last executing test programs: 5m55.022994256s ago: executing program 3 (id=505): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="89eb0100180000000000000010000000100000000400000002000000000000110300000000000000002e5f00"], 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "0feee70ca9233ab46fd74f02750a5ede"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) socket(0x2b, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000000022", @ANYBLOB="1101"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)}, {&(0x7f0000000240)="ca00544d5c3deaafed19faf7015f627bb161f8aa71ede93e77c44220ffc8b961623f0d87cf159b5fb09d03ec5e1630657526cb38c1f8ba", 0x37}], 0x2) 5m51.641232941s ago: executing program 3 (id=513): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8541) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x8000000, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x80e, 0x5, {{0x14, 0x4, 0x3, 0xd, 0x50, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x14, 0x86, 0x0, 0x2, [0x8, 0xfffffffa, 0x2, 0x3]}, @ra={0x94, 0x4}, @generic={0x88, 0x5, "76bee3"}, @end, @ssrr={0x89, 0x1b, 0x60, [@private=0xa010100, @private=0xa010100, @multicast2, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 5m50.252390615s ago: executing program 3 (id=516): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc80d4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x53}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x54, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5m48.781717218s ago: executing program 3 (id=519): syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x101080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x18024, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000001b40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r5, r0, 0x80000001, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r6, 0xc, 0x6, 0xfe}, 0x10) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000940), 0x1, 0x80000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_SETSIGMASK(0x420b, r7, 0x8, &(0x7f0000000000)={[0x8]}) geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000007000)={0x2020}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001780)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000017c0)={{{@in=@remote, @in6=@initdev}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000018c0)=0xe8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x147) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0xc0089364, &(0x7f0000000040)=0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) 5m46.849400832s ago: executing program 3 (id=529): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc80d4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x53}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x54, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5m46.439849444s ago: executing program 3 (id=534): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) sendmsg$nl_xfrm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203", 0x46}], 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a000000000000e500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 5m46.313303074s ago: executing program 32 (id=534): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) sendmsg$nl_xfrm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203", 0x46}], 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a000000000000e500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 3m13.46850869s ago: executing program 2 (id=1054): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000900)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60ea0c0000108800fe880000000000000000000000000001fe8000000000000000000000000001aa00000000001090"], 0x0) 3m13.276306996s ago: executing program 2 (id=1055): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = getpid() r3 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000000)={r0, r1, 0x5}) 3m13.254342697s ago: executing program 2 (id=1056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0xa, 0x2) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10) accept4(r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, {0xfffffffffffffe3d, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x68}}, 0x0) fchdir(r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 3m12.334145543s ago: executing program 2 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000012000a20000000000a05000000000000000000010000000900010073797a3000000000a4000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002168001180040001"], 0xec}}, 0x0) 3m12.244241476s ago: executing program 2 (id=1060): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="ff"], 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x34}}, 0x20000810) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) syz_usb_connect(0x6, 0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203dccdc3ee8f8fd64a00000904000000a2cdd200"], 0x0) 3m10.591781996s ago: executing program 2 (id=1065): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x7, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0xb0}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r6, 0xc0285628, &(0x7f00000003c0)={0x300, 0x8, 0x80, '\x00', &(0x7f0000000140)=0xda}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000500)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) r12 = geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r15 = syz_open_dev$sg(0x0, 0x0, 0x8002) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$SCSI_IOCTL_GET_PCI(r16, 0x5393, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r17, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCMGET(r18, 0x5415, &(0x7f0000000840)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r16, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="f23f7d89ab03", 0x6}], 0x1, &(0x7f00000003c0)=ANY=[@ANYRES64=r20, @ANYRES32=r19], 0x18}, 0x4000) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {}, [{0x2, 0x4, r3}, {0x2, 0x1, r7}, {0x2, 0x1, r9}, {0x2, 0x0, r10}, {0x2, 0x0, r11}, {0x2, 0x3, r12}, {0x2, 0x5, r13}], {0x4, 0x6}, [{0x8, 0x1, r14}, {0x8, 0x6, r8}], {0x10, 0x5}}, 0x6c, 0x1) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r21 = dup(r1) write$P9_RLERRORu(r21, &(0x7f0000000140)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r21}, 0x2c, {[], [], 0x6b}}) 2m54.549550939s ago: executing program 33 (id=1065): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x7, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0xb0}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r6, 0xc0285628, &(0x7f00000003c0)={0x300, 0x8, 0x80, '\x00', &(0x7f0000000140)=0xda}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000500)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) r12 = geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r15 = syz_open_dev$sg(0x0, 0x0, 0x8002) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$SCSI_IOCTL_GET_PCI(r16, 0x5393, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r17, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCMGET(r18, 0x5415, &(0x7f0000000840)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r16, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="f23f7d89ab03", 0x6}], 0x1, &(0x7f00000003c0)=ANY=[@ANYRES64=r20, @ANYRES32=r19], 0x18}, 0x4000) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {}, [{0x2, 0x4, r3}, {0x2, 0x1, r7}, {0x2, 0x1, r9}, {0x2, 0x0, r10}, {0x2, 0x0, r11}, {0x2, 0x3, r12}, {0x2, 0x5, r13}], {0x4, 0x6}, [{0x8, 0x1, r14}, {0x8, 0x6, r8}], {0x10, 0x5}}, 0x6c, 0x1) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r21 = dup(r1) write$P9_RLERRORu(r21, &(0x7f0000000140)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r21}, 0x2c, {[], [], 0x6b}}) 11.187443401s ago: executing program 5 (id=1693): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0900000018000000080000004000000042", @ANYRES32=0x1, @ANYBLOB="000000000000007c420006000200008cfc61", @ANYRES32, @ANYBLOB="000000001800"/28], 0x50) setreuid(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001ac0), 0x101000, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r6, 0x8004510b, 0xffffffffffffffff) keyctl$reject(0x13, 0x0, 0xffffffffffffffff, 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$bt_hci(r5, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0xfffffffffffffe1d) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="440100001a0001000000000000000000ffffffff00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x18, 0x4) 10.515080945s ago: executing program 0 (id=1695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x10, 0x0, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1411200000000000000000f7000000558e0000"], 0x10}}, 0x0) 10.37557172s ago: executing program 0 (id=1697): r0 = shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(r4, 0xc0384707, 0x20000000) ioctl$TCFLSH(r4, 0x40384708, 0x20000000) (async) ioctl$TCFLSH(r4, 0x40384708, 0x20000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x1}) (async) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, 0x0, 0x0, 0xdead, 0x64, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, 0x0, 0x0, 0xdead, 0x64, 0x0}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x5) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x5) r7 = creat(&(0x7f0000000440)='./file0\x00', 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000000, 0x2) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='ocfs2\x00', 0x0, 0x0) shmctl$SHM_INFO(r0, 0xe, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(r7, &(0x7f00000001c0)='./file1\x00', 0x105002, 0x0) 10.349413263s ago: executing program 6 (id=1699): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f0000000140)=""/202, 0xca}], 0x4}, 0x40010100) 9.367138689s ago: executing program 6 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000240)) socket$inet(0x2, 0x3, 0x1) pipe2(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) creat(0x0, 0x0) open(0x0, 0x14927e, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) utimes(&(0x7f0000000000)='.\x00', 0x0) r5 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x0) fallocate(r5, 0x0, 0x0, 0x3ffffd) fcntl$addseals(r5, 0x409, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}) 9.042436639s ago: executing program 1 (id=1704): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) recvmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/46, 0x2e}], 0x2}, 0x40010041) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendfile(r1, r1, 0x0, 0xbba) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "2517c31597a0a9c1", "698d5eab340d47480b2477eacf3bd145", "2cecd7df", "e60876da9b6aee57"}, 0x28) connect$x25(r0, &(0x7f0000000240), 0x12) read$msr(r0, &(0x7f0000000280)=""/156, 0x9c) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x6, 0x1) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000380)) r4 = syz_io_uring_setup(0x7899, &(0x7f0000000500)={0x0, 0x7719, 0x40, 0x1, 0x3a0, 0x0, r0}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000600)=[r2, r1, r0, 0xffffffffffffffff, r1, r2, r3, r3], 0x8) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000640)={0xffff7b45, 0x5, 0xffff}) connect$unix(r3, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendto$unix(r0, &(0x7f0000000700)="5805afec4fa2fee0f547c5a9ca2870f1b049d717995be5f95d63fd0b93e90de2ceb86dff341aef0ae61bdc1d633785cd22ceb718aa8f7339a53ef8618199776b0cfe867e77fb70ac6b780a06bf3eb478f791b6c4282abd4718a9a2e4fd50be2ff4a410ebd311e980807239f2342c4238fd7016990c9a098f0dd1a858d5047f771dc4b97259446e8524e636f8f323c5af906932774d657af220aa56a8aaa768b9e7c8e545bb66f56bbddb077b16bfad4ceeca1f32a8cbd3630767ce4900cc23ba9eac9d8a302588a3faab6144b1d8aeb3f6d6569a13beb46c8be5b1f4", 0xdc, 0x4040, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='f2fs_truncate_partial_nodes\x00', r0}, 0x18) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000940)=@IORING_OP_TIMEOUT={0xb, 0x29, 0x0, 0x0, 0x5, &(0x7f0000000900), 0x1, 0x0, 0x0, {0x0, r7}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000980), 0x200, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) r8 = accept$netrom(r0, &(0x7f00000009c0)={{0x3, @netrom}, [@null, @null, @remote, @null, @netrom, @bcast, @default, @netrom]}, &(0x7f0000000a40)=0x48) ioctl$BTRFS_IOC_SCRUB_CANCEL(r8, 0x941c, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x164, r9, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcf47}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x19}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4aa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x85d}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x98}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x50}, 0x28080) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r10, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x8001) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e80)={'wlan1\x00'}) 8.995066515s ago: executing program 0 (id=1705): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000900)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60ea0c0000108800fe880000000000000000000000000001fe8000000000000000006000000000aa00000000001090"], 0x0) 8.953434658s ago: executing program 5 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001280)=""/4103, &(0x7f0000001040)=0x1007) getsockopt$bt_hci(r3, 0x84, 0x71, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000011c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x4, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000300)={0x70400000, 0x3, &(0x7f0000000180)=[0x1, 0x8001, 0x2], &(0x7f0000001000)=[0xffff, 0xff80], &(0x7f0000000240)=[0x3, 0x6, 0x8, 0xede, 0x6, 0x0], &(0x7f00000002c0)=[0xf000, 0x0, 0xff, 0xa732, 0xff]}) 8.760283954s ago: executing program 1 (id=1707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x20, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0xffffffb0}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.707805599s ago: executing program 0 (id=1708): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.740872745s ago: executing program 1 (id=1709): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000050000000200000002000013020008000d00000000000000000000000200000000002e0000"], 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x17) setuid(0xee01) ioctl$sock_netrom_SIOCADDRT(r0, 0x890c, 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x408000, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x9}}, 0x18) r2 = getpid() move_pages(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000280)=[0x1, 0x1], &(0x7f00000002c0), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x46, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0xffb8, 0x5, 0xdb, 0x1}, {0x3, 0x47, 0x6, 0xfffffffd}, {0xe5b2, 0xb, 0x4, 0xffff4a50}]}) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0x6db6e559) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r0, 0x80a02000) syz_init_net_socket$ax25(0x3, 0x5, 0x1) accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@bcast, @bcast, @default, @netrom, @netrom, @netrom, @bcast, @default]}, &(0x7f0000000140)=0x48) 7.688197256s ago: executing program 6 (id=1710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102392, 0x18ff8) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='afs_make_fs_call1\x00', r2, 0x0, 0x80000007ffffd}, 0x18) (async) r3 = open$dir(0x0, 0x260003, 0x0) mkdirat(r3, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='io.stat\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/24], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000240)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547e514b984cc9c89b9b7d4e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.643086779s ago: executing program 0 (id=1711): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f000000b4c0), 0x0, 0x34) (async) write$rfkill(r0, &(0x7f0000000080)={0x6c, 0x0, 0x3, 0x1}, 0x8) (async) syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x1, 0x4, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x6, @remote}}]}]}]}, 0x58}}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x2000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) 7.443739258s ago: executing program 5 (id=1712): syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0xa0, 0x95}, {0x6, 0x24, 0x1a, 0x7e, 0x30}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xb0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x40, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x7, 