7658] RBP: 00007f79b5b18090 R08: 0000000000000000 R09: 0000000000000000 [ 200.011132][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.011145][ T7658] R13: 0000000000000001 R14: 00007f79b4f76080 R15: 00007ffd94d0c8d8 [ 200.011172][ T7658] [ 200.710717][ T7657] tty tty20: ldisc open failed (-12), clearing slot 19 [ 201.985817][ T7676] netlink: 'syz.2.372': attribute type 21 has an invalid length. [ 201.993640][ T7676] netlink: 'syz.2.372': attribute type 20 has an invalid length. [ 202.001426][ T7676] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.038343][ T29] audit: type=1400 audit(1737281835.998:381): avc: denied { accept } for pid=7671 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 202.105765][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.375'. [ 202.131406][ T29] audit: type=1400 audit(1737281836.108:382): avc: denied { read } for pid=7682 comm="syz.5.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 203.406741][ T7705] evm: overlay not supported [ 203.463853][ T29] audit: type=1400 audit(1737281837.448:383): avc: denied { write } for pid=7688 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.491471][ T7690] netlink: 'syz.1.376': attribute type 3 has an invalid length. [ 203.499101][ T7690] netlink: 442 bytes leftover after parsing attributes in process `syz.1.376'. [ 203.519358][ T29] audit: type=1400 audit(1737281837.448:384): avc: denied { nlmsg_write } for pid=7688 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.731381][ T29] audit: type=1400 audit(1737281837.668:385): avc: denied { setattr } for pid=7708 comm="syz.3.382" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 203.994034][ T7712] delete_channel: no stack [ 204.287871][ T7719] netlink: 80 bytes leftover after parsing attributes in process `syz.1.384'. [ 205.044028][ T5867] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 205.803946][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 205.821269][ T5867] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.829291][ T5867] usb 3-1: config 0 has no interface number 0 [ 205.873413][ T5867] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 205.899443][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.923695][ T5867] usb 3-1: Product: syz [ 205.927878][ T5867] usb 3-1: Manufacturer: syz [ 205.933700][ T5867] usb 3-1: SerialNumber: syz [ 205.970342][ T5867] usb 3-1: config 0 descriptor?? [ 205.992427][ T5867] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 206.058209][ T5867] usb 3-1: selecting invalid altsetting 1 [ 206.069984][ T5867] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 206.136351][ T5867] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.259662][ T7730] netlink: 80 bytes leftover after parsing attributes in process `syz.1.386'. [ 206.860641][ T29] audit: type=1400 audit(1737281840.848:386): avc: denied { write } for pid=7732 comm="syz.1.389" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 207.100295][ T5867] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 207.108758][ T5867] usb 3-1: media controller created [ 207.145642][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.513269][ T7735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.890570][ T5867] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 207.897574][ T5867] zl10353_read_register: readreg error (reg=127, ret==-71) [ 207.909289][ T5867] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 207.968849][ T7743] dvmrp8: entered allmulticast mode [ 207.991064][ T29] audit: type=1400 audit(1737281841.958:387): avc: denied { append } for pid=7737 comm="syz.5.391" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.039917][ T5867] usb 3-1: USB disconnect, device number 8 [ 208.120208][ T29] audit: type=1400 audit(1737281841.958:388): avc: denied { map } for pid=7737 comm="syz.5.391" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.189749][ T7743] dvmrp8: left allmulticast mode [ 208.240842][ T29] audit: type=1400 audit(1737281842.138:389): avc: denied { setopt } for pid=7742 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 208.897865][ T7754] tmpfs: Bad value for 'mpol' [ 209.061884][ T7757] kvm: pic: non byte write [ 209.062011][ T7757] kvm: pic: non byte write [ 209.107407][ T7758] tty tty24: ldisc open failed (-12), clearing slot 23 [ 209.320535][ T5899] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.480058][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 209.497713][ T5899] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.527976][ T5899] usb 4-1: config 0 has no interface number 0 [ 209.589200][ T5899] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 209.666672][ T5899] usb 4-1: config 0 interface 1 has no altsetting 0 [ 209.680815][ T29] audit: type=1400 audit(1737281843.658:390): avc: denied { write } for pid=7772 comm="syz.2.400" path="socket:[15625]" dev="sockfs" ino=15625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.845003][ T5899] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 209.854859][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.857251][ T29] audit: type=1400 audit(1737281843.838:391): avc: denied { shutdown } for pid=7772 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.866564][ T5899] usb 4-1: Product: syz [ 209.886958][ T5899] usb 4-1: Manufacturer: syz [ 209.891791][ T5899] usb 4-1: SerialNumber: syz [ 210.534578][ T7776] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 210.563611][ T5899] usb 4-1: config 0 descriptor?? [ 210.660030][ T5867] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 210.847423][ T7788] kernel profiling enabled (shift: 7) [ 210.865595][ T5899] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 210.882461][ T5899] cx231xx 4-1:0.1: Failed to read PCB config [ 210.895564][ T5899] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 210.901066][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.909622][ T5899] usb 4-1: USB disconnect, device number 9 [ 210.914741][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.930244][ T5867] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 210.939282][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.949466][ T5867] usb 3-1: config 0 descriptor?? [ 211.150175][ T5866] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 211.217538][ T7796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.335528][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 211.357153][ T5866] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 211.376261][ T5866] usb 1-1: config 1 has no interface number 0 [ 211.425722][ T5866] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 211.439329][ T5899] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.639930][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 211.657114][ T5899] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.672769][ T5867] aquacomputer_d5next 0003:0C70:F0BD.0003: unknown main item tag 0x3 [ 211.680931][ T5867] aquacomputer_d5next 0003:0C70:F0BD.0003: item fetching failed at offset 2/5 [ 211.689835][ T5866] usb 1-1: config 1 interface 236 has no altsetting 0 [ 211.696773][ T5899] usb 4-1: config 0 has no interface number 0 [ 211.703149][ T5899] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 211.707768][ T5867] aquacomputer_d5next 0003:0C70:F0BD.0003: probe with driver aquacomputer_d5next failed with error -22 [ 211.714392][ T5899] usb 4-1: config 0 interface 1 has no altsetting 0 [ 211.797438][ T5866] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 211.830089][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.844408][ T5866] usb 1-1: Product: syz [ 211.848594][ T5866] usb 1-1: Manufacturer: syz [ 211.885629][ T5899] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 211.904323][ T5866] usb 1-1: SerialNumber: syz [ 212.037351][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.046038][ T29] audit: type=1400 audit(1737281846.018:392): avc: denied { create } for pid=7772 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 212.048986][ T5899] usb 4-1: Product: syz [ 212.066536][ T7784] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 212.070372][ T5899] usb 4-1: Manufacturer: syz [ 212.089595][ T5866] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 212.113420][ T5899] usb 4-1: SerialNumber: syz [ 212.176066][ T5899] usb 4-1: config 0 descriptor?? [ 212.224787][ T29] audit: type=1400 audit(1737281846.178:393): avc: denied { write } for pid=7794 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 212.407738][ T5899] usb 4-1: can't set config #0, error -71 [ 212.454611][ T5899] usb 4-1: USB disconnect, device number 10 [ 212.463810][ T7784] bond0: entered promiscuous mode [ 212.480429][ T7784] bond_slave_0: entered promiscuous mode [ 212.515850][ T7784] bond_slave_1: entered promiscuous mode [ 212.606756][ T5867] usb 1-1: USB disconnect, device number 6 [ 213.231087][ T29] audit: type=1400 audit(1737281847.218:394): avc: denied { block_suspend } for pid=7820 comm="syz.5.411" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.267432][ T5899] usb 3-1: USB disconnect, device number 9 [ 213.550070][ T5866] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 213.764670][ T5866] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 213.778391][ T5866] usb 1-1: config 1 has no interface number 0 [ 213.824946][ T5866] usb 1-1: config 1 interface 3 has no altsetting 0 [ 213.918193][ T5866] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0012, bcdDevice=aa.5a [ 213.949905][ T29] audit: type=1400 audit(1737281847.918:395): avc: denied { getopt } for pid=7834 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.966067][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.041024][ T5866] usb 1-1: Product: syz [ 214.045709][ T5866] usb 1-1: Manufacturer: syz [ 214.204185][ T5866] usb 1-1: SerialNumber: syz [ 214.502155][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 214.523445][ T29] audit: type=1400 audit(1737281848.488:396): avc: denied { bind } for pid=7823 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.699958][ T5867] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 214.914034][ T5828] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.426055][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 215.441372][ T5828] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.453433][ T5828] usb 4-1: config 0 has no interface number 0 [ 215.460414][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 215.463096][ T5828] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 215.470568][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.477418][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.486475][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.499111][ T5828] usb 4-1: Product: syz [ 215.507861][ T5828] usb 4-1: Manufacturer: syz [ 215.514566][ T5828] usb 4-1: SerialNumber: syz [ 215.515192][ T5867] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 215.901557][ T5828] usb 4-1: config 0 descriptor?? [ 215.904307][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.932313][ T29] audit: type=1400 audit(1737281849.908:397): avc: denied { create } for pid=7864 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.938937][ T5828] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 215.960907][ T5828] usb 4-1: selecting invalid altsetting 1 [ 215.966668][ T5828] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 215.983386][ T29] audit: type=1400 audit(1737281849.908:398): avc: denied { setopt } for pid=7864 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.004818][ T5828] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.022249][ T5867] usb 2-1: config 0 descriptor?? [ 216.023071][ T5828] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 216.036478][ T5828] usb 4-1: media controller created [ 216.053283][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.387909][ T5866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.479656][ T5866] usb 1-1: MIDIStreaming interface descriptor not found [ 216.482959][ T5870] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 216.680080][ T5867] usbhid 2-1:0.0: can't add hid device: -32 [ 216.686457][ T5867] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 216.840207][ T5866] usb 1-1: USB disconnect, device number 7 [ 216.893072][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 216.901430][ T5897] usb 2-1: USB disconnect, device number 9 [ 216.929983][ T5870] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.939051][ T5870] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 216.948255][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.168940][ T5870] usb 3-1: config 0 descriptor?? [ 217.188192][ T5828] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 217.198025][ T5828] zl10353_read_register: readreg error (reg=127, ret==-110) [ 217.535439][ T29] audit: type=1400 audit(1737281851.518:399): avc: denied { write } for pid=7867 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 217.606038][ T29] audit: type=1400 audit(1737281851.578:400): avc: denied { setopt } for pid=7876 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 217.628789][ T7877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=7877 comm=syz.5.424 [ 217.643734][ T7869] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 217.681555][ T7869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.422'. [ 217.721280][ T7877] netlink: 96 bytes leftover after parsing attributes in process `syz.5.424'. [ 217.743800][ T29] audit: type=1400 audit(1737281851.628:401): avc: denied { mounton } for pid=7867 comm="syz.2.422" path="/74/file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 217.767063][ T7869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 217.817152][ T7869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.422'. [ 217.861056][ T7869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.422'. [ 218.383412][ T5897] usb 4-1: USB disconnect, device number 11 [ 218.953393][ T5828] usb 3-1: USB disconnect, device number 10 [ 220.350575][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 220.680191][ T5897] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 220.688211][ T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 220.871030][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 220.876591][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 220.919484][ T5897] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 220.930928][ T47] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 220.947255][ T5897] usb 6-1: config 0 has no interface number 0 [ 220.963684][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 220.972033][ T5897] usb 6-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 44288, setting to 1024 [ 220.983556][ T47] usb 1-1: Product: syz [ 220.987733][ T47] usb 1-1: Manufacturer: syz [ 220.992606][ T5897] usb 6-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 221.003216][ T47] usb 1-1: SerialNumber: syz [ 221.009864][ T7920] netlink: 56 bytes leftover after parsing attributes in process `syz.3.435'. [ 221.019651][ T5897] usb 6-1: config 0 interface 184 has no altsetting 0 [ 221.041041][ T47] usb 1-1: config 0 descriptor?? [ 221.049702][ T47] gspca_main: sq905-2.14.0 probing 2770:9120 [ 221.157568][ T5897] usb 6-1: New USB device found, idVendor=041a, idProduct=7500, bcdDevice=69.ee [ 221.166923][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.175023][ T5897] usb 6-1: Product: syz [ 221.179212][ T5897] usb 6-1: Manufacturer: syz [ 221.183865][ T5897] usb 6-1: SerialNumber: syz [ 221.190788][ T5897] usb 6-1: config 0 descriptor?? [ 221.196950][ T7911] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 221.276277][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.285103][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.594405][ T47] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 221.607411][ T47] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 222.551598][ T7913] capability: warning: `syz.0.431' uses 32-bit capabilities (legacy support in use) [ 223.100750][ T29] audit: type=1400 audit(1737281856.968:402): avc: denied { sqpoll } for pid=7919 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 223.658077][ T5867] usb 6-1: USB disconnect, device number 9 [ 224.092226][ T7944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.530148][ T7926] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 225.015786][ T5828] usb 1-1: USB disconnect, device number 8 [ 225.047988][ T7954] nbd: must specify at least one socket [ 227.066331][ T29] audit: type=1400 audit(1737281860.858:403): avc: denied { getopt } for pid=7974 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.424119][ T7973] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.463835][ T29] audit: type=1400 audit(1737281861.428:404): avc: denied { listen } for pid=7972 comm="syz.1.447" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 227.526471][ T29] audit: type=1400 audit(1737281861.478:405): avc: denied { read } for pid=7972 comm="syz.1.447" lport=40128 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 229.228791][ T7983] netlink: 80 bytes leftover after parsing attributes in process `syz.5.448'. [ 232.008212][ T8009] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.415542][ T8036] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.457'. [ 232.618162][ T29] audit: type=1400 audit(1737281866.598:406): avc: denied { bind } for pid=8034 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.684223][ T29] audit: type=1400 audit(1737281866.628:407): avc: denied { write } for pid=8034 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.534018][ T8047] netlink: 80 bytes leftover after parsing attributes in process `syz.5.456'. [ 234.927294][ T8054] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 235.284560][ T29] audit: type=1400 audit(1737281868.988:408): avc: denied { connect } for pid=8050 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 235.526555][ T29] audit: type=1400 audit(1737281868.998:409): avc: denied { bind } for pid=8050 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 235.627751][ T29] audit: type=1400 audit(1737281869.128:410): avc: denied { execute_no_trans } for pid=8059 comm="syz.3.463" path="/94/file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 236.901136][ T5917] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 236.971067][ T5867] IPVS: starting estimator thread 0... [ 237.029968][ T5891] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 237.060015][ T8089] IPVS: using max 45 ests per chain, 108000 per kthread [ 237.081607][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 237.091295][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.104378][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 237.116043][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.127416][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 237.140461][ T5917] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 237.149575][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.159554][ T5917] usb 2-1: config 0 descriptor?? [ 237.165075][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 237.166611][ T8079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.181195][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 237.193955][ T5828] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 237.195573][ T5917] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 237.223075][ T5891] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.230130][ T29] audit: type=1400 audit(1737281871.203:411): avc: denied { read } for pid=5176 comm="acpid" name="js0" dev="devtmpfs" ino=2889 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.231259][ T5891] usb 6-1: config 0 has no interface number 0 [ 237.275489][ T29] audit: type=1400 audit(1737281871.203:412): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2889 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.288559][ T5891] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 237.308126][ T29] audit: type=1400 audit(1737281871.243:413): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2889 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.337905][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.348753][ T5891] usb 6-1: Product: syz [ 237.356295][ T5891] usb 6-1: Manufacturer: syz [ 237.363761][ T5891] usb 6-1: SerialNumber: syz [ 237.371378][ T5891] usb 6-1: config 0 descriptor?? [ 237.382268][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.382481][ T5891] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 237.404600][ T5828] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 237.431680][ T47] usb 2-1: USB disconnect, device number 10 [ 237.442394][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.444103][ T5891] usb 6-1: selecting invalid altsetting 1 [ 237.461392][ T5891] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 237.478181][ T5891] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 237.482834][ T5828] usb 1-1: Product: syz [ 237.495576][ T5891] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 237.505547][ T5891] usb 6-1: media controller created [ 237.519851][ T5828] usb 1-1: Manufacturer: syz [ 237.530503][ T5828] usb 1-1: SerialNumber: syz [ 237.546602][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.547223][ T5828] usb 1-1: config 0 descriptor?? [ 237.970322][ T5917] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 238.098421][ T8102] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.473'. [ 238.169889][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 238.179461][ T5917] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 238.409094][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.659163][ T5917] usb 4-1: config 0 descriptor?? [ 238.680259][ T5891] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 238.736333][ T29] audit: type=1400 audit(1737281872.633:414): avc: denied { module_request } for pid=8104 comm="syz.1.474" kmod="netdev-syztnl2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 238.830057][ T5891] zl10353_read_register: readreg error (reg=127, ret==-110) [ 238.845376][ T5917] gspca_main: sq930x-2.14.0 probing 041e:403c [ 239.950814][ T8116] netlink: 80 bytes leftover after parsing attributes in process `syz.1.475'. [ 240.244681][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.274501][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.393501][ T5828] usb 1-1: USB disconnect, device number 9 [ 240.760627][ T5828] usb 6-1: USB disconnect, device number 10 [ 241.080749][ T5917] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 241.086840][ T5917] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 241.200065][ T5917] usb 4-1: USB disconnect, device number 12 [ 241.469450][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 241.802201][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.813808][ T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.842315][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.881115][ T47] usb 2-1: config 0 descriptor?? [ 241.898887][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 241.969998][ T29] audit: type=1400 audit(1737281875.943:415): avc: denied { shutdown } for pid=8151 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.306943][ T5824] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 242.315719][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.323255][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.373999][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.410692][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.423545][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.431292][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.438560][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 242.446020][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 242.453402][ T47] pwc: recv_control_msg error -32 req 04 val 1500 [ 242.581765][ T8163] lo: entered promiscuous mode [ 242.661425][ T47] pwc: recv_control_msg error -71 req 02 val 2400 [ 242.662211][ T47] pwc: recv_control_msg error -71 req 02 val 2600 [ 242.662550][ T47] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.662827][ T47] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.663186][ T47] pwc: recv_control_msg error -71 req 04 val 1100 [ 242.663476][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 242.674840][ T47] pwc: Registered as video103. [ 242.676259][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 242.731120][ T47] usb 2-1: USB disconnect, device number 11 [ 242.898224][ T1158] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.914295][ T8156] lo: left promiscuous mode [ 242.988044][ T1158] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.448737][ T1158] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.669909][ T5867] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 243.697866][ T1158] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.896006][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805354d800: rx timeout, send abort [ 243.995439][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 244.084883][ T5867] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.093259][ T5867] usb 4-1: config 0 has no interface number 0 [ 244.103826][ T5867] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 244.126489][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.168554][ T5867] usb 4-1: Product: syz [ 244.181179][ T5867] usb 4-1: Manufacturer: syz [ 244.199856][ T5867] usb 4-1: SerialNumber: syz [ 244.219609][ T5867] usb 4-1: config 0 descriptor?? [ 244.245266][ T5867] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 244.272074][ T1158] bridge_slave_1: left allmulticast mode [ 244.277798][ T5867] usb 4-1: selecting invalid altsetting 1 [ 244.279530][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.294888][ T1158] bridge_slave_1: left promiscuous mode [ 244.303294][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.310092][ T5867] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 244.317613][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.325401][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.333521][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.341967][ T5825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.350908][ T5867] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 244.361501][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.367495][ T5867] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 244.378342][ T1158] bridge_slave_0: left allmulticast mode [ 244.389003][ T1158] bridge_slave_0: left promiscuous mode [ 244.401131][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.408855][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805354d800: abort rx timeout. Force session deactivation [ 244.463963][ T5867] usb 4-1: media controller created [ 244.492284][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.797082][ T8187] gfs2: not a GFS2 filesystem [ 244.808036][ T8187] No such timeout policy "syz0" [ 245.127085][ T1158] erspan0 (unregistering): left allmulticast mode [ 245.357691][ T29] audit: type=1400 audit(1737281879.343:416): avc: denied { read } for pid=8180 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.384135][ T5867] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 245.391184][ T5867] zl10353_read_register: readreg error (reg=127, ret==-71) [ 245.408732][ T5867] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 245.431090][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.446840][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.458193][ T1158] bond0 (unregistering): Released all slaves [ 245.466245][ T5867] usb 4-1: USB disconnect, device number 13 [ 245.869039][ T1158] hsr_slave_0: left promiscuous mode [ 245.882205][ T1158] hsr_slave_1: left promiscuous mode [ 245.890331][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.897825][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.960860][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.100259][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.200032][ T5825] Bluetooth: hci1: command tx timeout [ 247.207954][ T1158] veth1_macvtap: left promiscuous mode [ 247.242208][ T1158] veth0_macvtap: left promiscuous mode [ 247.248313][ T1158] veth1_vlan: left promiscuous mode [ 247.256723][ T1158] veth0_vlan: left promiscuous mode [ 247.416643][ T8226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8226 comm=syz.3.499 [ 247.509705][ T47] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 247.761692][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.772253][ T47] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 247.781773][ T47] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 247.791925][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.812307][ T47] usb 2-1: config 0 descriptor?? [ 247.848643][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 247.879530][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 248.609932][ T29] audit: type=1400 audit(1737281882.303:417): avc: denied { read } for pid=8230 comm="syz.2.501" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.709126][ T29] audit: type=1400 audit(1737281882.303:418): avc: denied { open } for pid=8230 comm="syz.2.501" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.252067][ T5825] Bluetooth: hci1: command tx timeout [ 249.607200][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 249.956708][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.997832][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.028849][ T8182] bridge_slave_0: entered allmulticast mode [ 250.054811][ T8182] bridge_slave_0: entered promiscuous mode [ 250.095110][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.125631][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.140148][ T8182] bridge_slave_1: entered allmulticast mode [ 250.147570][ T8182] bridge_slave_1: entered promiscuous mode [ 250.238507][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.299567][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.394247][ T8182] team0: Port device team_slave_0 added [ 250.425213][ T8182] team0: Port device team_slave_1 added [ 250.514799][ T8275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.888775][ T5891] usb 2-1: USB disconnect, device number 12 [ 251.014639][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.023678][ T8280] xt_connbytes: Forcing CT accounting to be enabled [ 