last executing test programs: 14.648715355s ago: executing program 2 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xa5, 0xf4, 0x3, 0x8, 0x1a0a, 0x102, 0x930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x17, 0x0, 0xe0, 0x8, [{{0x9, 0x4, 0x47, 0x0, 0x0, 0x77, 0x92, 0x3d}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES64=r0, @ANYBLOB="ce9ebd5de5536dbffae529a57e3f101b8ff426dd4f8372c774a2ab64b9955ff41156ef74ec76bb66a0fdee78c3a13481d07e663dd650c166c3c25028c2fac4dcc878cd1db6f6f887380765efbf3673d8f27c8bbec94616c085eed5a172d4b54423309fb0f659af75acb22993505429e9e4bb6f7f9d2e790dfadeddcf03353866fdb4022017068fb5afb483adb3d810519475525cce5400", @ANYRESHEX=r0, @ANYRESDEC=0x0], 0x7c}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000140)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000002100)={0x3, 0x0, 0x9, 0x1, 0x14, "888da7a91c04792a"}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f0000000040)={0x3ff, 0x9, 0x2, 0x1, 0x5, 0x6, 0x2, 0x1000, 0x8}) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 14.220968794s ago: executing program 3 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000", @ANYRES32=r5], 0x4c}}, 0x0) 13.104767152s ago: executing program 3 (id=135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000005000/0x4000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x4240a2a0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001800)="c5", 0x1}], 0x2, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setgroups(0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000006c0)=0x5e3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) r5 = socket(0x40000000015, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000083c0)={0x2020}, 0x2020) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r8 = syz_io_uring_setup(0x746, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x2004, @fd_index=0x4, 0x3, 0x0, 0x0, 0x1, 0x0, {0x3, r11}}) io_uring_enter(r8, 0xbe4, 0x0, 0x6e, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 9.944578152s ago: executing program 2 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xa5, 0xf4, 0x3, 0x8, 0x1a0a, 0x102, 0x930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x17, 0x0, 0xe0, 0x8, [{{0x9, 0x4, 0x47, 0x0, 0x0, 0x77, 0x92, 0x3d}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES64=r0, @ANYBLOB="ce9ebd5de5536dbffae529a57e3f101b8ff426dd4f8372c774a2ab64b9955ff41156ef74ec76bb66a0fdee78c3a13481d07e663dd650c166c3c25028c2fac4dcc878cd1db6f6f887380765efbf3673d8f27c8bbec94616c085eed5a172d4b54423309fb0f659af75acb22993505429e9e4bb6f7f9d2e790dfadeddcf03353866fdb4022017068fb5afb483adb3d810519475525cce5400", @ANYRESHEX=r0, @ANYRESDEC=0x0], 0x7c}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000140)=0x7) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000002100)={0x3, 0x0, 0x9, 0x1, 0x14, "888da7a91c04792a"}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f0000000040)={0x3ff, 0x9, 0x2, 0x1, 0x5, 0x6, 0x2, 0x1000, 0x8}) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) 8.768947959s ago: executing program 4 (id=147): r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r3, 0x79f, &(0x7f00000001c0)=0xb0000) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="000000f3ffffff00"]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="dfcf16d3e81fb1906dd5bc420e0f0af70e559dd33a000000001c140000fe000001ef0000"], 