0x4}}}}}}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x6, 0x9, &(0x7f0000000100)={{0x3a, @multicast1, 0x0, 0x0, 'rr\x00'}, {@remote}}, 0x44) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff7850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0xc5, 0x7, 0x9d6, 0x8, @local, @remote, 0x7, 0x0, 0xcea}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x7, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1000, 0x25, &(0x7f00000002c0)=""/37, 0x41000, 0x25, '\x00', r5, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r3, 0x9, &(0x7f0000000880)=[r4, r7], &(0x7f00000008c0)=[{0x4, 0x4, 0x8, 0x5}, {0x3, 0x1, 0x8, 0x4}, {0x1, 0x1, 0x1, 0x9}, {0x5, 0x1, 0x10, 0x9}, {0x2, 0x2, 0x2, 0x8}, {0x3, 0x3, 0xb, 0xb}, {0x0, 0x3, 0x4}, {0x0, 0x5, 0x0, 0x9}, {0x5, 0x2, 0x0, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x6}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x9c, &(0x7f0000000180)=""/156, 0x40f00, 0xe803673af408ac9d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xc, 0x5, 0x6}, 0x10, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r0, @ANYRES32=r8], 0x44}}, 0x0) 6.739988804s ago: executing program 6 (id=1713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0xc, 0x66ea0efd6b58e045, 0x8, 0x4, 0x8}, @ldst={0x3, 0x1, 0x0, 0x7, 0x86f733c685e59a26, 0x8, 0x10}, @ldst={0x1, 0x2, 0x6, 0x5, 0xb, 0x20, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0x11, &(0x7f0000000280)=""/17, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000006c0)=[{0x4, 0x2, 0x4, 0xc}, {0x0, 0x1, 0xa, 0x3}, {0x2, 0x3, 0x1, 0x6}, {0x1, 0x3, 0xa, 0xb}, {0x2, 0x3, 0xb, 0x2}, {0x0, 0x4, 0xd, 0x3}], 0x10, 0x7, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r11, 0x0) pread64(r10, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x81088000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0e05403, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x700, 0x10, 0x2, 0x7eed, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}}}}) sendmsg(r9, &(0x7f0000000680)={&(0x7f0000000380)=@ll={0x11, 0x7, r12, 0x1, 0x7, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="f11aaf0e6e46b27eb0b89713daa4", 0xe}, {&(0x7f0000000440)="a5a47506005f591a619b579446427b3c9eaf8553034014b04f72f0af50e4b51dfac102782f6c174bb4fb1385ef59588374b88f4fd97bebbca476ad18b254d2c8b00c8be2d701db8f", 0x48}], 0x2}, 0x2000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="63e0bd00443b"}]}, 0x34}}, 0x0) 3.803525505s ago: executing program 0 (id=1717): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x20000010304, @dev}, 0x4, {0x2, 0x200, @multicast1=0xe000cc02}}) r6 = dup(r1) r7 = syz_clone(0x100, &(0x7f00000002c0)="bab5f7de9d8b00b095b10e4a6916e1414935712c3cda6bdbd391a26f641ab7b4cd7ce05e9172a487841865611fa5a5ba3afc0f606153babe84c8f6e68ba0e5d4cb16d9adfb150d596d2690877bf18e80a85c94176cb4af86d66eba43127e7147d9e8f8335c48437017011bfad02033b18f157ce09b3596169b9ce246f1c6844e11dcc3323059f1", 0x87, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000380)="1acd162906e626bdbe1e45d3335d883202a75afdf04700c351ecb2484add7e31ccaa24d3d823d4f90032836b928d924cb6a81df4cb75a4c71fa423dea6a6f431698a4d964447d1b34077e7d189ab5369080fa1b21471f93cab1a90abef5ad89d4e0d30603e3684dff73fe2abc794d6f7874f90e3376973346731086374ff2186d1c2099192061d67324a7bac7cb1720502e89ac6c7977c7ac798132638e1585030b11fb4f3f8ef9a2e68f364770283ab0b55aa0e85552ab31bd3911ddb407752616b7b0648cf80cd67") ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000480)={'\x00', 0x200, 0x2, 0x40, 0x80, 0x7, r7}) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r9, &(0x7f00000002c0)="d2", 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r9, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r9}, &(0x7f0000000700), &(0x7f0000000740)=r8}, 0x20) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 3.653287868s ago: executing program 1 (id=1718): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xfeffff, 0x0) 3.420419239s ago: executing program 5 (id=1720): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0xec4, 0xa35}, &(0x7f0000000300), &(0x7f0000000380), 0x1a5, 0x3, 0xb, 0x8, 0x43, 0x3}}], 0x58}, 0x0) 3.419993382s ago: executing program 1 (id=1721): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x28000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = signalfd4(r3, &(0x7f0000000280)={[0x1]}, 0x8, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r4, 0x7, 0x1, 0x3ff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r4, 0x7, 0x1, 0x3ff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) eventfd2(0x0, 0x0) (async) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, r5}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000004c0)={0x0, 0xd001, 0x0, r5, 0xc}) 3.094454855s ago: executing program 6 (id=1722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB='.'], 0x118) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r5, 0x40101287, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0x4112, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1}}, 0x3c) r6 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000280)={0x0, 0x2}) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000340)) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000400)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xd2, 0x9, 0x9, 0x0, 0x9, 0x7fffffff, "e5e3540b9ac3902e2eb3fedbe8923c55ed02b87fbeea3c7ade3324657294c8e553af309ef1dfed9690e9524411bd1653a3994462caa35663a668beb18db4e2be8198c431bce7e61c70ac9888ba5b2cc914b65b3587ee049ac2245145ac612d23e779dd7c5f234df09eebf12ee04d01ebeef837b17713422d10e6ac346d96dbb3c3f97a7a4e21b3577051730f367d3e45388d5d39d85e40db526b3ab155e8ae93fd0797ceb5c6b78738ac2e025090caf36fe4b52efc334f32431d3731c38a46df0bc9f3f9577e37c75ead3534d9a1b63ced0c"}}, 0x1ea) 3.018977331s ago: executing program 5 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000000800a0000000000000c00000500000bdcf101000000"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002400)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x4]}}, @subvolid}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0) 2.666519791s ago: executing program 4 (id=1725): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.333656451s ago: executing program 4 (id=1726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0xf00, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0xffffffb0}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.224382527s ago: executing program 1 (id=1727): r0 = socket$inet6(0xa, 0x80002, 0x88) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, &(0x7f0000000680)={0xff, 0x20000000000}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r1, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 2.200450587s ago: executing program 4 (id=1728): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$rose(r0, 0x0, 0x0) 2.063376259s ago: executing program 4 (id=1729): r0 = io_uring_setup(0x5a6a, &(0x7f00000003c0)={0x0, 0x4838, 0x200, 0x0, 0x144}) r1 = io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, r0}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1b, 0x20000048, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x2, r4, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1ff}, 0x8) socket$packet(0x11, 0x3, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) sendmsg$sock(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4ec13209f4c6b61f836", 0xf2}, {&(0x7f0000000180)="63dc795835b4abc3c66a6e43fe8aae85813ba75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b710e1a1bed2b0bf3b639a0330dfd84769348c374bc3df81dcba87c805741808d97453f774927a7eac58c92dcb5bbe6c7f3c8928c6f67fc", 0x7d}, {&(0x7f0000000200)="e6fa9509b3792cd8646ebb9e5cd3c4a3c0298aa2f0e9af3211b9955da6183790f633515fc57370dc7213c5344ed303e14a4df7bdf7c927fdba448e0f08f7279b9dcdeaf9da197bebd94e1cef1fdc75679ea9503c9d7d411ef4ec64f9f8c4cf89c9eb1c8ca62a1ee73ef25529b0a184249f2bef66", 0x74}, {&(0x7f0000000280)="bade6986c4232e27e3f99c07302eade2ff6d6f759679f4facdf6527ccd2990bf067d2035a5a40b89881da26e8e31b8a69542e9c28544292a9f7b98ed76ec55f43051e0f5c054e218f68921671d930e4482680ecdb7b48da951639612eb96e3f5dde849be9be09d7c4344", 0x6a}, {&(0x7f0000000300)="cbc573c9900f51448fab2864e1d1172045", 0x11}, {&(0x7f0000000600)="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", 0x367}], 0x6}, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) fcntl$dupfd(r3, 0x0, r1) bind$pptp(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r7) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1d) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kvm_vcpu_wakeup\x00', r8, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r9 = getpid() getpid() kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, 0xffffffffffffffff, 0x0) 1.928393534s ago: executing program 4 (id=1730): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008120500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.781812433s ago: executing program 4 (id=1731): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) r1 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000, 0x0, 0x0, 0x2}) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000000) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0'}, 0xb) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = dup2(r5, r5) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x541b, 0x1000000000000) 1.767961562s ago: executing program 5 (id=1732): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)=0x2) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c"], 0x130}}, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00\x00\x00j;', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, &(0x7f00000002c0)=r5}, 0x20) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="007f5e1800000000000000", @ANYBLOB="82b37e0e1ffcd8579c51a9eac4ddbd5a373458d05bb56b974b4653067e51d17ce95b5afb0261b1d1126b98ba367cf9bd925b74d0c23edc8ea038416c7d5ab229cd903eac78e49fa6bc9598427ae527f4eaee6c849391de779814f35bd59001d124f23ff539878136b2503635f7386b729f534873e63b81b105f1033c"], 0x0}, 0x0) socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) 0s ago: executing program 6 (id=1733): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0xec4, 0xa35}, &(0x7f0000000300), &(0x7f0000000380), 0x1a5, 0x3, 0xb, 0x8, 0x43, 0x3}}], 0x58}, 0x0) kernel console output (not intermixed with test programs): 52703][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.159061][ T9579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.171674][ T25] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 359.187183][ T25] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 359.195368][ T25] usb 6-1: Product: syz [ 359.199579][ T25] usb 6-1: Manufacturer: syz [ 359.207527][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 359.213050][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 359.219250][ T25] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 359.225231][ T25] cdc_wdm 6-1:1.0: Unknown control protocol [ 359.242568][ T5895] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 359.342584][ T5874] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 359.362587][ T51] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 359.392671][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 359.395587][ T51] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 359.401208][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.405958][ T51] usb 3-1: config 0 has no interface number 0 [ 359.405996][ T51] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.406025][ T51] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.422155][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.453337][ T51] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 359.461988][ T8] usb 6-1: USB disconnect, device number 27 [ 359.463738][ T51] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 359.477831][ T51] usb 3-1: Manufacturer: syz [ 359.477876][ T5895] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 359.496050][ T51] usb 3-1: config 0 descriptor?? [ 359.499634][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.512332][ T5895] usb 5-1: config 0 descriptor?? [ 359.512517][ T5874] usb 1-1: device descriptor read/64, error -71 [ 359.782774][ T5874] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 359.916821][ T51] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0011/input/input17 [ 359.928225][ T5874] usb 1-1: device descriptor read/64, error -71 [ 360.002558][ T51] sony 0003:054C:03D5.0011: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 360.043695][ T5874] usb usb1-port1: attempt power cycle [ 360.193831][ T9578] overlayfs: conflicting lowerdir path [ 360.256098][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1031'. [ 360.267857][ T9587] bridge0: entered promiscuous mode [ 360.275135][ T9587] bridge0: port 3(macvlan4) entered blocking state [ 360.281860][ T9587] bridge0: port 3(macvlan4) entered disabled state [ 360.288778][ T9587] macvlan4: entered allmulticast mode [ 360.307863][ T9587] bridge0: entered allmulticast mode [ 360.315025][ T9587] macvlan4: left allmulticast mode [ 360.320287][ T9587] bridge0: left allmulticast mode [ 360.326696][ T9587] bridge0: left promiscuous mode [ 360.392577][ T5874] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 360.432999][ T5874] usb 1-1: device descriptor read/8, error -71 [ 360.479320][ T25] usb 3-1: USB disconnect, device number 31 [ 360.692364][ T5874] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 360.713338][ T5874] usb 1-1: device descriptor read/8, error -71 [ 360.782357][ T51] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 360.822463][ T5874] usb usb1-port1: unable to enumerate USB device [ 360.852609][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 360.948183][ T51] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 360.957511][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.965759][ T51] usb 6-1: Product: syz [ 360.970547][ T51] usb 6-1: Manufacturer: syz [ 360.975321][ T51] usb 6-1: SerialNumber: syz [ 360.981652][ T51] usb 6-1: config 0 descriptor?? [ 361.007446][ T25] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 361.017618][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.025804][ T25] usb 3-1: Product: syz [ 361.030344][ T25] usb 3-1: Manufacturer: syz [ 361.035086][ T25] usb 3-1: SerialNumber: syz [ 361.041642][ T25] usb 3-1: config 0 descriptor?? [ 361.203089][ T51] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 361.226364][ T51] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 361.242266][ T51] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 361.260420][ T25] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 361.270776][ T51] usb 6-1: USB disconnect, device number 28 [ 361.281324][ T25] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 361.297481][ T25] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 361.319646][ T25] usb 3-1: USB disconnect, device number 32 [ 362.436537][ T5895] usbhid 5-1:0.0: can't add hid device: -71 [ 362.457462][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 362.520853][ T5895] usb 5-1: USB disconnect, device number 33 [ 363.883191][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1043'. [ 363.895642][ T9625] bridge0: entered promiscuous mode [ 363.905196][ T9625] bridge0: port 3(macvlan4) entered blocking state [ 363.905264][ T9625] bridge0: port 3(macvlan4) entered disabled state [ 363.905377][ T9625] macvlan4: entered allmulticast mode [ 363.905394][ T9625] bridge0: entered allmulticast mode [ 363.908568][ T9625] macvlan4: left allmulticast mode [ 363.908589][ T9625] bridge0: left allmulticast mode [ 364.066172][ T9625] bridge0: left promiscuous mode [ 364.224059][ T9633] input: syz0 as /devices/virtual/input/input18 [ 364.381785][ T5895] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 364.542597][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 364.548601][ T5895] usb 1-1: config 0 has an invalid interface number: 61 but max is 0 [ 364.548697][ T5895] usb 1-1: config 0 has no interface number 0 [ 364.569762][ T5895] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 364.569793][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.569814][ T5895] usb 1-1: Product: syz [ 364.569829][ T5895] usb 1-1: Manufacturer: syz [ 364.569844][ T5895] usb 1-1: SerialNumber: syz [ 364.585797][ T5895] usb 1-1: config 0 descriptor?? [ 364.712056][ T5895] viperboard 1-1:0.61: version 0.00 found at bus 001 address 043 [ 364.860227][ T5895] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 364.869297][ T5895] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 364.889730][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.919150][ T9638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.935802][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.979850][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.018991][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.058659][ T9645] pim6reg: entered allmulticast mode [ 365.069624][ T29] audit: type=1400 audit(1730964057.701:547): avc: denied { listen } for pid=9644 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 365.291653][ T5874] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 365.361143][ T5895] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 365.451858][ T5874] usb 5-1: device descriptor read/64, error -71 [ 365.622028][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 365.630983][ T5895] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.639220][ T5895] usb 6-1: config 0 has no interface number 0 [ 365.645702][ T5895] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.666425][ T5895] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 365.717576][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.756355][ T5895] usb 6-1: config 0 descriptor?? [ 365.785879][ T5895] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 365.841511][ T5874] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 366.072019][ T9672] syz.5.1051 (9672): drop_caches: 4 [ 366.079271][ T9650] syz.5.1051 (9650): drop_caches: 4 [ 366.108474][ T5895] usb 6-1: USB disconnect, device number 29 [ 366.116480][ T5895] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 366.121393][ T5874] usb 5-1: device descriptor read/64, error -71 [ 366.739360][ T5874] usb usb5-port1: attempt power cycle [ 366.810273][ T29] audit: type=1400 audit(1730964059.431:548): avc: denied { setcurrent } for pid=9677 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 366.917506][ T9683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1059'. [ 366.930272][ T9683] bridge0: entered promiscuous mode [ 366.937077][ T9683] bridge0: port 4(macvlan4) entered blocking state [ 366.943846][ T9683] bridge0: port 4(macvlan4) entered disabled state [ 366.950587][ T9683] macvlan4: entered allmulticast mode [ 366.956125][ T9683] bridge0: entered allmulticast mode [ 366.962981][ T9683] macvlan4: left allmulticast mode [ 366.968109][ T9683] bridge0: left allmulticast mode [ 366.974405][ T9683] bridge0: left promiscuous mode [ 368.488568][ T29] audit: type=1400 audit(1730964061.082:549): avc: denied { listen } for pid=9687 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 368.507844][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.514421][ T29] audit: type=1400 audit(1730964061.082:550): avc: denied { accept } for pid=9687 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 368.871365][ T9701] netlink: 'syz.5.1064': attribute type 9 has an invalid length. [ 368.879312][ T9701] netlink: 134660 bytes leftover after parsing attributes in process `syz.5.1064'. [ 368.905518][ T6587] usb 1-1: USB disconnect, device number 43 [ 369.017440][ T9708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.090538][ T9708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.456783][ T29] audit: type=1400 audit(1730964062.082:551): avc: denied { listen } for pid=9726 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.791420][ T29] audit: type=1400 audit(1730964062.422:552): avc: denied { read } for pid=9726 comm="syz.0.1070" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 369.816959][ T9733] binder: 9726:9733 ioctl c0306201 0 returned -14 [ 369.859099][ T29] audit: type=1400 audit(1730964062.422:553): avc: denied { open } for pid=9726 comm="syz.0.1070" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 369.881804][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1072'. [ 370.002353][ T9735] bridge0: port 3(macvlan5) entered blocking state [ 370.009461][ T9735] bridge0: port 3(macvlan5) entered disabled state [ 370.016538][ T9735] macvlan5: entered allmulticast mode [ 370.148629][ T9735] macvlan5: left allmulticast mode [ 370.691044][ T29] audit: type=1400 audit(1730964063.302:554): avc: denied { setopt } for pid=9739 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 370.819329][ T9741] input: syz0 as /devices/virtual/input/input20 [ 370.841035][ T9741] input: failed to attach handler leds to device input20, error: -6 [ 373.514990][ T9763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1077'. [ 373.517839][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1081'. [ 375.610705][ T5895] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 375.791914][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.877299][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.899840][ T5895] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 375.909195][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.920016][ T5895] usb 5-1: config 0 descriptor?? [ 376.240383][ T5876] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 376.370410][ T5876] usb 6-1: device descriptor read/64, error -71 [ 376.396463][ T5895] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 376.403977][ T5895] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 376.411458][ T5895] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 376.418749][ T5895] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 376.426209][ T5895] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 376.435145][ T5895] dragonrise 0003:0079:0006.0012: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 376.446742][ T5895] dragonrise 0003:0079:0006.0012: no inputs found [ 376.453228][ T5895] dragonrise 0003:0079:0006.0012: force feedback init failed [ 376.610422][ T5876] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 376.740378][ T5876] usb 6-1: device descriptor read/64, error -71 [ 376.850595][ T5876] usb usb6-port1: attempt power cycle [ 377.190613][ T5876] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 377.213539][ T5876] usb 6-1: device descriptor read/8, error -71 [ 377.450303][ T5876] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 377.470675][ T5876] usb 6-1: device descriptor read/8, error -71 [ 377.580799][ T5876] usb usb6-port1: unable to enumerate USB device [ 377.719708][ T9780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.743561][ T5876] usb 5-1: USB disconnect, device number 37 [ 378.000358][ T5874] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 378.012995][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.019351][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.182985][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.200219][ T5874] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 378.209310][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.240919][ T5874] usb 1-1: config 0 descriptor?? [ 378.249607][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 378.454392][ T5874] pwc: send_video_command error -71 [ 378.459623][ T5874] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 378.479372][ T5874] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 378.495414][ T5874] usb 1-1: USB disconnect, device number 44 [ 378.697363][ T5876] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 379.491237][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 379.497914][ T5876] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 379.506957][ T5876] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 379.524611][ T5876] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 379.546041][ T5876] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 379.574013][ T29] audit: type=1400 audit(1730964072.193:555): avc: denied { watch } for pid=9832 comm="syz.0.1102" path="/219" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 379.611791][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 379.625614][ T29] audit: type=1400 audit(1730964072.193:556): avc: denied { watch_sb watch_reads } for pid=9832 comm="syz.0.1102" path="/219" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 379.661941][ T5876] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 379.677196][ T5876] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 379.685772][ T5876] usb 5-1: Product: syz [ 379.689982][ T5876] usb 5-1: Manufacturer: syz [ 379.695108][ T5876] usb 5-1: SerialNumber: syz [ 379.715348][ T5876] usb 5-1: config 0 descriptor?? [ 379.731664][ T5876] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 379.742147][ T5876] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 380.182883][ T5876] usb 5-1: USB disconnect, device number 38 [ 380.195053][ T5876] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 380.791301][ T5876] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 381.047394][ T9858] random: crng reseeded on system resumption [ 381.274177][ T29] audit: type=1400 audit(1730964073.673:557): avc: denied { write } for pid=9857 comm="syz.0.1109" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 381.297330][ T29] audit: type=1400 audit(1730964073.673:558): avc: denied { open } for pid=9857 comm="syz.0.1109" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 381.957353][ T5876] usb 5-1: device descriptor read/64, error -71 [ 382.383731][ T5876] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 382.401743][ T9878] kvm: emulating exchange as write [ 382.552822][ T5876] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 382.567022][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.582202][ T5876] usb 5-1: Product: syz [ 382.590154][ T5876] usb 5-1: Manufacturer: syz [ 382.594758][ T5876] usb 5-1: SerialNumber: syz [ 384.617721][ T5876] usb 5-1: config 0 descriptor?? [ 384.711960][ T9903] bridge0: port 4(vlan2) entered blocking state [ 384.718295][ T9903] bridge0: port 4(vlan2) entered disabled state [ 384.725476][ T9903] vlan2: entered allmulticast mode [ 384.771626][ T9903] vlan2: left allmulticast mode [ 384.893688][ T5876] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 384.900474][ T5876] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 385.078453][ T5876] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 385.224012][ T5876] usb 5-1: USB disconnect, device number 40 [ 385.296890][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1118'. [ 385.339863][ T51] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 385.509856][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.520342][ T9910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.520822][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.528815][ T9910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.544123][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.551339][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 385.561557][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.562286][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 385.583401][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 385.587918][ T51] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 385.599893][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.659966][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.680813][ T51] usb 6-1: Product: syz [ 385.685008][ T51] usb 6-1: Manufacturer: syz [ 385.699491][ T51] usb 6-1: SerialNumber: syz [ 385.706962][ T51] usb 6-1: config 0 descriptor?? [ 385.722527][ T51] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 385.735787][ T51] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 386.303607][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 386.981686][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.988934][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.997690][ T9911] bridge_slave_0: entered allmulticast mode [ 387.003791][ T51] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 387.018947][ T9911] bridge_slave_0: entered promiscuous mode [ 387.172857][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.189877][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.197146][ T9911] bridge_slave_1: entered allmulticast mode [ 387.204140][ T9911] bridge_slave_1: entered promiscuous mode [ 387.214536][ T29] audit: type=1400 audit(1730964079.843:559): avc: denied { create } for pid=9906 comm="syz.5.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 387.704796][ T5828] Bluetooth: hci5: command tx timeout [ 387.863342][ T9945] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1121'. [ 387.914053][ T29] audit: type=1400 audit(1730964079.943:560): avc: denied { connect } for pid=9939 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 388.284018][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.290614][ T9945] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1121'. [ 388.304868][ T29] audit: type=1400 audit(1730964079.953:561): avc: denied { write } for pid=9939 comm="syz.1.1127" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 388.328004][ T29] audit: type=1400 audit(1730964080.213:562): avc: denied { write } for pid=9906 comm="syz.5.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 388.364296][ T9950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.376845][ T9950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.388546][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.484279][ T9911] team0: Port device team_slave_0 added [ 388.546654][ T9911] team0: Port device team_slave_1 added [ 388.644010][ T51] em28xx 6-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 388.704649][ T51] em28xx 6-1:0.0: board has no eeprom [ 388.782613][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.789706][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.837662][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.893028][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.915284][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.971738][ T51] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 389.006066][ T51] em28xx 6-1:0.0: dvb set to bulk mode. [ 389.044551][ T5877] em28xx 6-1:0.0: Binding DVB extension [ 389.081080][ T51] usb 6-1: USB disconnect, device number 34 [ 389.109813][ T51] em28xx 6-1:0.0: Disconnecting em28xx [ 389.129765][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.194790][ T5877] em28xx 6-1:0.0: Registering input extension [ 389.220121][ T9911] hsr_slave_0: entered promiscuous mode [ 389.290208][ T9911] hsr_slave_1: entered promiscuous mode [ 389.320121][ T9911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.329013][ T9911] Cannot create hsr debugfs directory [ 389.374689][ T51] em28xx 6-1:0.0: Closing input extension [ 389.397663][ T51] em28xx 6-1:0.0: Freeing device [ 389.486436][ T9969] netlink: 'syz.0.1132': attribute type 7 has an invalid length. [ 389.542105][ T9969] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1132'. [ 389.580268][ T9970] netlink: 'syz.0.1132': attribute type 3 has an invalid length. [ 389.769982][ T5828] Bluetooth: hci5: command tx timeout [ 389.791391][ T9970] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1132'. [ 390.571882][ T9911] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 390.602749][ T9911] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.643185][ T9911] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 391.020098][ T9911] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 391.272050][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.470594][ T9911] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.555201][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.562999][ T6474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.632169][ T964] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 391.829602][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.836753][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.854843][ T5828] Bluetooth: hci5: command tx timeout [ 391.921026][ T964] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 391.932055][ T964] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 391.935795][ T9911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.943683][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 391.943716][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 391.943741][ T964] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.945472][ T964] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 392.004473][ T964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.015560][ T964] usb 5-1: Product: syz [ 392.029635][ T964] usb 5-1: Manufacturer: syz [ 392.034354][ T964] usb 5-1: SerialNumber: syz [ 392.045677][ T964] usb 5-1: config 0 descriptor?? [ 392.170032][ T964] rc_core: IR keymap rc-imon-rsc not found [ 392.175888][ T964] Registered IR keymap rc-empty [ 392.209061][T10002] random: crng reseeded on system resumption [ 392.217214][ T964] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 392.302901][ T964] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 393.283274][ T964] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90 [ 393.352469][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.939651][ T5828] Bluetooth: hci5: command tx timeout [ 394.805231][ T29] audit: type=1326 audit(1730964087.383:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ffa37e719 code=0x7ffc0000 [ 394.829040][ T29] audit: type=1326 audit(1730964087.383:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6ffa37e719 code=0x7ffc0000 [ 394.852557][ T29] audit: type=1326 audit(1730964087.383:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ffa37e719 code=0x7ffc0000 [ 394.876571][ T29] audit: type=1326 audit(1730964087.383:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ffa37e719 code=0x7ffc0000 [ 394.902964][ T5874] usb 5-1: USB disconnect, device number 41 [ 394.929553][ T29] audit: type=1326 audit(1730964087.383:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ffa37e719 code=0x7ffc0000 [ 394.953101][ T29] audit: type=1326 audit(1730964087.383:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6ffa37e719 code=0x7ffc0000 [ 394.977165][ T29] audit: type=1326 audit(1730964087.383:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ffa37e719 code=0x7ffc0000 [ 395.000758][ T29] audit: type=1326 audit(1730964087.383:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ffa37e719 code=0x7ffc0000 [ 395.178845][ T9911] veth0_vlan: entered promiscuous mode [ 395.202435][ T9911] veth1_vlan: entered promiscuous mode [ 395.641431][ T9911] veth0_macvtap: entered promiscuous mode [ 395.648906][ T9911] veth1_macvtap: entered promiscuous mode [ 395.679026][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.707265][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.718078][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.734680][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.757467][T10038] CIFS: VFS: Malformed UNC in devname [ 395.765084][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.784524][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.797083][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.814705][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.825202][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.846199][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.876643][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.902453][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.918234][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.929671][ T964] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 395.955204][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.969970][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.980140][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.995291][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.005799][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.016526][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.027375][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.057173][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.068802][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.079648][ T9911] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.089825][ T9911] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.098550][ T9911] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.107365][ T9911] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.116521][ T964] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 396.129694][ T964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.129719][ T964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 396.129759][ T964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.129789][ T964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.158655][ T964] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 396.158688][ T964] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 396.158710][ T964] usb 1-1: Product: syz [ 396.158726][ T964] usb 1-1: Manufacturer: syz [ 396.163230][ T964] cdc_wdm 1-1:1.0: skipping garbage [ 396.163252][ T964] cdc_wdm 1-1:1.0: skipping garbage [ 396.166052][ T964] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 396.166074][ T964] cdc_wdm 1-1:1.0: Unknown control protocol [ 396.274426][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.274447][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.312847][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.312868][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.414062][ T5874] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 398.783088][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 398.810750][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.821899][ T5874] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 398.845641][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.078929][ T5874] usb 7-1: config 0 descriptor?? [ 399.498889][ T964] usb 1-1: USB disconnect, device number 45 [ 399.789275][ T5874] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 400.138157][ T5874] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 400.908233][T10080] rdma_op ffff88806250b9f0 conn xmit_rdma 0000000000000000 [ 401.369909][ T5874] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 401.403814][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.577478][ T5874] usb 1-1: Product: syz [ 401.650608][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.679878][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.699693][ T5874] usb 1-1: Manufacturer: syz [ 401.704348][ T5874] usb 1-1: SerialNumber: syz [ 401.714684][ T5874] usb 1-1: config 0 descriptor?? [ 401.731962][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.741412][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.750599][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.759108][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.995617][ T5874] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 402.002243][ T5874] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 402.009875][ T5874] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 402.021660][ T5874] usb 1-1: USB disconnect, device number 46 [ 403.997390][ T5895] usb 7-1: USB disconnect, device number 2 [ 404.264727][ T5895] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 404.598373][T10099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.610155][T10099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.465133][ T6587] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 405.669587][ T6587] usb 5-1: Using ep0 maxpacket: 8 [ 405.675409][ T6587] usb 5-1: no configurations [ 405.686293][ T6587] usb 5-1: can't read configurations, error -22 [ 407.412374][ T6587] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 407.420656][ T5874] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 407.625100][ T5874] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 407.635366][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.652060][ T5874] usb 7-1: Product: syz [ 407.661744][ T5874] usb 7-1: Manufacturer: syz [ 407.779189][ T5874] usb 7-1: SerialNumber: syz [ 407.791321][ T5874] usb 7-1: config 0 descriptor?? [ 407.932394][ T51] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 408.008118][ T5874] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 408.015257][ T5874] f81604 7-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 408.031701][ T5874] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 408.079611][ T5874] usb 7-1: USB disconnect, device number 3 [ 408.116039][ T6046] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.264166][ T6046] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.434940][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.446924][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.455340][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.467101][ T6046] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.478265][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.487263][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 408.521736][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.579471][ T51] usb 1-1: device descriptor read/64, error -71 [ 408.630589][ T6046] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.694145][T10172] net veth1_virt_wifi : renamed from virt_wifi0 [ 408.806070][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1185'. [ 408.839721][ T51] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 409.106368][ T51] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 409.125687][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.208482][ T51] usb 1-1: config 0 descriptor?? [ 409.337944][ T6046] bridge_slave_1: left allmulticast mode [ 409.343999][ T6046] bridge_slave_1: left promiscuous mode [ 409.349837][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.361229][ T6046] bridge_slave_0: left allmulticast mode [ 409.366932][ T6046] bridge_slave_0: left promiscuous mode [ 409.390255][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.668446][ T51] ath6kl: Failed to submit usb control message: -71 [ 409.675305][ T51] ath6kl: unable to send the bmi data to the device: -71 [ 409.688310][ T51] ath6kl: Unable to send get target info: -71 [ 409.698521][ T51] ath6kl: Failed to init ath6kl core: -71 [ 409.709585][ T51] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 409.730914][T10180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.752596][T10180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.760750][ T51] usb 1-1: USB disconnect, device number 48 [ 410.638609][T10187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'. [ 410.656415][T10187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'. [ 410.669464][ T5840] Bluetooth: hci3: command tx timeout [ 410.688244][T10187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1189'. [ 410.773045][T10187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'. [ 410.809622][T10187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1189'. [ 410.864214][T10187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1189'. [ 410.992066][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.039211][ T6046] bond_slave_0: left promiscuous mode [ 411.056317][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.094731][ T6046] bond_slave_1: left promiscuous mode [ 411.141511][ T6046] bond0 (unregistering): (slave team0): Releasing backup interface [ 411.157974][ T6046] team0: left promiscuous mode [ 411.163059][ T6046] team_slave_0: left promiscuous mode [ 411.170169][ T6046] team_slave_1: left promiscuous mode [ 411.496942][ T6046] bond0 (unregistering): Released all slaves [ 412.444309][ T29] audit: type=1400 audit(1730964361.072:571): avc: denied { append } for pid=10199 comm="syz.0.1193" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 412.729573][ T5840] Bluetooth: hci3: command tx timeout [ 413.013300][T10164] chnl_net:caif_netlink_parms(): no params data found [ 413.059005][ T6046] hsr_slave_0: left promiscuous mode [ 413.084894][ T6046] hsr_slave_1: left promiscuous mode [ 413.094576][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.105393][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.123183][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.134031][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.167873][ T6046] veth1_macvtap: left promiscuous mode [ 413.176861][ T6046] veth0_macvtap: left promiscuous mode [ 413.184835][ T6046] veth1_vlan: left promiscuous mode [ 413.195448][ T6046] veth0_vlan: left promiscuous mode [ 413.313808][ T6046] infiniband syz1: set down [ 413.409823][T10220] rdma_op ffff88801cb5e9f0 conn xmit_rdma 0000000000000000 [ 414.388698][T10229] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 415.002228][ T29] audit: type=1400 audit(1730964363.632:572): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 415.004415][ T5840] Bluetooth: hci3: command tx timeout [ 416.409514][ T8] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 416.814977][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 416.913167][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 416.930713][ T3507] smc: removing ib device syz1 [ 417.050986][ T5840] Bluetooth: hci3: command tx timeout [ 417.884220][ T29] audit: type=1400 audit(1730964366.512:573): avc: denied { mounton } for pid=10273 comm="syz.6.1207" path="/9/file0" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.930410][ T29] audit: type=1400 audit(1730964366.562:574): avc: denied { unmount } for pid=9911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 418.540257][T10164] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.565315][T10164] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.610906][T10164] bridge_slave_0: entered allmulticast mode [ 418.648456][T10164] bridge_slave_0: entered promiscuous mode [ 418.690700][T10164] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.707765][T10164] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.715986][T10164] bridge_slave_1: entered allmulticast mode [ 418.750254][T10164] bridge_slave_1: entered promiscuous mode [ 418.894738][T10164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.941018][T10164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.112308][T10164] team0: Port device team_slave_0 added [ 419.151342][T10164] team0: Port device team_slave_1 added [ 419.292611][T10164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.305826][T10164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.339631][T10164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.364799][T10164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.388131][T10164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.439631][T10164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.469584][T10298] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1211'. [ 420.725028][T10164] hsr_slave_0: entered promiscuous mode [ 420.767014][T10164] hsr_slave_1: entered promiscuous mode [ 420.859102][T10164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.899483][T10164] Cannot create hsr debugfs directory [ 421.509178][T10309] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 422.543722][T10164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.552339][T10164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.565411][T10164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 422.593524][T10164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.056927][T10164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.069989][T10164] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.101343][T10164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.120395][T10164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.161607][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.168747][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.190317][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.197516][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.434428][T10164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.475818][ T29] audit: type=1400 audit(1730964372.102:575): avc: denied { mounton } for pid=10345 comm="syz.1.1227" path=2F3235342FE91F7189591E9233614B dev="tmpfs" ino=1366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 423.711199][ T5877] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 423.880364][ T5877] usb 7-1: Using ep0 maxpacket: 8 [ 423.932626][ T5877] usb 7-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 423.991303][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.007385][ T5877] usb 7-1: Product: syz [ 424.012177][ T5877] usb 7-1: Manufacturer: syz [ 424.016810][ T5877] usb 7-1: SerialNumber: syz [ 424.023042][ T5877] usb 7-1: config 0 descriptor?? [ 424.039717][ T5877] hub 7-1:0.0: bad descriptor, ignoring hub [ 424.055765][ T5877] hub 7-1:0.0: probe with driver hub failed with error -5 [ 424.080798][ T5877] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 424.315347][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 424.328692][ T5877] usb 7-1: USB disconnect, device number 4 [ 424.352929][T10164] veth0_vlan: entered promiscuous mode [ 424.367037][T10164] veth1_vlan: entered promiscuous mode [ 424.389933][T10164] veth0_macvtap: entered promiscuous mode [ 424.404594][T10164] veth1_macvtap: entered promiscuous mode [ 424.425255][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.435839][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.438598][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.445865][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.445885][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.445894][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.445909][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.445920][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.445934][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.445957][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.445971][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.447243][T10164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.502546][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.508962][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.562821][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.573077][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.583592][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.593482][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.604067][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.613963][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.624462][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.634385][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.644907][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.656109][T10164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.691789][T10164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.701454][T10164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.710712][T10164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.734506][T10164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.908459][ T6433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.926985][ T6433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.006880][ T6433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.024386][ T6433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.055244][ T29] audit: type=1400 audit(1730964374.642:576): avc: denied { getopt } for pid=10388 comm="syz.6.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 428.232025][T10416] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 428.677868][T10424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1242'. [ 428.746562][T10424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1242'. [ 428.971868][T10432] netlink: 'syz.1.1245': attribute type 3 has an invalid length. [ 428.980197][T10432] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1245'. [ 429.154700][ T29] audit: type=1400 audit(1730964377.762:577): avc: denied { execute } for pid=10417 comm="syz.4.1242" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 429.489733][T10361] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 429.497721][ C1] sd 0:0:1:0: [sda] tag#2712 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 429.497829][ C1] sd 0:0:1:0: [sda] tag#2712 CDB: Read(6) 08 00 00 00 85 f0 [ 429.554045][ T29] audit: type=1400 audit(1730964378.182:578): avc: denied { listen } for pid=10425 comm="syz.5.1247" lport=54213 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 429.712931][ T29] audit: type=1400 audit(1730964378.342:579): avc: denied { accept } for pid=10425 comm="syz.5.1247" lport=54213 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 429.780019][T10361] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 429.789830][T10361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.797848][T10361] usb 1-1: Product: syz [ 429.803046][T10361] usb 1-1: Manufacturer: syz [ 429.807730][T10361] usb 1-1: SerialNumber: syz [ 430.019655][T10361] usb 1-1: config 0 descriptor?? [ 430.056965][T10434] sctp: failed to load transform for md5: -2 [ 430.174823][ T29] audit: type=1400 audit(1730964378.802:580): avc: denied { bind } for pid=10462 comm="syz.1.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 430.373879][ T29] audit: type=1400 audit(1730964379.002:581): avc: denied { write } for pid=10459 comm="syz.4.1255" path="socket:[29876]" dev="sockfs" ino=29876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 430.647127][T10361] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 430.660325][T10464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.672499][T10361] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 430.681081][T10464] bond0: (slave rose0): Enslaving as an active interface with an up link [ 430.686546][T10361] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 430.867268][T10361] usb 1-1: USB disconnect, device number 49 [ 431.265243][ T29] audit: type=1400 audit(1730964379.292:582): avc: denied { search } for pid=10467 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.313973][T10472] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 431.320617][T10472] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 431.350065][ T29] audit: type=1400 audit(1730964379.312:583): avc: denied { map } for pid=10461 comm="syz.6.1254" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 431.417361][ T29] audit: type=1400 audit(1730964379.312:584): avc: denied { execute } for pid=10461 comm="syz.6.1254" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 431.446142][T10464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.455008][ T29] audit: type=1400 audit(1730964379.352:585): avc: denied { read } for pid=10478 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.533423][T10464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.546791][T10472] vhci_hcd vhci_hcd.0: Device attached [ 431.553115][ T29] audit: type=1400 audit(1730964379.352:586): avc: denied { open } for pid=10478 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.609234][T10479] vhci_hcd: connection closed [ 431.619438][ T53] vhci_hcd: stop threads [ 432.002236][ T51] usb 36-1: SetAddress Request (2) to port 0 [ 432.092666][ T53] vhci_hcd: release socket [ 432.123572][ T51] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 432.153712][ T53] vhci_hcd: disconnect device [ 432.249535][ T51] usb 36-1: enqueue for inactive port 0 [ 433.281043][T10509] usb 2-1: USB disconnect, device number 21 [ 433.993769][ T51] usb usb36-port1: attempt power cycle [ 434.614403][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 434.614419][ T29] audit: type=1400 audit(1730964383.202:596): avc: denied { remove_name } for pid=10526 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=4077 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.614456][ T29] audit: type=1400 audit(1730964383.202:597): avc: denied { unlink } for pid=10526 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=4077 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 434.617921][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.619217][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.893397][ T51] usb usb36-port1: unable to enumerate USB device [ 434.937048][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.936250][T10544] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 436.881230][T10566] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 436.954554][T10563] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1272'. [ 437.056930][ T29] audit: type=1400 audit(1730964385.582:598): avc: denied { getopt } for pid=10554 comm="syz.6.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 437.850938][ T29] audit: type=1400 audit(1730964386.482:599): avc: denied { bind } for pid=10580 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.870229][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.994711][T10597] Option '٤< [ 437.994711][T10597] d' to dns_resolver key: bad/missing value [ 438.148198][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 438.350486][T10612] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1284'. [ 438.361926][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1283'. [ 439.453020][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.459505][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.699774][ T5875] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 439.879589][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 439.901572][ T5875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 439.971661][ T5875] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 439.989398][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.004281][ T5875] usb 5-1: Product: syz [ 440.024676][ T5875] usb 5-1: Manufacturer: syz [ 440.278497][ T5895] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 440.383521][ T5875] usb 5-1: SerialNumber: syz [ 440.402540][ T5875] usb 5-1: config 0 descriptor?? [ 440.442284][ T5875] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 440.454996][ T5875] usb 5-1: Detected FT232R [ 440.531577][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.562672][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.577733][ T5895] usb 7-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 440.656775][ T5875] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 440.776702][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.786931][ T5895] usb 7-1: config 0 descriptor?? [ 441.123465][ T5875] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 441.723773][T10656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.732802][T10656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.745227][T10656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.754072][T10656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.791699][ T5895] sony 0003:1345:3008.0013: unknown main item tag 0x0 [ 441.798654][ T5895] sony 0003:1345:3008.0013: unknown main item tag 0x0 [ 441.806116][ T5895] sony 0003:1345:3008.0013: unknown main item tag 0x0 [ 441.806993][ T5875] usb 5-1: USB disconnect, device number 45 [ 441.813675][ T5895] sony 0003:1345:3008.0013: unknown main item tag 0x0 [ 441.813706][ T5895] sony 0003:1345:3008.0013: unknown main item tag 0x0 [ 441.847515][ T29] audit: type=1400 audit(1730964390.472:600): avc: denied { sys_chroot } for pid=10657 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 441.869403][ T29] audit: type=1400 audit(1730964390.472:601): avc: denied { setgid } for pid=10657 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 441.893112][ T29] audit: type=1400 audit(1730964390.472:602): avc: denied { setrlimit } for pid=10657 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 441.914364][ T5895] sony 0003:1345:3008.0013: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.6-1/input0 [ 441.930149][ T5895] sony 0003:1345:3008.0013: failed to claim input [ 441.942419][ T5895] usb 7-1: USB disconnect, device number 5 [ 441.976393][ T5875] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 441.996118][ T5875] ftdi_sio 5-1:0.0: device disconnected [ 442.048374][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x7 [ 442.085797][ T51] hid-generic 0000:0000:0000.0014: ignoring exceeding usage max [ 442.094611][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.102188][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.109693][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.117100][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.124655][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.132412][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.140397][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.142054][T10675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1300'. [ 442.147851][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.164565][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.172637][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.180681][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.188378][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.197861][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.205329][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.212787][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.220228][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.227631][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.235282][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.239298][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'. [ 442.251657][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.251686][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.251708][ T51] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.275001][ T51] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 443.225373][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.280064][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.325449][ T29] audit: type=1400 audit(1730964391.952:603): avc: denied { ioctl } for pid=10697 comm="syz.1.1307" path="socket:[30962]" dev="sockfs" ino=30962 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 443.609553][ T29] audit: type=1400 audit(1730964392.202:604): avc: denied { module_request } for pid=10708 comm="syz.5.1309" kmod="net-pf-10-proto-2-type-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 443.744329][T10719] FAULT_INJECTION: forcing a failure. [ 443.744329][T10719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.934306][T10719] CPU: 0 UID: 0 PID: 10719 Comm: syz.0.1311 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 443.945117][T10719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 443.955176][T10719] Call Trace: [ 443.958456][T10719] [ 443.961391][T10719] dump_stack_lvl+0x16c/0x1f0 [ 443.966187][T10719] should_fail_ex+0x497/0x5b0 [ 443.970882][T10719] strncpy_from_user+0x3b/0x2c0 [ 443.975743][T10719] getname_flags.part.0+0x8f/0x550 [ 443.980874][T10719] getname_flags+0x93/0xf0 [ 443.985302][T10719] user_path_at+0x24/0x60 [ 443.989638][T10719] __x64_sys_mount+0x1fc/0x320 [ 443.994414][T10719] ? __pfx___x64_sys_mount+0x10/0x10 [ 443.999738][T10719] do_syscall_64+0xcd/0x250 [ 444.004251][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.010243][T10719] RIP: 0033:0x7f6ffa37e719 [ 444.014671][T10719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.034297][T10719] RSP: 002b:00007f6ffb150038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 444.042724][T10719] RAX: ffffffffffffffda RBX: 00007f6ffa536058 RCX: 00007f6ffa37e719 [ 444.050704][T10719] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 444.058686][T10719] RBP: 00007f6ffb150090 R08: 0000000000000000 R09: 0000000000000000 [ 444.066672][T10719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.075093][T10719] R13: 0000000000000000 R14: 00007f6ffa536058 R15: 00007ffedaca5d88 [ 444.083173][T10719] [ 444.285397][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1312'. [ 444.297172][T10721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=10721 comm=syz.4.1313 [ 444.321207][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'. [ 444.367706][T10721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10721 comm=syz.4.1313 [ 445.481553][T10734] tipc: Started in network mode [ 445.486533][T10734] tipc: Node identity , cluster identity 4711 [ 446.349381][ T29] audit: type=1400 audit(1730964394.392:605): avc: denied { setopt } for pid=10733 comm="syz.4.