251.033397][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.050807][ T8280] --map-set only usable from mangle table [ 251.071724][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.095239][ T8281] Bluetooth: MGMT ver 1.23 [ 251.129466][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.170372][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.216437][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.319860][ T5825] Bluetooth: hci1: command tx timeout [ 251.385332][ T29] audit: type=1400 audit(1737281885.333:419): avc: denied { ioctl } for pid=8282 comm="syz.1.511" path="socket:[18739]" dev="sockfs" ino=18739 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 251.478848][ T8182] hsr_slave_0: entered promiscuous mode [ 251.508989][ T8182] hsr_slave_1: entered promiscuous mode [ 252.260186][ T8182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.275169][ T8182] Cannot create hsr debugfs directory [ 252.394540][ T29] audit: type=1400 audit(1737281886.363:420): avc: denied { create } for pid=8290 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 252.561330][ T5867] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 252.946391][ T29] audit: type=1400 audit(1737281886.913:421): avc: denied { create } for pid=8297 comm="syz.2.515" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 252.979888][ T29] audit: type=1400 audit(1737281886.913:422): avc: denied { setattr } for pid=8297 comm="syz.2.515" name="file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 253.007829][ T29] audit: type=1400 audit(1737281886.913:423): avc: denied { read } for pid=8297 comm="syz.2.515" name="file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 253.030103][ T29] audit: type=1400 audit(1737281886.913:424): avc: denied { open } for pid=8297 comm="syz.2.515" path="/97/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 253.052610][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 253.085524][ T8307] FAULT_INJECTION: forcing a failure. [ 253.085524][ T8307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.106097][ T8307] CPU: 1 UID: 0 PID: 8307 Comm: syz.2.516 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 253.116705][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 253.126754][ T8307] Call Trace: [ 253.130034][ T8307] [ 253.132961][ T8307] dump_stack_lvl+0x16c/0x1f0 [ 253.137645][ T8307] should_fail_ex+0x497/0x5b0 [ 253.142330][ T8307] _copy_from_user+0x2e/0xd0 [ 253.146913][ T8307] kstrtouint_from_user+0xd7/0x1c0 [ 253.152021][ T8307] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 253.157764][ T8307] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 253.163405][ T8307] proc_fail_nth_write+0x84/0x250 [ 253.168428][ T8307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.174047][ T8307] ? ksys_write+0x12b/0x250 [ 253.178551][ T8307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.184192][ T8307] vfs_write+0x24c/0x1150 [ 253.188520][ T8307] ? __fget_files+0x1fc/0x3a0 [ 253.193191][ T8307] ? __pfx___mutex_lock+0x10/0x10 [ 253.198220][ T8307] ? __pfx_vfs_write+0x10/0x10 [ 253.202970][ T8307] ? __fget_files+0x206/0x3a0 [ 253.207667][ T8307] ksys_write+0x12b/0x250 [ 253.212009][ T8307] ? __pfx_ksys_write+0x10/0x10 [ 253.216850][ T8307] do_syscall_64+0xcd/0x250 [ 253.221350][ T8307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.227242][ T8307] RIP: 0033:0x7f22c11847df [ 253.231654][ T8307] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 253.251251][ T8307] RSP: 002b:00007f22c1f38030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 253.259668][ T8307] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f22c11847df [ 253.267650][ T8307] RDX: 0000000000000001 RSI: 00007f22c1f380a0 RDI: 0000000000000004 [ 253.275626][ T8307] RBP: 00007f22c1f38090 R08: 0000000000000000 R09: 0000000000000010 [ 253.283581][ T8307] R10: 00000000200047ee R11: 0000000000000293 R12: 0000000000000001 [ 253.291533][ T8307] R13: 0000000000000000 R14: 00007f22c1375fa0 R15: 00007ffc834542d8 [ 253.299522][ T8307] [ 253.314247][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.325705][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.347904][ T5867] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 253.358989][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.452769][ T5825] Bluetooth: hci1: command tx timeout [ 253.490497][ T5867] usb 2-1: config 0 descriptor?? [ 253.504822][ T5867] hub 2-1:0.0: USB hub found [ 253.625361][ T8182] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.643783][ T8182] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.672546][ T8182] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.696011][ T8182] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.708097][ T5867] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 253.807025][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.880942][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.902992][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.910155][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.928789][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.935937][ T6670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.955756][ T5867] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 253.971604][ T5867] hid-generic 0003:046D:C31C.0004: probe with driver hid-generic failed with error -22 [ 254.205383][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.271062][ T47] usb 2-1: USB disconnect, device number 13 [ 254.471215][ T8295] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 254.472630][ T8182] veth0_vlan: entered promiscuous mode [ 254.492313][ T8182] veth1_vlan: entered promiscuous mode [ 254.526067][ T8182] veth0_macvtap: entered promiscuous mode [ 254.537538][ T8182] veth1_macvtap: entered promiscuous mode [ 254.566357][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.578047][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.648524][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.659595][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.678260][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.689352][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.707060][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.734389][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.768474][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.799219][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.847644][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.874605][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.890010][ T5891] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 255.001794][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.012519][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.023309][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.033417][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.046463][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.058280][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.144189][ T29] audit: type=1400 audit(1737281889.133:425): avc: denied { read } for pid=8356 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 255.280573][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.646289][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.652769][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.691038][ T8182] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.701257][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.715649][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.721826][ T8182] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.743488][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 255.768614][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.777801][ T8182] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.799281][ T5891] usb 1-1: config 0 descriptor?? [ 255.806586][ T8182] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.121251][ T6670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.129149][ T6670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.204376][ T4855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.220070][ T4855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.424480][ T8381] netlink: 56 bytes leftover after parsing attributes in process `syz.6.489'. [ 256.804154][ T8384] fuse: Unknown parameter 'group_' [ 258.874062][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 258.902943][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 258.919608][ T29] audit: type=1400 audit(1737281892.903:426): avc: denied { connect } for pid=8403 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.934699][ T5891] usb 1-1: USB disconnect, device number 10 [ 258.978098][ T29] audit: type=1400 audit(1737281892.923:427): avc: denied { append } for pid=8405 comm="syz.0.528" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 259.400115][ T5867] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 259.697716][ T5867] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 259.707001][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.719958][ T5867] usb 2-1: config 0 descriptor?? [ 259.744609][ T5867] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 259.811045][ T5891] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 259.969894][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 260.140231][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 260.240690][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 260.457756][ T5867] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -110 [ 260.531799][ T5867] pac7311 2-1:0.0: probe with driver pac7311 failed with error -110 [ 260.589361][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 14 [ 260.650100][ T5867] usb 2-1: USB disconnect, device number 14 [ 260.689963][ T5891] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 260.700327][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.708350][ T5891] usb 1-1: Product: syz [ 260.712826][ T5891] usb 1-1: Manufacturer: syz [ 260.717444][ T5891] usb 1-1: SerialNumber: syz [ 260.735751][ T5891] usb 1-1: config 0 descriptor?? [ 260.741331][ T8412] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 