0x24}}, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 8.64043617s ago: executing program 1 (id=148): r0 = socket$kcm(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) sendmsg$nl_route_sched(r2, 0x0, 0x20048024) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x300000, 0x800, 0x0, 0x3}, 0x1c) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) syz_usb_connect(0x5, 0x59, &(0x7f0000000780)=ANY=[@ANYBLOB="12011bca5d6e9f4099041b1029560102030109024700010a03750809042920000e010006"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x0, 0x0}, {0x17, &(0x7f0000000140)=@string={0x17, 0x3, "1bedfec32e5c139a9d7f2a337e442e7507287412c9"}}]}) close(r0) 7.749103965s ago: executing program 0 (id=149): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x5df9bfd, 0x1000000}, 0xc) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x206, 0x0) io_submit(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(r3, 0xfffffff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f00006fe000/0x1000)=nil, 0x1000, 0x9) socket$netlink(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) 7.57345929s ago: executing program 3 (id=150): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone3(0x0, 0x0) sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80b, 0x2}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x10000000}}, 0x10) bind$tipc(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.93809363s ago: executing program 4 (id=151): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="940000001d00000226bd7000fbdbdf258400050000000000000000000000000000000000000004d32b00000002000000ac14941f000000000000000000000000013500000201040006000000ff010000ff000000ac141426000000000000000000000000000004d53c0000000a000000ac1414bb0000000000000000000000000000000004000200030000000000000023e80000"], 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x199000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x200000000, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRESOCT, @ANYRES32=r1, @ANYRES16=r3, @ANYRES8=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x3000000000, 0xf}, &(0x7f0000000240)=0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="001000003300000126bd7000fddbdf25a40ffb80910f1380783cabcf3de8f3c211caac293bfba1f6c66248e2705bfdeaf3e518701e75b6870e949c9efe541264de467766dfe253da80bc4601fddfb29d68a356ca39cba5bb876bdee1d1f6640bb64e313f030da7715e4e5f282235c21405e318614f33083a4b615d83fbc2757362a21e81598dd1c94f416f7fe0291ee066acb78990917d93450dc091617b2b9b856b762e98782567c7ae32d25d68ac22ba4415ab4e9411b60459b5fe04a16c83cb50e70b539e77b39213d9c96b5f0eaa04346eb659528defaefebc201f6fd8a70ef275ffc1ccaf61d56015c4bb63039c3b5db172b76ef8c834ae9df36f8764c27785f4098f8bbe8190e92a2f53d0e17cbd0e3150c8839cfd779a96807dfb84d6d424978b1060dc0fe13a00d526681c018bd90b954e1dd4f36787f6cf693c4a428c8cc5a6c0c77a940f5911f6191babbb44ddb0874a2e573d9a4c41cc89134dc1498259ae3da6f5e2bb40631050a2b28b86f43fa397c8cb73698f2625d966e2695db75c2d719077e59f4278644ce09c0b5cd873f4ce68a6d88819c0caf1c3b58612897c74636701d99260c2ed0e29392f96e6b46a5d8e4797d49f7db2400f81bbdfe7fedab277d090a977eb6d3143e34ab570975d403d9d5975d8a1b373d0322e954d8921cca83c962e55959bb2b82ab789e617a67200d503f89c88d6e8f04deb2773349669e22cdc62f0d6037bc11334f3b7f3c203866d39f6f2f15215fa9a707960c2f6d5229ee00a879a842724c9f633dcb55