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 447.038493][ T26] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 447.189629][T10741] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.225098][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.251870][T10741] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.264297][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.282985][T10741] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.294658][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.321150][T10741] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.340038][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.348034][T10741] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.360555][T10759] atomic_op ffff88807f65d198 conn xmit_atomic 0000000000000000 [ 447.397682][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.418718][T10741] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.439465][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.453973][T10741] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.579452][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.587948][T10741] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.597671][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.616129][T10741] ldm_validate_partition_table(): Disk read failed. [ 447.623709][T10741] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.633395][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.649771][T10741] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.661917][T10741] Dev loop7: unable to read RDB block 0 [ 447.711379][ T29] audit: type=1400 audit(1730964396.322:606): avc: denied { create } for pid=10762 comm="syz.0.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 447.736217][T10741] loop7: unable to read partition table [ 447.794191][T10741] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 447.816940][ T29] audit: type=1400 audit(1730964396.322:607): avc: denied { write } for pid=10762 comm="syz.0.1324" path="socket:[31063]" dev="sockfs" ino=31063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 448.071336][T10752] atomic_op ffff8880680ff998 conn xmit_atomic 0000000000000000 [ 450.910260][ T51] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 451.319509][ T51] usb 7-1: Using ep0 maxpacket: 32 [ 451.503891][ T51] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 451.835027][ T51] usb 7-1: config 0 has no interface number 0 [ 451.848269][ T29] audit: type=1326 audit(1730964400.472:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 451.860719][ T51] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 452.016231][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.037106][ T29] audit: type=1326 audit(1730964400.472:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.094741][ T51] usb 7-1: Product: syz [ 452.098985][ T51] usb 7-1: Manufacturer: syz [ 452.157072][ T51] usb 7-1: SerialNumber: syz [ 452.572120][T10820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10820 comm=syz.4.1338 [ 452.586198][ T51] usb 7-1: config 0 descriptor?? [ 452.599675][ T29] audit: type=1326 audit(1730964400.472:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.638656][ T29] audit: type=1326 audit(1730964400.472:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.639231][ T51] smsc95xx v2.0.0 [ 452.662653][ T29] audit: type=1326 audit(1730964400.472:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.747071][ T51] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 452.794233][ T51] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 452.802716][ T29] audit: type=1326 audit(1730964400.472:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.834805][ T29] audit: type=1326 audit(1730964400.472:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.858654][ T29] audit: type=1326 audit(1730964400.472:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.882119][ T29] audit: type=1326 audit(1730964400.472:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.906675][ T29] audit: type=1326 audit(1730964400.472:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.930850][ T29] audit: type=1326 audit(1730964400.472:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.954955][ T29] audit: type=1326 audit(1730964400.472:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 452.978543][ T29] audit: type=1326 audit(1730964400.472:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 453.002795][ T29] audit: type=1326 audit(1730964400.512:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 453.029684][ T29] audit: type=1326 audit(1730964400.512:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10810 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967777e719 code=0x7ffc0000 [ 453.745219][ T8] usb 7-1: USB disconnect, device number 6 [ 453.813567][T10840] tc_dump_action: action bad kind [ 454.162234][T10856] CIFS: VFS: Malformed UNC in devname [ 454.329435][T10819] Bluetooth: hci3: command 0x0405 tx timeout [ 454.583566][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1347'. [ 456.105420][T10887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1353'. [ 458.220669][ T8] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 459.705236][ T8] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 459.722247][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.781050][ T8] usb 1-1: config 0 descriptor?? [ 459.798254][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 459.798271][ T29] audit: type=1400 audit(1730964408.202:641): avc: denied { write } for pid=10921 comm="syz.6.1365" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 459.837946][ T8] gspca_main: tv8532-2.14.0 probing 0545:808b [ 460.013235][T10935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1369'. [ 460.031273][ T8] usb 1-1: USB disconnect, device number 50 [ 461.183830][T10954] rdma_op ffff88807dd709f0 conn xmit_rdma 0000000000000000 [ 462.210582][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1375'. [ 462.354598][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 462.410680][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1380'. [ 462.427045][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1380'. [ 463.098509][T10995] 9pnet_fd: Insufficient options for proto=fd [ 463.208293][T10996] rdma_op ffff8880318ba9f0 conn xmit_rdma 0000000000000000 [ 464.290027][ T8] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 464.472429][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 464.472463][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.474156][ T8] usb 1-1: config 0 descriptor?? [ 465.626264][ T8] ath6kl: Failed to submit usb control message: -110 [ 465.633095][ T8] ath6kl: unable to send the bmi data to the device: -110 [ 465.640467][ T8] ath6kl: Unable to send get target info: -110 [ 465.779450][ T29] audit: type=1400 audit(1730964414.302:642): avc: denied { map } for pid=10997 comm="syz.0.1387" path="socket:[32082]" dev="sockfs" ino=32082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 465.823836][ T5875] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 465.860084][ T8] ath6kl: Failed to init ath6kl core: -110 [ 465.866515][ T8] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 465.951878][ T29] audit: type=1400 audit(1730964414.302:643): avc: denied { read } for pid=10997 comm="syz.0.1387" path="socket:[32082]" dev="sockfs" ino=32082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 466.346110][ T5895] usb 1-1: USB disconnect, device number 51 [ 466.633658][ T5875] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 466.643642][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 466.652187][ T5875] usb 7-1: Product: syz [ 466.656634][ T5875] usb 7-1: SerialNumber: syz [ 466.700161][ T5875] usb 7-1: config 0 descriptor?? [ 466.943943][ T5875] ldusb 7-1:0.0: Interrupt in endpoint not found [ 466.952785][ T5875] usb 7-1: USB disconnect, device number 7 [ 467.208591][ T51] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 467.733259][ T51] usb 5-1: device descriptor read/64, error -71 [ 468.009686][ T51] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 468.159767][ T51] usb 5-1: device descriptor read/64, error -71 [ 468.202595][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.240240][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.256073][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.267070][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.348073][ T51] usb usb5-port1: attempt power cycle [ 468.356524][T11056] netlink: 'syz.6.1406': attribute type 4 has an invalid length. [ 468.377335][T11056] veth1_macvtap: left promiscuous mode [ 468.392255][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.402628][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.949554][ T51] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 469.027509][ T25] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 469.144466][ T51] usb 5-1: device descriptor read/8, error -71 [ 469.555635][T11074] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 469.574406][ T25] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 469.583071][ T25] usb 7-1: config 5 has no interface number 0 [ 469.609479][ T51] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 469.623647][ T25] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 469.678491][ T25] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 72, setting to 64 [ 469.793934][ T25] usb 7-1: config 5 interface 123 has no altsetting 0 [ 469.835958][ T51] usb 5-1: device descriptor read/8, error -71 [ 469.911986][ T25] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 470.057235][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.072523][ T51] usb usb5-port1: unable to enumerate USB device [ 470.201100][ T25] usb 7-1: Product: syz [ 470.205308][ T25] usb 7-1: Manufacturer: syz [ 470.229621][ T25] usb 7-1: SerialNumber: syz [ 470.249396][ T29] audit: type=1400 audit(1730964418.842:644): avc: denied { call } for pid=11076 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 470.281699][T11055] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 470.717875][T11091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1417'. [ 470.753785][T11091] bridge0: port 3(macvlan5) entered blocking state [ 470.769560][ T25] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 470.791912][T11091] bridge0: port 3(macvlan5) entered disabled state [ 470.799061][ T25] usb 7-1: USB disconnect, device number 8 [ 470.811165][T11091] macvlan5: entered allmulticast mode [ 470.830570][T11091] macvlan5: left allmulticast mode [ 471.259601][ T5895] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 471.564752][ T5895] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 471.576177][ T29] audit: type=1400 audit(1730964420.042:645): avc: denied { read } for pid=11097 comm="syz.6.1419" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 471.597156][ T29] audit: type=1400 audit(1730964420.102:646): avc: denied { setopt } for pid=11097 comm="syz.6.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 471.602101][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.655635][ T5895] usb 6-1: Product: syz [ 471.665442][ T5895] usb 6-1: Manufacturer: syz [ 471.847037][ T5895] usb 6-1: SerialNumber: syz [ 471.857164][ T5895] usb 6-1: config 0 descriptor?? [ 472.919105][ T5895] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 472.925702][ T5895] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 472.933511][ T5895] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 472.946023][ T5895] usb 6-1: USB disconnect, device number 35 [ 473.119436][T11115] @: renamed from vlan0 (while UP) [ 473.167482][ T29] audit: type=1400 audit(1730964421.782:647): avc: denied { map } for pid=11114 comm="syz.6.1424" path="/proc/173/net/vlan/vlan0" dev="proc" ino=4026534160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 474.706972][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 475.190197][T11147] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 475.197651][T11147] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 475.205076][T11147] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 475.218676][T11147] Error parsing options; rc = [-22] [ 475.546387][ T51] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 475.608529][T11152] FAULT_INJECTION: forcing a failure. [ 475.608529][T11152] name failslab, interval 1, probability 0, space 0, times 0 [ 475.643076][T11152] CPU: 0 UID: 0 PID: 11152 Comm: syz.6.1433 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 475.653880][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 475.663943][T11152] Call Trace: [ 475.667226][T11152] [ 475.670157][T11152] dump_stack_lvl+0x16c/0x1f0 [ 475.674866][T11152] should_fail_ex+0x497/0x5b0 [ 475.679554][T11152] should_failslab+0xc2/0x120 [ 475.684247][T11152] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 475.689637][T11152] ? skb_clone+0x190/0x3f0 [ 475.694074][T11152] skb_clone+0x190/0x3f0 [ 475.698339][T11152] netlink_deliver_tap+0xab3/0xd90 [ 475.703484][T11152] netlink_unicast+0x5e1/0x7f0 [ 475.708270][T11152] ? __pfx_netlink_unicast+0x10/0x10 [ 475.713575][T11152] netlink_sendmsg+0x8b8/0xd70 [ 475.718350][T11152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.723664][T11152] ____sys_sendmsg+0xaaf/0xc90 [ 475.728451][T11152] ? copy_msghdr_from_user+0x10b/0x160 [ 475.733930][T11152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.739245][T11152] ? __pfx___lock_acquire+0x10/0x10 [ 475.744456][T11152] ___sys_sendmsg+0x135/0x1e0 [ 475.749166][T11152] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.754405][T11152] ? lock_acquire+0x2f/0xb0 [ 475.758917][T11152] ? __fget_files+0x40/0x3f0 [ 475.763538][T11152] ? fdget+0x176/0x210 [ 475.766124][ T51] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 475.767614][T11152] __sys_sendmsg+0x117/0x1f0 [ 475.767643][T11152] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.785980][T11152] ? __fget_files+0x244/0x3f0 [ 475.786859][ T51] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.790677][T11152] do_syscall_64+0xcd/0x250 [ 475.790706][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.790732][T11152] RIP: 0033:0x7f9e0857e719 [ 475.790749][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.790768][T11152] RSP: 002b:00007f9e09303038 EFLAGS: 00000246 [ 475.809069][ T51] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 475.811142][T11152] ORIG_RAX: 000000000000002e [ 475.811153][T11152] RAX: ffffffffffffffda RBX: 00007f9e08735f80 RCX: 00007f9e0857e719 [ 475.811170][T11152] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 475.811182][T11152] RBP: 00007f9e09303090 R08: 0000000000000000 R09: 0000000000000000 [ 475.811193][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.811207][T11152] R13: 0000000000000000 R14: 00007f9e08735f80 R15: 00007fff4e35d0f8 [ 475.811231][T11152] [ 475.819074][ T5895] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 475.875371][ T51] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.920084][ T51] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.967702][ T51] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 475.977236][ T51] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 475.990308][ T51] usb 6-1: Product: syz [ 475.994501][ T51] usb 6-1: Manufacturer: syz [ 476.019013][ T51] cdc_wdm 6-1:1.0: skipping garbage [ 476.028442][ T51] cdc_wdm 6-1:1.0: skipping garbage [ 476.044054][ T51] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 476.059438][ T51] cdc_wdm 6-1:1.0: Unknown control protocol [ 476.141619][ T8] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 476.688248][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 476.695136][ T5895] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 476.704736][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.714438][ T5895] usb 1-1: config 0 descriptor?? [ 476.798634][ T51] usb 6-1: USB disconnect, device number 36 [ 476.932787][ T8] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 476.946384][T11168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.954140][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.964400][ T8] usb 5-1: Product: syz [ 476.968616][ T8] usb 5-1: Manufacturer: syz [ 476.974653][ T8] usb 5-1: SerialNumber: syz [ 476.982439][ T8] usb 5-1: config 0 descriptor?? [ 476.996160][T11168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.119540][ T5895] usb 1-1: string descriptor 0 read error: -71 [ 477.126245][ T5895] usb 1-1: Found UVC 0.00 device (2833:0201) [ 477.133487][ T5895] usb 1-1: No valid video chain found. [ 477.149744][ T5895] usb 1-1: USB disconnect, device number 52 [ 477.197152][ T8] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 477.203743][ T8] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 477.213261][ T8] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 477.431528][T11177] rdma_op ffff88806585b1f0 conn xmit_rdma 0000000000000000 [ 478.296207][ T8] usb 5-1: USB disconnect, device number 50 [ 478.811229][T11192] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1443'. [ 478.820803][T11192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1443'. [ 479.910080][T11197] overlayfs: overlapping lowerdir path [ 482.318375][ T29] audit: type=1400 audit(1730964430.932:648): avc: denied { nlmsg_read } for pid=11216 comm="syz.5.