260.748820][ T8412] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 260.785101][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 260.791933][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 260.810875][ T5891] port100 1-1:0.0: NFC: Could not get supported command types [ 260.820062][ T5828] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 260.979938][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 260.994603][ T5828] usb 4-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00 [ 261.011208][ T8457] netlink: 56 bytes leftover after parsing attributes in process `syz.6.534'. [ 261.052053][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.106460][ T5828] usb 4-1: SerialNumber: syz [ 261.826344][ T5828] usb 4-1: config 0 descriptor?? [ 262.540466][ T8468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.322664][ T5870] usb 1-1: USB disconnect, device number 11 [ 263.359950][ T29] audit: type=1400 audit(1737281897.333:428): avc: denied { search } for pid=5485 comm="dhcpcd" name="netdev:wlan5" dev="debugfs" ino=18171 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 263.394037][ T5828] usb 4-1: USB disconnect, device number 14 [ 263.905924][ T8504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.477629][ T8533] netlink: 'syz.1.545': attribute type 10 has an invalid length. [ 265.710244][ T8540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.546'. [ 265.942911][ T5867] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 266.325069][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 266.341044][ T29] audit: type=1400 audit(1737281900.323:429): avc: denied { sys_chroot } for pid=8549 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 266.362723][ T29] audit: type=1400 audit(1737281900.323:430): avc: denied { setgid } for pid=8549 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 266.402742][ T5867] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.413837][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.425395][ T5867] usb 2-1: Product: syz [ 266.434468][ T5867] usb 2-1: Manufacturer: syz [ 266.450421][ T5867] usb 2-1: SerialNumber: syz [ 266.467198][ T5867] usb 2-1: config 0 descriptor?? [ 266.832703][ T8555] wg2: entered promiscuous mode [ 266.837588][ T8555] wg2: entered allmulticast mode [ 267.123175][ T8567] syzkaller0: entered promiscuous mode [ 267.134357][ T8567] syzkaller0: entered allmulticast mode [ 267.149737][ T29] audit: type=1400 audit(1737281901.133:431): avc: denied { relabelfrom } for pid=8566 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 267.199631][ T29] audit: type=1400 audit(1737281901.143:432): avc: denied { relabelto } for pid=8566 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 267.288716][ T47] usb 2-1: USB disconnect, device number 15 [ 268.913843][ T8610] syz.1.570[8610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.913935][ T8610] syz.1.570[8610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.926074][ T8610] syz.1.570[8610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.911185][ T8633] wg2: left promiscuous mode [ 269.930514][ T8633] wg2: left allmulticast mode [ 270.141857][ T8641] syzkaller0: entered promiscuous mode [ 270.169907][ T8641] syzkaller0: entered allmulticast mode [ 274.291824][ T8737] wg2: entered promiscuous mode [ 274.306178][ T8737] wg2: entered allmulticast mode [ 276.560118][ T47] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 276.742542][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.752959][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 276.767242][ T47] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 276.777084][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.792849][ T47] usb 4-1: config 0 descriptor?? [ 276.804625][ T47] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 276.811182][ T47] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 277.158323][ T8744] sit0: entered allmulticast mode [ 277.255293][ T8768] veth1_macvtap: left promiscuous mode [ 277.267592][ T8768] macsec0: entered promiscuous mode [ 277.720019][ T8798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.159852][ T5867] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 278.309967][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 278.318310][ T5867] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.328472][ T5867] usb 7-1: config 0 has no interface number 0 [ 278.343772][ T5867] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 278.354082][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.362305][ T5867] usb 7-1: Product: syz [ 278.371777][ T5867] usb 7-1: Manufacturer: syz [ 278.380619][ T5867] usb 7-1: SerialNumber: syz [ 278.388002][ T5867] usb 7-1: config 0 descriptor?? [ 278.401740][ T5867] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 278.410720][ T5867] usb 7-1: selecting invalid altsetting 1 [ 278.416508][ T5867] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 278.425414][ T5867] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.436694][ T5867] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 278.445691][ T5867] usb 7-1: media controller created [ 278.476143][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.529991][ T5870] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 278.691642][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.710707][ T5870] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 278.720037][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.728187][ T5870] usb 1-1: Product: syz [ 278.732567][ T5870] usb 1-1: Manufacturer: syz [ 278.737682][ T5870] usb 1-1: SerialNumber: syz [ 278.745871][ T5870] usb 1-1: config 0 descriptor?? [ 278.944888][ T5899] usb 4-1: USB disconnect, device number 15 [ 280.033562][ T5867] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 280.043617][ T5867] zl10353_read_register: readreg error (reg=127, ret==-110) [ 280.567407][ T5867] usb 7-1: USB disconnect, device number 2 [ 280.697888][ T29] audit: type=1400 audit(1737281914.683:433): avc: denied { write } for pid=8810 comm="syz.6.629" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.373976][ T5867] usb 1-1: USB disconnect, device number 12 [ 283.969910][ T8819] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 284.999981][ T29] audit: type=1400 audit(1737281918.983:434): avc: denied { listen } for pid=8836 comm="syz.6.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.697806][ T8825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 286.798126][ T8844] dvmrp8: entered allmulticast mode [ 289.316542][ T8890] nbd: must specify at least one socket [ 289.993086][ T8898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.206686][ T8900] rtc_cmos 00:00: Alarms can be up to one day in the future [ 290.563513][ T5828] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 290.819215][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 290.827932][ T8906] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 290.838550][ T5828] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 290.859164][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.882031][ T5828] usb 1-1: Product: syz [ 290.891498][ T5828] usb 1-1: Manufacturer: syz [ 290.905046][ T5828] usb 1-1: SerialNumber: syz [ 292.630112][ T29] audit: type=1400 audit(1737281926.583:435): avc: denied { read } for pid=8922 comm="syz.6.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 292.650676][ T8932] netlink: 252 bytes leftover after parsing attributes in process `syz.0.645'. [ 292.774962][ T5870] IPVS: starting estimator thread 0... [ 292.793711][ T29] audit: type=1400 audit(1737281926.763:436): avc: denied { connect } for pid=8922 comm="syz.6.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.889913][ T8930] IPVS: using max 29 ests per chain, 69600 per kthread [ 294.964953][ T8965] nbd: must specify at least one socket [ 295.189976][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 295.221822][ T5828] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 295.230435][ T5828] mxuport 1-1:254.0: probe with driver mxuport failed with error -5 [ 295.251329][ T5828] usb 1-1: USB disconnect, device number 13 [ 295.475614][ T8974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.496020][ T29] audit: type=1400 audit(1737281929.393:437): avc: denied { ioctl } for pid=8943 comm="syz.6.653" path="socket:[20392]" dev="sockfs" ino=20392 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 295.909889][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 296.105678][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 296.438339][ T8983] hfs: can't find a HFS filesystem on dev nullb0 [ 296.781369][ T29] audit: type=1400 audit(1737281930.493:438): avc: denied { append } for pid=8982 comm="syz.2.660" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.442491][ T8985] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 298.587484][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 298.596773][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.700443][ T5870] usb 4-1: Product: syz [ 298.707608][ T5870] usb 4-1: Manufacturer: syz [ 298.917564][ T5870] usb 4-1: config 0 descriptor?? [ 298.931336][ T5870] usb 4-1: can't set config #0, error -71 [ 298.957803][ T5870] usb 4-1: USB disconnect, device number 16 [ 300.333464][ T9017] 9pnet_fd: Insufficient options for proto=fd [ 300.880178][ T5870] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 301.375590][ T29] audit: type=1400 audit(1737281934.953:439): avc: denied { listen } for pid=9023 comm="syz.6.