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 483.930174][T11246] rdma_op ffff88803598b1f0 conn xmit_rdma 0000000000000000 [ 484.771595][ T51] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 486.658129][T11263] rdma_op ffff888035bd21f0 conn xmit_rdma 0000000000000000 [ 487.173348][ T51] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 487.182513][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.190728][ T51] usb 6-1: Product: syz [ 487.194901][ T51] usb 6-1: Manufacturer: syz [ 487.691435][ T51] usb 6-1: SerialNumber: syz [ 487.698042][ T51] usb 6-1: config 0 descriptor?? [ 487.756397][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 487.867910][ T51] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 487.909419][ T51] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 487.917190][ T51] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 487.990615][ T51] usb 6-1: USB disconnect, device number 37 [ 489.797733][T11306] rdma_op ffff88802fdc81f0 conn xmit_rdma 0000000000000000 [ 491.069633][ T51] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 491.094563][T11320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1474'. [ 491.234676][ T51] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=68.24 [ 491.247393][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.265684][ T51] usb 6-1: Product: syz [ 491.270071][ T51] usb 6-1: Manufacturer: syz [ 491.274964][ T51] usb 6-1: SerialNumber: syz [ 491.281869][ T51] usb 6-1: config 0 descriptor?? [ 491.288660][ T51] ipw 6-1:0.0: IPWireless converter converter detected [ 491.349601][ T964] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 491.525382][ T5828] Bluetooth: hci3: unexpected cc 0x2007 length: 100 > 2 [ 491.543707][ T5828] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 491.564962][ T964] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 491.596378][ T964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.604593][ T964] usb 7-1: Product: syz [ 491.608913][ T964] usb 7-1: Manufacturer: syz [ 491.613574][ T964] usb 7-1: SerialNumber: syz [ 491.634960][ T964] usb 7-1: config 0 descriptor?? [ 491.925488][ T964] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 491.932856][ T964] f81604 7-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 491.940759][ T964] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 491.958828][ T964] usb 7-1: USB disconnect, device number 9 [ 492.189673][ T51] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 492.408208][ T51] usb 1-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 492.473809][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.697422][ T51] usb 1-1: config 0 descriptor?? [ 492.770500][ T51] pwc: Samsung MPC-C30 USB webcam detected. [ 492.797482][T10361] usb 6-1: USB disconnect, device number 38 [ 492.804340][T10361] ipw 6-1:0.0: device disconnected [ 492.932610][T11344] vivid-000: disconnect [ 492.947272][T11343] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1484'. [ 492.985073][ T51] pwc: send_video_command error -71 [ 492.990919][ T51] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 493.032439][ T51] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 493.062059][ T51] usb 1-1: USB disconnect, device number 53 [ 493.102587][T11346] netlink: 'syz.5.1486': attribute type 1 has an invalid length. [ 493.181685][ T964] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 493.795052][ T964] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 493.808507][ T964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.816565][ T964] usb 7-1: Product: syz [ 493.829406][ T964] usb 7-1: Manufacturer: syz [ 493.839426][ T964] usb 7-1: SerialNumber: syz [ 493.858065][ T964] usb 7-1: config 0 descriptor?? [ 493.905900][ T29] audit: type=1400 audit(1730964442.542:649): avc: denied { create } for pid=11355 comm="syz.0.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 493.925590][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.941557][ T29] audit: type=1400 audit(1730964442.542:650): avc: denied { connect } for pid=11355 comm="syz.0.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 494.032732][ T29] audit: type=1400 audit(1730964442.662:651): avc: denied { append } for pid=11355 comm="syz.0.1488" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 494.368504][T11359] binder: BINDER_SET_CONTEXT_MGR already set [ 494.376192][T11359] binder: 11342:11359 ioctl 4018620d 20004a80 returned -16 [ 495.703409][ T5828] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 496.490901][ T5828] Bluetooth: hci3: Injecting HCI hardware error event [ 496.501697][T10819] Bluetooth: hci3: hardware error 0x00 [ 497.290848][T11377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.346690][T11377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.581686][ T5874] usb 7-1: USB disconnect, device number 10 [ 497.598939][T11359] vivid-000: reconnect [ 497.614970][T11382] FAULT_INJECTION: forcing a failure. [ 497.614970][T11382] name failslab, interval 1, probability 0, space 0, times 0 [ 497.698499][T11382] CPU: 1 UID: 0 PID: 11382 Comm: syz.5.1498 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 497.709302][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 497.719368][T11382] Call Trace: [ 497.722653][T11382] [ 497.725591][T11382] dump_stack_lvl+0x16c/0x1f0 [ 497.730284][T11382] should_fail_ex+0x497/0x5b0 [ 497.734980][T11382] ? fs_reclaim_acquire+0xae/0x150 [ 497.740108][T11382] should_failslab+0xc2/0x120 [ 497.744807][T11382] __kmalloc_cache_noprof+0x6b/0x300 [ 497.750110][T11382] ? flow_indr_dev_setup_offload+0x27a/0x890 [ 497.756115][T11382] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 497.761946][T11382] flow_indr_dev_setup_offload+0x27a/0x890 [ 497.767771][T11382] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 497.773421][T11382] tcf_block_offload_cmd.isra.0+0x2c9/0x310 [ 497.779341][T11382] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 497.785774][T11382] ? lock_acquire+0x2f/0xb0 [ 497.790289][T11382] ? tcf_block_get_ext+0x6f8/0x17f0 [ 497.795511][T11382] ? __pfx_down_write+0x10/0x10 [ 497.800382][T11382] tcf_block_get_ext+0x7da/0x17f0 [ 497.805435][T11382] tcf_block_get+0xa9/0x100 [ 497.809957][T11382] ? __pfx_tcf_block_get+0x10/0x10 [ 497.815087][T11382] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 497.821351][T11382] prio_init+0x3b/0x80 [ 497.825436][T11382] ? __pfx_prio_init+0x10/0x10 [ 497.830218][T11382] qdisc_create+0x4f1/0x1100 [ 497.834823][T11382] ? __pfx_qdisc_create+0x10/0x10 [ 497.839869][T11382] tc_modify_qdisc+0x4d8/0x1c40 [ 497.844741][T11382] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 497.850064][T11382] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 497.855364][T11382] rtnetlink_rcv_msg+0x3c7/0xea0 [ 497.860318][T11382] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 497.865802][T11382] netlink_rcv_skb+0x16b/0x440 [ 497.870576][T11382] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 497.876049][T11382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.881362][T11382] ? netlink_deliver_tap+0x1ae/0xd90 [ 497.886677][T11382] netlink_unicast+0x53c/0x7f0 [ 497.891466][T11382] ? __pfx_netlink_unicast+0x10/0x10 [ 497.896778][T11382] netlink_sendmsg+0x8b8/0xd70 [ 497.901556][T11382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.906869][T11382] ____sys_sendmsg+0xaaf/0xc90 [ 497.911652][T11382] ? copy_msghdr_from_user+0x10b/0x160 [ 497.917123][T11382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.922437][T11382] ? __pfx___lock_acquire+0x10/0x10 [ 497.927646][T11382] ___sys_sendmsg+0x135/0x1e0 [ 497.932337][T11382] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.937561][T11382] ? lock_acquire+0x2f/0xb0 [ 497.942072][T11382] ? __fget_files+0x40/0x3f0 [ 497.946688][T11382] ? fdget+0x176/0x210 [ 497.950777][T11382] __sys_sendmsg+0x117/0x1f0 [ 497.955378][T11382] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.960499][T11382] ? __fget_files+0x244/0x3f0 [ 497.965215][T11382] do_syscall_64+0xcd/0x250 [ 497.969733][T11382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.975658][T11382] RIP: 0033:0x7f4e57b7e719 [ 497.980080][T11382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.999695][T11382] RSP: 002b:00007f4e589de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.008640][T11382] RAX: ffffffffffffffda RBX: 00007f4e57d35f80 RCX: 00007f4e57b7e719 [ 498.016616][T11382] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 498.024589][T11382] RBP: 00007f4e589de090 R08: 0000000000000000 R09: 0000000000000000 [ 498.032566][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.040541][T11382] R13: 0000000000000000 R14: 00007f4e57d35f80 R15: 00007fffc9296ae8 [ 498.048537][T11382] [ 499.492735][T11403] sctp: failed to load transform for md5: -2 [ 499.729568][T10819] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 500.056623][T11420] FAULT_INJECTION: forcing a failure. [ 500.056623][T11420] name failslab, interval 1, probability 0, space 0, times 0 [ 500.088552][T11420] CPU: 1 UID: 0 PID: 11420 Comm: syz.6.1507 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 500.099358][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 500.109427][T11420] Call Trace: [ 500.112723][T11420] [ 500.115675][T11420] dump_stack_lvl+0x16c/0x1f0 [ 500.120371][T11420] should_fail_ex+0x497/0x5b0 [ 500.125059][T11420] ? fs_reclaim_acquire+0xae/0x150 [ 500.130178][T11420] should_failslab+0xc2/0x120 [ 500.134854][T11420] __kmalloc_noprof+0xcb/0x400 [ 500.139614][T11420] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 500.145252][T11420] tomoyo_realpath_from_path+0xb9/0x720 [ 500.150792][T11420] ? tomoyo_path_number_perm+0x232/0x590 [ 500.156414][T11420] tomoyo_path_number_perm+0x245/0x590 [ 500.161861][T11420] ? tomoyo_path_number_perm+0x232/0x590 [ 500.167484][T11420] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 500.173470][T11420] ? trace_lock_acquire+0x14a/0x1d0 [ 500.178667][T11420] ? lock_acquire+0x2f/0xb0 [ 500.183157][T11420] ? __fget_files+0x40/0x3f0 [ 500.187743][T11420] ? __fget_files+0x244/0x3f0 [ 500.192416][T11420] security_file_ioctl+0x9b/0x240 [ 500.197433][T11420] __x64_sys_ioctl+0xbb/0x220 [ 500.202102][T11420] do_syscall_64+0xcd/0x250 [ 500.206601][T11420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.212487][T11420] RIP: 0033:0x7f9e0857e719 [ 500.216887][T11420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.236483][T11420] RSP: 002b:00007f9e09303038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.244885][T11420] RAX: ffffffffffffffda RBX: 00007f9e08735f80 RCX: 00007f9e0857e719 [ 500.252845][T11420] RDX: 0000000020000100 RSI: 00000000000089e3 RDI: 0000000000000004 [ 500.260817][T11420] RBP: 00007f9e09303090 R08: 0000000000000000 R09: 0000000000000000 [ 500.268782][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.276745][T11420] R13: 0000000000000000 R14: 00007f9e08735f80 R15: 00007fff4e35d0f8 [ 500.284725][T11420] [ 500.305388][T11430] 9pnet_fd: Insufficient options for proto=fd [ 500.479818][T11420] ERROR: Out of memory at tomoyo_realpath_from_path. [ 501.010291][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.028277][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.287275][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1520'. [ 502.318924][T11464] bridge0: port 3(macvlan5) entered blocking state [ 502.326944][T11464] bridge0: port 3(macvlan5) entered disabled state [ 502.342614][T11464] macvlan5: entered allmulticast mode [ 502.358600][T11464] macvlan5: left allmulticast mode [ 503.381128][T11460] vlan1: entered promiscuous mode [ 503.929024][T11469] batadv_slave_1: entered promiscuous mode [ 503.971436][T11476] batadv_slave_1: left promiscuous mode [ 504.011371][T11476] vlan1: left promiscuous mode [ 505.195003][T11486] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1526'. [ 505.222993][ T29] audit: type=1326 audit(1730964453.842:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.246838][ T29] audit: type=1326 audit(1730964453.842:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.270729][ T29] audit: type=1326 audit(1730964453.842:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.294411][ T29] audit: type=1326 audit(1730964453.842:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.318324][ T29] audit: type=1326 audit(1730964453.842:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.342582][ T29] audit: type=1326 audit(1730964453.842:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.366464][ T29] audit: type=1326 audit(1730964453.842:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.390466][ T29] audit: type=1326 audit(1730964453.842:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.413737][ T29] audit: type=1326 audit(1730964453.842:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.437262][ T29] audit: type=1326 audit(1730964453.842:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11485 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 505.469485][ T8] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 505.629568][ T8] usb 1-1: device descriptor read/64, error -71 [ 506.490767][ T8] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 507.029729][ T8] usb 1-1: device descriptor read/64, error -71 [ 507.179173][ T8] usb usb1-port1: attempt power cycle [ 508.109853][ T964] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 508.176228][T10819] Bluetooth: hci5: command 0x0406 tx timeout [ 508.261260][ T964] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 508.884987][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.896938][ T964] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 508.906069][ T964] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 508.914157][ T964] usb 5-1: Manufacturer: syz [ 508.931282][ T964] usb 5-1: config 0 descriptor?? [ 508.990133][ T964] rc_core: IR keymap rc-hauppauge not found [ 508.997508][ T964] Registered IR keymap rc-empty [ 509.227580][ T964] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 509.495424][ T964] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 510.560821][T10361] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 511.267063][ T964] usb 5-1: USB disconnect, device number 51 [ 511.589420][T10361] usb 7-1: Using ep0 maxpacket: 8 [ 511.596953][T10361] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 511.605283][T10361] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.694830][T10361] usb 7-1: config 0 has no interface number 0 [ 512.671786][T10361] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 512.683001][T10361] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 512.696428][T10361] usb 7-1: config 0 interface 255 has no altsetting 0 [ 512.703278][T10361] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 512.712347][T10361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.330220][T10361] usb 7-1: config 0 descriptor?? [ 513.429694][T10361] usb 7-1: can't set config #0, error -71 [ 513.512778][T10361] usb 7-1: USB disconnect, device number 11 [ 513.659411][ T25] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 515.100092][ T25] usb 6-1: device descriptor read/all, error -71 [ 515.324581][T11605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11605 comm=syz.6.1562 [ 515.420160][ T5876] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 516.399517][ T964] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 516.430914][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 516.562939][ T5876] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 516.574248][ T5876] usb 1-1: config 0 has no interface number 0 [ 516.584935][ T5876] usb 1-1: config 0 interface 5 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.598566][ T5876] usb 1-1: config 0 interface 5 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.629463][ T964] usb 7-1: Using ep0 maxpacket: 32 [ 516.637258][ T5876] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 516.651481][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.660896][ T964] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=be.3a [ 516.674264][ T964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.695207][ T5876] usb 1-1: config 0 descriptor?? [ 516.708980][ T964] usb 7-1: Product: syz [ 516.713608][ T964] usb 7-1: Manufacturer: syz [ 516.719004][ T964] usb 7-1: SerialNumber: syz [ 516.731617][ T964] usb 7-1: config 0 descriptor?? [ 516.950139][ T964] usb 7-1: USB disconnect, device number 12 [ 517.151897][T11599] program syz.0.1559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.198241][T11599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11599 comm=syz.0.1559 [ 517.217956][T11599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11599 comm=syz.0.1559 [ 517.370231][T11599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=11599 comm=syz.0.1559 [ 517.431717][ T5876] usbhid 1-1:0.5: can't add hid device: -71 [ 517.441671][ T5876] usbhid 1-1:0.5: probe with driver usbhid failed with error -71 [ 517.482788][ T5876] usb 1-1: USB disconnect, device number 57 [ 518.440049][T11631] batadv0: entered promiscuous mode [ 518.662662][T11626] rdma_op ffff88804dd709f0 conn xmit_rdma 0000000000000000 [ 518.875535][T11631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.026514][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 519.026530][ T29] audit: type=1400 audit(1730964467.662:669): avc: denied { mount } for pid=11638 comm="syz.5.1565" name="/" dev="hugetlbfs" ino=34202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 519.150978][T11645] ======================================================= [ 519.150978][T11645] WARNING: The mand mount option has been deprecated and [ 519.150978][T11645] and is ignored by this kernel. Remove the mand [ 519.150978][T11645] option from the mount to silence this warning. [ 519.150978][T11645] ======================================================= [ 519.327173][T11642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.719898][T11658] atomic_op ffff88802a803998 conn xmit_atomic 0000000000000000 [ 519.987694][ T29] audit: type=1400 audit(1730964468.602:670): avc: denied { getopt } for pid=11663 comm="syz.4.