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 301.466226][ T4826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.740749][ T4826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.791223][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.802462][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 301.830018][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 43690, setting to 64 [ 301.866852][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.905676][ T5870] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.915115][ T5870] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.939075][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.952084][ T5870] usb 4-1: Manufacturer: syz [ 301.969503][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.981241][ T5870] usb 4-1: config 0 descriptor?? [ 301.987176][ T9017] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.991774][ T4826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.994829][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.015297][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.023756][ T5870] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 302.032261][ T5824] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 302.039946][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.332700][ T4826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.351634][ T5870] usb 4-1: USB disconnect, device number 17 [ 302.899154][ T4826] bridge_slave_1: left allmulticast mode [ 302.919589][ T4826] bridge_slave_1: left promiscuous mode [ 302.936808][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.954980][ T4826] bridge_slave_0: left allmulticast mode [ 302.964999][ T4826] bridge_slave_0: left promiscuous mode [ 303.034549][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.013228][ T5917] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 304.134382][ T5824] Bluetooth: hci2: command tx timeout [ 304.321408][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 304.339568][ T5917] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.351882][ T5917] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.401732][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.416791][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.429854][ T5917] usb 4-1: Product: syz [ 304.451355][ T5917] usb 4-1: Manufacturer: syz [ 304.466182][ T5917] usb 4-1: SerialNumber: syz [ 304.598891][ T4826] erspan0 (unregistering): left allmulticast mode [ 304.676597][ T4826] dvmrp8 (unregistering): left allmulticast mode [ 304.705827][ T5917] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 304.785738][ T5917] usb 4-1: USB disconnect, device number 18 [ 304.823048][ T7321] udevd[7321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.236298][ T9088] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.677'. [ 305.608732][ T9094] syz.3.681 uses old SIOCAX25GETINFO [ 305.608743][ T29] audit: type=1400 audit(1737281939.593:440): avc: denied { ioctl } for pid=9091 comm="syz.3.681" path="socket:[21193]" dev="sockfs" ino=21193 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 306.209894][ T5824] Bluetooth: hci2: command tx timeout [ 306.467464][ T4826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.563882][ T4826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.648803][ T4826] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 306.723653][ T4826] bond0 (unregistering): Released all slaves [ 306.887822][ T4826] bond1 (unregistering): Released all slaves [ 307.375791][ T9044] chnl_net:caif_netlink_parms(): no params data found [ 308.070697][ T4826] hsr_slave_0: left promiscuous mode [ 308.077782][ T4826] hsr_slave_1: left promiscuous mode [ 308.091285][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.108840][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.174517][ T9115] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.684'. [ 308.188582][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.206386][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.259535][ T4826] veth0_macvtap: left promiscuous mode [ 308.273528][ T4826] veth1_vlan: left promiscuous mode [ 308.279969][ T9096] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 308.291149][ T5824] Bluetooth: hci2: command tx timeout [ 308.291217][ T4826] veth0_vlan: left promiscuous mode [ 308.484171][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.498551][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.507705][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.517623][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.525246][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.533496][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.200381][ T4826] team0 (unregistering): Port device team_slave_1 removed [ 309.234231][ T4826] team0 (unregistering): Port device team_slave_0 removed [ 309.607270][ T9135] affs: No valid root block on device nullb0 [ 309.625854][ T29] audit: type=1400 audit(1737281943.563:441): avc: denied { audit_write } for pid=9132 comm="syz.2.687" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 309.696906][ T29] audit: type=1107 audit(1737281943.563:442): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 310.153280][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.180165][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.189333][ T9044] bridge_slave_0: entered allmulticast mode [ 310.202255][ T9044] bridge_slave_0: entered promiscuous mode [ 310.324015][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.331334][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.344681][ T9044] bridge_slave_1: entered allmulticast mode [ 310.351637][ T9044] bridge_slave_1: entered promiscuous mode [ 310.353367][ T9143] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 310.395466][ T5825] Bluetooth: hci2: command tx timeout [ 310.552923][ T9126] chnl_net:caif_netlink_parms(): no params data found [ 310.564989][ T9044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.576241][ T9044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.599945][ T5825] Bluetooth: hci3: command tx timeout [ 311.163229][ T9044] team0: Port device team_slave_0 added [ 311.655158][ T9169] affs: No valid root block on device nullb0 [ 311.721371][ T29] audit: type=1107 audit(1737281945.633:443): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 311.768136][ T9044] team0: Port device team_slave_1 added [ 311.925977][ T9044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.933145][ T9044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.979966][ T9044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.106040][ T9044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.130379][ T9044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.156602][ T9044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.342138][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.349230][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.356556][ T9126] bridge_slave_0: entered allmulticast mode [ 312.371654][ T9126] bridge_slave_0: entered promiscuous mode [ 312.379212][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.415977][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.425007][ T9126] bridge_slave_1: entered allmulticast mode [ 312.438968][ T9126] bridge_slave_1: entered promiscuous mode [ 312.492795][ T9191] netlink: 80 bytes leftover after parsing attributes in process `syz.2.697'. [ 312.518815][ T9044] hsr_slave_0: entered promiscuous mode [ 312.544167][ T9044] hsr_slave_1: entered promiscuous mode [ 312.683419][ T5825] Bluetooth: hci3: command tx timeout [ 313.341249][ T9044] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 313.377539][ T9126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.390412][ T5868] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 313.393055][ T9126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.535113][ T4826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.560223][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 313.577450][ T5868] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 313.605184][ T5868] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 313.681470][ T5868] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 313.740028][ T5868] usb 7-1: config 250 has no interface number 0 [ 313.769545][ T5868] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 313.816230][ T9044] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.822955][ T5868] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 313.877825][ T5868] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 313.974973][ T5868] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 314.065206][ T5868] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 314.098048][ T5868] usb 7-1: config 250 interface 228 has no altsetting 0 [ 314.144476][ T5868] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 314.161090][ T4826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.180427][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 314.208964][ T5868] usb 7-1: Product: syz [ 314.219783][ T5868] usb 7-1: SerialNumber: syz [ 314.242256][ T5868] hub 7-1:250.228: bad descriptor, ignoring hub [ 314.248560][ T5868] hub 7-1:250.228: probe with driver hub failed with error -5 [ 314.306306][ T9044] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 314.667716][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.779065][ T5825] Bluetooth: hci3: command tx timeout [ 314.791307][ T9044] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 314.918093][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.993032][ T9126] team0: Port device team_slave_0 added [ 315.164581][ T29] audit: type=1400 audit(1737281949.143:444): avc: denied { bind } for pid=9194 comm="syz.6.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.200028][ T9219] No control pipe specified [ 315.209841][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.314778][ T29] audit: type=1400 audit(1737281949.143:445): avc: denied { write } for pid=9194 comm="syz.6.