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 520.055321][ T29] audit: type=1400 audit(1730964468.682:671): avc: denied { unmount } for pid=10164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 521.090461][T11675] atomic_op ffff88807cb28198 conn xmit_atomic 0000000000000000 [ 521.619263][T11689] futex_wake_op: syz.0.1584 tries to shift op by 36; fix this program [ 522.173210][ T29] audit: type=1400 audit(1730964470.302:672): avc: denied { getopt } for pid=11683 comm="syz.6.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 522.196443][ T29] audit: type=1400 audit(1730964470.302:673): avc: denied { watch } for pid=11683 comm="syz.6.1585" path="/82" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 522.273814][T11696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1587'. [ 525.496215][ T29] audit: type=1400 audit(1730964474.022:674): avc: denied { listen } for pid=11720 comm="syz.1.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 525.599743][ T29] audit: type=1400 audit(1730964474.022:675): avc: denied { connect } for pid=11720 comm="syz.1.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 525.761458][T11735] rdma_op ffff8880520f21f0 conn xmit_rdma 0000000000000000 [ 526.220574][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.229130][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.619145][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1605'. [ 526.648621][T11757] sp0: Synchronizing with TNC [ 526.697733][T11763] mmap: syz.5.1606 (11763) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 527.765629][T11773] random: crng reseeded on system resumption [ 530.066653][ T25] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 531.001938][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 531.011825][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 531.024564][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.038710][ T25] usb 7-1: config 0 descriptor?? [ 531.321618][T10361] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 531.893399][ T25] (null): keene_cmd_main failed (-110) [ 531.915818][ T25] video4linux radio48: keene_cmd_main failed (-32) [ 531.923254][ T25] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 532.012766][ T25] usb 7-1: USB disconnect, device number 13 [ 532.049582][T10361] usb 1-1: Using ep0 maxpacket: 8 [ 532.062659][T10361] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 532.072011][T10361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.080593][T10361] usb 1-1: Product: syz [ 532.084762][T10361] usb 1-1: Manufacturer: syz [ 532.089891][T10361] usb 1-1: SerialNumber: syz [ 532.096406][T10361] usb 1-1: config 0 descriptor?? [ 532.114582][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1632'. [ 532.331939][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.389630][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.697701][T10361] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 532.698731][T11860] rdma_op ffff88804c45a1f0 conn xmit_rdma 0000000000000000 [ 533.846987][ T29] audit: type=1400 audit(1730964482.472:676): avc: denied { mount } for pid=11873 comm="syz.6.1636" name="/" dev="rpc_pipefs" ino=34665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 534.799428][ T51] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 534.973012][ T51] usb 6-1: Using ep0 maxpacket: 32 [ 534.982884][ T51] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 534.992305][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.007008][ T51] usb 6-1: Product: syz [ 535.011360][ T51] usb 6-1: Manufacturer: syz [ 535.016142][ T51] usb 6-1: SerialNumber: syz [ 535.048587][ T51] usb 6-1: config 0 descriptor?? [ 535.065737][ T51] ums_eneub6250 6-1:0.0: USB Mass Storage device detected [ 535.266422][T11893] atomic_op ffff88802aba4998 conn xmit_atomic 0000000000000000 [ 536.121750][T11899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.695279][T10361] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 536.834473][T10361] usb 1-1: USB disconnect, device number 58 [ 537.918235][ T29] audit: type=1400 audit(1730964486.492:677): avc: denied { ioctl } for pid=11907 comm="syz.1.1647" path="socket:[35849]" dev="sockfs" ino=35849 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 538.088663][T11910] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 538.219897][T10264] usb 6-1: USB disconnect, device number 41 [ 539.171652][T11939] atomic_op ffff88807b4e2198 conn xmit_atomic 0000000000000000 [ 539.202576][T11935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.211556][T11935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.579475][ T5875] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 539.771180][ T5875] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 539.806407][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.843403][ T5875] usb 1-1: config 0 descriptor?? [ 540.515222][ T29] audit: type=1400 audit(1730964488.962:678): avc: denied { ioctl } for pid=11945 comm="syz.0.1660" path="mnt:[4026532799]" dev="nsfs" ino=4026532799 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 541.069542][ T29] audit: type=1400 audit(1730964489.002:679): avc: denied { setcheckreqprot } for pid=11945 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 541.115218][ T5875] ath6kl: Failed to submit usb control message: -110 [ 541.122038][ T5875] ath6kl: unable to send the bmi data to the device: -110 [ 541.129215][ T5875] ath6kl: Unable to send get target info: -110 [ 541.238598][ T5875] ath6kl: Failed to init ath6kl core: -110 [ 541.245753][ T5875] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 541.943157][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'. [ 544.264015][T12028] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1666'. [ 544.274340][T10264] usb 1-1: USB disconnect, device number 59 [ 544.969027][ T29] audit: type=1400 audit(1730964493.592:680): avc: denied { write } for pid=12041 comm="syz.1.1682" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 545.001418][ T29] audit: type=1400 audit(1730964493.592:681): avc: denied { add_name } for pid=12041 comm="syz.1.1682" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 545.126899][ T29] audit: type=1400 audit(1730964493.592:682): avc: denied { create } for pid=12041 comm="syz.1.1682" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 545.147166][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.645884][T10264] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 545.791568][ T29] audit: type=1400 audit(1730964493.592:683): avc: denied { associate } for pid=12041 comm="syz.1.1682" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 545.819995][T12049] netlink: 4272 bytes leftover after parsing attributes in process `syz.5.1680'. [ 545.829483][T12049] netlink: 133 bytes leftover after parsing attributes in process `syz.5.1680'. [ 546.599458][T10264] usb 1-1: Using ep0 maxpacket: 32 [ 546.635425][T10264] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.758596][T12058] rdma_op ffff88807e66a9f0 conn xmit_rdma 0000000000000000 [ 547.560870][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1688'. [ 547.588743][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1688'. [ 547.595812][T10264] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.608477][T10264] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 547.620162][T10264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 547.631469][T10264] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 547.641870][T10264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 547.693321][T10264] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 547.703228][T10264] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 547.717400][T10264] usb 1-1: string descriptor 0 read error: -71 [ 547.723997][T10264] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 547.733138][T10264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.743311][T10264] usb 1-1: config 0 descriptor?? [ 547.748756][T10264] usb 1-1: can't set config #0, error -71 [ 547.757058][T10264] usb 1-1: USB disconnect, device number 60 [ 547.938470][ T25] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 548.099628][ T25] usb 7-1: device descriptor read/64, error -71 [ 548.399855][ T25] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 548.739279][ T25] usb 7-1: device descriptor read/64, error -71 [ 548.851164][ T25] usb usb7-port1: attempt power cycle [ 549.069612][T12103] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1698'. [ 549.720522][T12110] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1693'. [ 550.189481][ T5877] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 550.319466][ T5877] usb 5-1: device descriptor read/64, error -71 [ 551.489424][ T5877] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 551.789608][ T5877] usb 5-1: device descriptor read/64, error -71 [ 551.910769][ T5877] usb usb5-port1: attempt power cycle [ 552.293279][ T29] audit: type=1400 audit(1730964500.922:684): avc: denied { ioctl } for pid=12136 comm="syz.1.1709" path="socket:[36172]" dev="sockfs" ino=36172 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 552.449570][ T5877] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 552.479961][ T5877] usb 5-1: device descriptor read/8, error -71 [ 552.616010][T10264] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 552.666629][ T29] audit: type=1400 audit(1730964501.292:685): avc: denied { map } for pid=12136 comm="syz.1.1709" path="socket:[36172]" dev="sockfs" ino=36172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 552.779612][T10264] usb 6-1: Using ep0 maxpacket: 8 [ 553.304663][ T5877] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 553.346357][ T29] audit: type=1400 audit(1730964501.292:686): avc: denied { read } for pid=12136 comm="syz.1.1709" path="socket:[36172]" dev="sockfs" ino=36172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 554.707561][ T5877] usb 5-1: device descriptor read/8, error -71 [ 554.978471][ T5877] usb usb5-port1: unable to enumerate USB device [ 555.121533][T10264] usb 6-1: unable to get BOS descriptor or descriptor too short [ 555.130121][T10264] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 555.138087][T10264] usb 6-1: can't read configurations, error -71 [ 555.169029][T12146] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 555.179492][T12146] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 555.872737][T12211] atomic_op ffff8880307f6998 conn xmit_atomic 0000000000000000 [ 556.399520][ T29] audit: type=1326 audit(1730964505.012:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 556.423298][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.516151][ T29] audit: type=1326 audit(1730964505.012:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 556.539471][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.550667][T12219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12219 comm=syz.5.1723 [ 556.569890][T12219] openvswitch: netlink: Unknown nsh attribute 0 [ 556.653375][ T29] audit: type=1326 audit(1730964505.012:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 556.739180][ T29] audit: type=1326 audit(1730964505.012:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 556.867772][ T29] audit: type=1326 audit(1730964505.012:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4537e719 code=0x7ffc0000 [ 556.935946][ T29] audit: type=1326 audit(1730964505.012:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c4537d0b0 code=0x7ffc0000 [ 556.992962][ T29] audit: type=1326 audit(1730964505.022:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.4.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c4537d0b0 code=0x7ffc0000 [ 557.284198][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1730'. [ 557.310136][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1730'. [ 558.717039][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 558.717057][ T29] audit: type=1800 audit(1730964507.092:698): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1731" name="bus" dev="overlay" ino=2068 res=0 errno=0 [ 559.170389][ T6046] unregister_netdevice: waiting for team_slave_0 to become free. Usage count = 2 [ 559.187040][ T6046] ref_tracker: team_slave_0@ffff888034f0c620 has 1/1 users at [ 559.187040][ T6046] ib_device_set_netdev+0x2ec/0x850 [ 559.187040][ T6046] rxe_register_device+0x2a7/0x3d0 [ 559.187040][ T6046] rxe_net_add+0xb4/0x110 [ 559.187040][ T6046] rxe_newlink+0x6f/0x190 [ 559.187040][ T6046] nldev_newlink+0x38e/0x660 [ 559.187040][ T6046] rdma_nl_rcv_msg+0x388/0x6e0 [ 559.187040][ T6046] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 559.187040][ T6046] netlink_unicast+0x53c/0x7f0 [ 559.187040][ T6046] netlink_sendmsg+0x8b8/0xd70 [ 559.187040][ T6046] ____sys_sendmsg+0xaaf/0xc90 [ 559.187040][ T6046] ___sys_sendmsg+0x135/0x1e0 [ 559.187040][ T6046] __sys_sendmsg+0x117/0x1f0 [ 559.187040][ T6046] do_syscall_64+0xcd/0x250 [ 559.187040][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.187040][ T6046] [ 559.268964][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.296131][T12276] atomic_op ffff88804be9f198 conn xmit_atomic 0000000000000000 [ 559.309560][ T5875] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 559.469524][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 559.476092][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.490528][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.510892][ T5875] usb 6-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 559.529837][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.544665][ T5875] usb 6-1: config 0 descriptor?? [ 559.767810][T12260] syz.5.1732 (12260): attempted to duplicate a private mapping with mremap. This is not supported. [ 559.787087][T12260] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1732'. [ 559.797072][T12260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1732'. [ 559.813560][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.825725][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.852136][ T5875] usbhid 6-1:0.0: can't add hid device: -71 [ 559.864084][ T5875] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 559.876022][ T5875] usb 6-1: USB disconnect, device number 44 [ 562.333349][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.339776][ T1296] ieee802154 phy1 wpan1: encryption failed: -22