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.356021][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.622065][ T29] audit: type=1400 audit(1737281949.233:446): avc: denied { read } for pid=9218 comm="syz.3.702" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 315.701971][ T4826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.848791][ T29] audit: type=1400 audit(1737281949.233:447): avc: denied { open } for pid=9218 comm="syz.3.702" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 316.119665][ T5868] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 316.142522][ T29] audit: type=1400 audit(1737281949.233:448): avc: denied { ioctl } for pid=9218 comm="syz.3.702" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 316.192118][ T5868] usb 7-1: USB disconnect, device number 3 [ 316.203129][ T5868] usblp0: removed [ 316.369824][ T5867] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 316.447393][ T9126] team0: Port device team_slave_1 added [ 316.496701][ T4826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.597361][ T29] audit: type=1400 audit(1737281950.563:449): avc: denied { read } for pid=9227 comm="syz.6.704" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 316.831561][ T29] audit: type=1400 audit(1737281950.563:450): avc: denied { open } for pid=9227 comm="syz.6.704" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 316.856360][ T5825] Bluetooth: hci3: command tx timeout [ 317.039816][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 317.046577][ T5867] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 317.049596][ T9044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.058995][ T5867] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 317.071919][ T9044] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.074975][ T5867] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.104770][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.111889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.121018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.128116][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.133262][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.141825][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.166243][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.173789][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.201434][ T9126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.219447][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.226652][ T5867] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.227520][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.236058][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.264590][ T9230] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.278630][ T9230] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.282704][ T5867] usb 4-1: Product: syz [ 317.284623][ T9230] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 317.288649][ T5867] usb 4-1: Manufacturer: syz [ 317.288665][ T5867] usb 4-1: SerialNumber: syz [ 317.289427][ T9126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.324322][ T9230] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.330335][ T9230] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 317.342404][ T9230] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 317.379909][ T9230] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.386158][ T9230] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 317.396552][ T9230] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 317.403409][ T9230] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.409347][ T9230] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 317.416445][ T9230] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 317.554818][ T9126] hsr_slave_0: entered promiscuous mode [ 317.567278][ T5867] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 317.576457][ T5867] usb 4-1: unit 0 not found! [ 317.589478][ T9126] hsr_slave_1: entered promiscuous mode [ 317.608428][ T9238] [ 317.610771][ T9238] ====================================================== [ 317.617781][ T9238] WARNING: possible circular locking dependency detected [ 317.619886][ T5867] usb 4-1: USB disconnect, device number 19 [ 317.624791][ T9238] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 317.637765][ T9238] ------------------------------------------------------ [ 317.644767][ T9238] syz.6.706/9238 is trying to acquire lock: [ 317.650637][ T9238] ffff88807a2d0ba0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 317.659531][ T9238] [ 317.659531][ T9238] but task is already holding lock: [ 317.666888][ T9238] ffff888026e392e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 317.676128][ T9238] [ 317.676128][ T9238] which lock already depends on the new lock. [ 317.676128][ T9238] [ 317.686524][ T9238] [ 317.686524][ T9238] the existing dependency chain (in reverse order) is: [ 317.695531][ T9238] [ 317.695531][ T9238] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 317.703341][ T9238] __mutex_lock+0x19b/0xa60 [ 317.708368][ T9238] blk_mq_init_sched+0x42b/0x640 [ 317.713820][ T9238] elevator_init_mq+0x2cd/0x420 [ 317.719177][ T9238] add_disk_fwnode+0x113/0x1300 [ 317.724541][ T9238] sd_probe+0xa86/0x1000 [ 317.729289][ T9238] really_probe+0x23e/0xa90 [ 317.734300][ T9238] __driver_probe_device+0x1de/0x440 [ 317.740094][ T9238] driver_probe_device+0x4c/0x1b0 [ 317.745624][ T9238] __device_attach_driver+0x1df/0x310 [ 317.751503][ T9238] bus_for_each_drv+0x157/0x1e0 [ 317.756858][ T9238] __device_attach_async_helper+0x1d3/0x290 [ 317.763260][ T9238] async_run_entry_fn+0x9c/0x530 [ 317.768706][ T9238] process_one_work+0x9c5/0x1ba0 [ 317.774146][ T9238] worker_thread+0x6c8/0xf00 [ 317.779237][ T9238] kthread+0x2c1/0x3a0 [ 317.783816][ T9238] ret_from_fork+0x45/0x80 [ 317.788734][ T9238] ret_from_fork_asm+0x1a/0x30 [ 317.794006][ T9238] [ 317.794006][ T9238] -> #4 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 317.802855][ T9238] blk_queue_enter+0x50f/0x640 [ 317.808134][ T9238] blk_mq_alloc_request+0x59b/0x950 [ 317.813837][ T9238] scsi_execute_cmd+0x1da/0xf40 [ 317.819193][ T9238] read_capacity_16+0x213/0xe10 [ 317.824550][ T9238] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 317.830865][ T9238] sd_probe+0x904/0x1000 [ 317.835608][ T9238] really_probe+0x23e/0xa90 [ 317.840613][ T9238] __driver_probe_device+0x1de/0x440 [ 317.846401][ T9238] driver_probe_device+0x4c/0x1b0 [ 317.851930][ T9238] __device_attach_driver+0x1df/0x310 [ 317.857807][ T9238] bus_for_each_drv+0x157/0x1e0 [ 317.863169][ T9238] __device_attach_async_helper+0x1d3/0x290 [ 317.869567][ T9238] async_run_entry_fn+0x9c/0x530 [ 317.875012][ T9238] process_one_work+0x9c5/0x1ba0 [ 317.880451][ T9238] worker_thread+0x6c8/0xf00 [ 317.885543][ T9238] kthread+0x2c1/0x3a0 [ 317.890118][ T9238] ret_from_fork+0x45/0x80 [ 317.895040][ T9238] ret_from_fork_asm+0x1a/0x30 [ 317.900313][ T9238] [ 317.900313][ T9238] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 317.907938][ T9238] __mutex_lock+0x19b/0xa60 [ 317.912948][ T9238] __nbd_set_size+0x2c0/0x730 [ 317.918127][ T9238] nbd_start_device+0x8fd/0xd70 [ 317.923480][ T9238] nbd_ioctl+0x21a/0xfd0 [ 317.928224][ T9238] blkdev_ioctl+0x276/0x6d0 [ 317.933242][ T9238] __x64_sys_ioctl+0x190/0x200 [ 317.938516][ T9238] do_syscall_64+0xcd/0x250 [ 317.943528][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.949928][ T9238] [ 317.949928][ T9238] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 317.958516][ T9238] blk_mq_submit_bio+0x1fb6/0x24c0 [ 317.964133][ T9238] __submit_bio+0x384/0x540 [ 317.969137][ T9238] submit_bio_noacct_nocheck+0x698/0xd70 [ 317.975270][ T9238] submit_bio_noacct+0x93a/0x1e20 [ 317.980795][ T9238] block_read_full_folio+0x812/0xa50 [ 317.986583][ T9238] filemap_read_folio+0xc6/0x2a0 [ 317.992024][ T9238] filemap_get_pages+0x155f/0x1be0 [ 317.997636][ T9238] filemap_read+0x3ca/0xd70 [ 318.002641][ T9238] blkdev_read_iter+0x187/0x480 [ 318.007994][ T9238] vfs_read+0x87f/0xbe0 [ 318.012651][ T9238] ksys_read+0x12b/0x250 [ 318.017394][ T9238] do_syscall_64+0xcd/0x250 [ 318.022407][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.028808][ T9238] [ 318.028808][ T9238] -> #1 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 318.037306][ T9238] down_read+0x9a/0x330 [ 318.041973][ T9238] page_cache_ra_unbounded+0x173/0x750 [ 318.047931][ T9238] page_cache_ra_order+0x8f2/0xc80 [ 318.053544][ T9238] filemap_fault+0x14a5/0x2820 [ 318.058811][ T9238] __do_fault+0x10a/0x490 [ 318.063647][ T9238] do_pte_missing+0xebd/0x3e00 [ 318.068915][ T9238] __handle_mm_fault+0x103c/0x2a40 [ 318.074531][ T9238] handle_mm_fault+0x3fa/0xaa0 [ 318.079799][ T9238] __get_user_pages+0x8d9/0x3b50 [ 318.085240][ T9238] get_user_pages_unlocked+0x1c2/0x780 [ 318.091199][ T9238] hva_to_pfn+0x8be/0xc20 [ 318.096035][ T9238] kvm_follow_pfn+0x29f/0x3f0 [ 318.101220][ T9238] __kvm_faultin_pfn+0x11c/0x1a0 [ 318.106660][ T9238] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 318.112362][ T9238] kvm_tdp_page_fault+0x182/0x3d0 [ 318.117894][ T9238] kvm_mmu_do_page_fault+0x58d/0x690 [ 318.123684][ T9238] kvm_mmu_page_fault+0x20f/0x1bb0 [ 318.129304][ T9238] handle_ept_violation+0x25a/0x640 [ 318.135008][ T9238] vmx_handle_exit+0x733/0x1f70 [ 318.140362][ T9238] vcpu_run+0x3047/0x4f50 [ 318.145198][ T9238] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 318.151255][ T9238] kvm_vcpu_ioctl+0x6ce/0x1520 [ 318.156519][ T9238] __x64_sys_ioctl+0x190/0x200 [ 318.161792][ T9238] do_syscall_64+0xcd/0x250 [ 318.166805][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.173214][ T9238] [ 318.173214][ T9238] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 318.180754][ T9238] __lock_acquire+0x249e/0x3c40 [ 318.186107][ T9238] lock_acquire.part.0+0x11b/0x380 [ 318.191720][ T9238] __might_fault+0x11b/0x190 [ 318.196817][ T9238] _copy_from_user+0x29/0xd0 [ 318.201909][ T9238] __blk_trace_setup+0xa8/0x180 [ 318.207267][ T9238] blk_trace_setup+0x47/0x70 [ 318.212361][ T9238] sg_ioctl+0x65e/0x2750 [ 318.217109][ T9238] __x64_sys_ioctl+0x190/0x200 [ 318.222383][ T9238] do_syscall_64+0xcd/0x250 [ 318.227394][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.233793][ T9238] [ 318.233793][ T9238] other info that might help us debug this: [ 318.233793][ T9238] [ 318.243997][ T9238] Chain exists of: [ 318.243997][ T9238] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 318.243997][ T9238] [ 318.258323][ T9238] Possible unsafe locking scenario: [ 318.258323][ T9238] [ 318.265749][ T9238] CPU0 CPU1 [ 318.271110][ T9238] ---- ---- [ 318.276452][ T9238] lock(&q->debugfs_mutex); [ 318.281024][ T9238] lock(&q->q_usage_counter(queue)#50); [ 318.289162][ T9238] lock(&q->debugfs_mutex); [ 318.296251][ T9238] rlock(&mm->mmap_lock); [ 318.300652][ T9238] [ 318.300652][ T9238] *** DEADLOCK *** [ 318.300652][ T9238] [ 318.308769][ T9238] 1 lock held by syz.6.706/9238: [ 318.313695][ T9238] #0: ffff888026e392e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 318.323364][ T9238] [ 318.323364][ T9238] stack backtrace: [ 318.329237][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.6.706 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 318.339807][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.349846][ T9238] Call Trace: [ 318.353110][ T9238] [ 318.356024][ T9238] dump_stack_lvl+0x116/0x1f0 [ 318.360694][ T9238] print_circular_bug+0x419/0x5d0 [ 318.365704][ T9238] check_noncircular+0x31a/0x400 [ 318.370628][ T9238] ? __pfx_check_noncircular+0x10/0x10 [ 318.376072][ T9238] ? lockdep_lock+0xc6/0x200 [ 318.380652][ T9238] ? __pfx_lockdep_lock+0x10/0x10 [ 318.385680][ T9238] __lock_acquire+0x249e/0x3c40 [ 318.390518][ T9238] ? __pfx___lock_acquire+0x10/0x10 [ 318.395699][ T9238] ? trace_lock_acquire+0x14e/0x1f0 [ 318.400886][ T9238] ? __pfx_mark_lock+0x10/0x10 [ 318.405637][ T9238] lock_acquire.part.0+0x11b/0x380 [ 318.410732][ T9238] ? __might_fault+0xe3/0x190 [ 318.415396][ T9238] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 318.421010][ T9238] ? rcu_is_watching+0x12/0xc0 [ 318.425761][ T9238] ? trace_lock_acquire+0x14e/0x1f0 [ 318.430946][ T9238] ? __might_fault+0xe3/0x190 [ 318.435608][ T9238] ? lock_acquire+0x2f/0xb0 [ 318.440093][ T9238] ? __might_fault+0xe3/0x190 [ 318.444755][ T9238] ? __might_fault+0xe3/0x190 [ 318.449417][ T9238] __might_fault+0x11b/0x190 [ 318.453993][ T9238] ? __might_fault+0xe3/0x190 [ 318.458656][ T9238] _copy_from_user+0x29/0xd0 [ 318.463228][ T9238] __blk_trace_setup+0xa8/0x180 [ 318.468069][ T9238] ? __pfx___blk_trace_setup+0x10/0x10 [ 318.473518][ T9238] ? do_vfs_ioctl+0x513/0x1990 [ 318.478285][ T9238] blk_trace_setup+0x47/0x70 [ 318.482861][ T9238] sg_ioctl+0x65e/0x2750 [ 318.487091][ T9238] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 318.493581][ T9238] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 318.500417][ T9238] ? __pfx_sg_ioctl+0x10/0x10 [ 318.505078][ T9238] ? __pfx_lock_release+0x10/0x10 [ 318.510089][ T9238] ? selinux_file_ioctl+0x180/0x270 [ 318.515271][ T9238] ? selinux_file_ioctl+0xb4/0x270 [ 318.520368][ T9238] ? __pfx_sg_ioctl+0x10/0x10 [ 318.525034][ T9238] __x64_sys_ioctl+0x190/0x200 [ 318.529787][ T9238] do_syscall_64+0xcd/0x250 [ 318.534279][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.540159][ T9238] RIP: 0033:0x7ff291b85d29 [ 318.544556][ T9238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.564144][ T9238] RSP: 002b:00007ff292a51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.572542][ T9238] RAX: ffffffffffffffda RBX: 00007ff291d75fa0 RCX: 00007ff291b85d29 [ 318.580495][ T9238] RDX: 00000000200006c0 RSI: 00000000c0481273 RDI: 0000000000000003 [ 318.588461][ T9238] RBP: 00007ff291c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 318.596421][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.604384][ T9238] R13: 0000000000000000 R14: 00007ff291d75fa0 R15: 00007ffdd238a7c8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 318.612353][ T9238] [ 318.618873][ T9126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.626478][ T9126] Cannot create hsr debugfs directory [ 318.922238][ T7321] udevd[7321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.089891][ T4826] bridge_slave_1: left allmulticast mode [ 319.095555][ T4826] bridge_slave_1: left promiscuous mode [ 319.126764][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.150310][ T4826] bridge_slave_0: left allmulticast mode [ 319.156932][ T4826] bridge_slave_0: left promiscuous mode [ 319.165494][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.385121][ T4826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.394886][ T4826] bond_slave_0: left promiscuous mode [ 319.401746][ T4826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.410530][ T4826] bond_slave_1: left promiscuous mode [ 319.416424][ T4826] bond0 (unregistering): Released all slaves [ 319.464788][ T4826] tipc: Left network mode [ 319.662697][ T4826] hsr_slave_0: left promiscuous mode [ 319.668373][ T4826] hsr_slave_1: left promiscuous mode [ 319.676198][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.684246][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.694399][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.702565][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.713143][ T4826] veth1_macvtap: left promiscuous mode [ 319.718624][ T4826] veth0_macvtap: left promiscuous mode [ 319.724273][ T4826] veth1_vlan: left promiscuous mode [ 319.729505][ T4826] veth0_vlan: left promiscuous mode [ 319.838563][ T4826] team0 (unregistering): Port device team_slave_1 removed [ 319.858003][ T4826] team0 (unregistering): Port device team_slave_0 removed [ 320.265000][ T4826] IPVS: stop unused estimator thread 0... [ 320.798102][ T4826] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.833428][ T4826] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.883791][ T4826] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.923511][ T4826] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.001622][ T4826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.055025][ T4826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.114795][ T4826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.176445][ T4826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.270460][ T4826] bridge_slave_1: left allmulticast mode [ 321.276129][ T4826] bridge_slave_1: left promiscuous mode [ 321.282072][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.294029][ T4826] bridge_slave_0: left allmulticast mode [ 321.299674][ T4826] bridge_slave_0: left promiscuous mode [ 321.306301][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.316577][ T4826] bridge_slave_1: left allmulticast mode [ 321.322441][ T4826] bridge_slave_1: left promiscuous mode [ 321.328066][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.341165][ T4826] bridge_slave_0: left allmulticast mode [ 321.346786][ T4826] bridge_slave_0: left promiscuous mode [ 321.354058][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.365041][ T4826] bridge_slave_1: left allmulticast mode [ 321.370758][ T4826] bridge_slave_1: left promiscuous mode [ 321.376379][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.384797][ T4826] bridge_slave_0: left allmulticast mode [ 321.392813][ T4826] bridge_slave_0: left promiscuous mode [ 321.398437][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.407281][ T4826] bridge_slave_1: left allmulticast mode [ 321.412970][ T4826] bridge_slave_1: left promiscuous mode [ 321.418537][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.426319][ T4826] bridge_slave_0: left allmulticast mode [ 321.431975][ T4826] bridge_slave_0: left promiscuous mode [ 321.437933][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.943527][ T4826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.953679][ T4826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.962956][ T4826] bond0 (unregistering): Released all slaves [ 321.973820][ T4826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.984264][ T4826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.994287][ T4826] bond0 (unregistering): Released all slaves [ 322.004423][ T4826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.014028][ T4826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.023202][ T4826] bond0 (unregistering): Released all slaves [ 322.031531][ T4826] bond1 (unregistering): Released all slaves [ 322.039392][ T4826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.051194][ T4826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.060660][ T4826] bond0 (unregistering): Released all slaves [ 322.427889][ T4826] hsr_slave_0: left promiscuous mode [ 322.434263][ T4826] hsr_slave_1: left promiscuous mode [ 322.440373][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.447803][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.457498][ T4826] hsr_slave_0: left promiscuous mode [ 322.464356][ T4826] hsr_slave_1: left promiscuous mode [ 322.470204][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.477573][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.485330][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.492711][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.503127][ T4826] hsr_slave_0: left promiscuous mode [ 322.508654][ T4826] hsr_slave_1: left promiscuous mode [ 322.514320][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.521713][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.529066][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.536513][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.544150][ T4826] hsr_slave_0: left promiscuous mode [ 322.549692][ T4826] hsr_slave_1: left promiscuous mode [ 322.555347][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.562684][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.572241][ T4826] veth1_macvtap: left promiscuous mode [ 322.577694][ T4826] veth0_macvtap: left promiscuous mode [ 322.583266][ T4826] veth1_vlan: left promiscuous mode [ 322.588485][ T4826] veth0_vlan: left promiscuous mode [ 322.594345][ T4826] veth1_macvtap: left promiscuous mode [ 322.599852][ T4826] veth0_macvtap: left promiscuous mode [ 322.605329][ T4826] veth1_vlan: left promiscuous mode [ 322.610755][ T4826] veth0_vlan: left promiscuous mode [ 322.709215][ T4826] team0 (unregistering): Port device team_slave_1 removed [ 322.736866][ T4826] team0 (unregistering): Port device team_slave_0 removed [ 322.842486][ T4826] team0 (unregistering): Port device team_slave_1 removed [ 322.862664][ T4826] team0 (unregistering): Port device team_slave_0 removed [ 322.975844][ T4826] team0 (unregistering): Port device team_slave_1 removed [ 322.993625][ T4826] team0 (unregistering): Port device team_slave_0 removed [ 323.068856][ T4826] team0 (unregistering): Port device team_slave_1 removed [ 323.092157][ T4826] team0 (unregistering): Port device team_slave_0 removed [ 323.820760][ T4826] IPVS: stop unused estimator thread 0... [ 323.827379][ T4826] IPVS: stop unused estimator thread 0...