114d5b4ae228f59001fdea972a1e2893ca0f1855a3918dda375af22d6531cf30c28f84ab3f45d7893f65a9ac09cca966c896c79172b1f8b8da2af3c82ad641eb3db53966e1f670fa1f94465c356331e7a9e39be91d6b2719780d650d54e75277ba22818857a3ce176b85f447a52d43e52d621422695ce1bbeaaa3611d296953b63f08238844704293e37334ef7dc826b87704ffa5e634c89fe70223869ef8484d0dbab21bf206fae62fa6b645ecd4f1f0ea1107ec9ae55882dd92b099da4cd71ab2493b81a3eee6f617dd53af22ff15b01e97689db12b6fe53f941207303d1e822a7b98303617efdaa4e844df85dac246617b3aff4cd0bb5db224a59fa4e7161c4862114cdec7a7b9f4ffcbd7e8a9dc761dc3368a0f37541463227ae5cf525441ab99b9ba09d70b4c2ad9719a5c48258398e77adb9d1f8dcc64d8d658cfcd1b5fef2669f1b2c19f0988268611a644f02f13b86377a9203c36091545f09d62c96c98732c2619cc81dbd4ca19dd62141ce8421dbc28de8b32fa91631b8957025c89812d5fdd72d79aa5d1f765aaa083173ab8ae7e1c60884f0b21fd65915d35ebdfc8a880923596ffbbe4bc6bbd81427869350d59a206c96c813efb25bade849f515e6b6a47c6ccb2131e60c8c05891ea8f065baf49459218c32257c13a82b423cee266dbf51f500ce996d76a723e662f3c3d2fddaff5c050f2ef2e17d0fafb0c42a82184201d8732fa4f1c370384fed4b0d8ee842f2de5523aed2e09e2c484f940a1736359711eb655bd00504e76f3c72f26970d3c05b00ea25803e8be24d7751baadfda870d3e0e64514f0b290a052071cd8f71a2c6ff4850b891c3f1818e0774794c46c62d511db9ee5b960404c866850602205b15b287e6d3279e6a5d1dce653ef770f68af6a16dfa552145e18dd0b185571f29542c24b753ee6ee5f5fb448afcfe643d540e7a120ebf36f2e4f3a30b46d8497ad69b5a55ee023709f640d44e1ba6a4da79579fbaf66676c8e2f60a1a8e3fe123a70b4604e75db29ee19bb8805e22195aeda6b0412c750e0043a53c673e24f9bf68544089b1bc8fe1763e0b157106cec5b21847eeea377c258bac16ff48a208b4c7d3cd1fcf410d22148beb6f95317061c1de7e2d87c448bc2c00069d2e886a7a37c4ced954d2b06ee6de91785a967d4dd117b83fdf7786133abd08ac3399ba7e6f521d933e14966ca444056c4289ec24c76b9eed38ceae0c5493dbe53c20063ac6f9290663cad2b4c73b5276bc5a17847e9098563928694a0316d7d73c4a439bd0fb91fdb520d9b92c5c686ed1122383012b3b24fc154d5e0c5fedf74c9c07ec64da1f2157feee49aa476a4d2b830f528f1c8bf8b7b76ecf7d2266ed1b9d8278a5923501cf134fb9e59f1ee9a5c1397387c2959e0743e634cc41782b57f8c7ea51525150c443066b352f84050fbfb72f55680f24461c791024efa74022caa8d58f1e9985e910f25aa92bfe756ab3eacf8079e7eb7f970165b3ff1bf1ca457ab5f4d9a1a08448ffca704fcee8030a7d8aca43ae64b0be45efd5151bcea83845720d210aa76ef748810e46ffb0cdb7bad706a24d6cb076171a6b79f5de5ac6b8190919a68b1b41b173914dd37d599f7a78587c4ee606b31949a88e6a790eca971c348d32f05a22e68d22793282b716d151d9de60e24cc049e3bf4cce36fe43b5ea824a7b3c854860ceed13d466439263353e81940e7ded03f31211cc714f4cdf240516025f1f5621cced4b88a4e48c940d6f46ff2f57f0583046b650a440c4ea8e9fab79e98d7529db2f11cc7529bb361cf8cb65600ffb36eb5fd93acbdd58398ecbb0befd277e267051f93dc3e7c6a5212c2ed990eb60d9d451b4458cb44cd691dac77ece483236e3006b7f7913e39f685ca41bcd1692494370acb70d0cfdc9e6de0bcd602040a0bc2de02a8cd477fef88b5410f5dfea1cd32d25464853d56c82abd3c11caebd992ca656e88a10ca2779f887472d5064fddd7397eb0205c419b23c2756a3b9b722ff273907c50f8b176834edcc1268e036214a2a25651c719541a4f7729ef7e32dee27c5b910bfea677c562138b30b3355b462c8f910874acc292f6787f8d94fa1cb2e648789cc67d05eb49d6d3c8788a024e3c523c4ee282764090044b44f30a9848daf2522b76448ecb9249ffe58dad4363b1d08181131a89af718ecbd5ffe44e032ca26664eecabc9aa57a875b5964ea492b7e759606a3f4ab36130a8a43a19be74709dea4eeebf5e53706685122e6603247996d672dacdf1bbadf5df111cfe7e72f5b2c6cdc32c1e4eed30147c9a51c5abd4214c577c4c8d1725daf906d145c6ff2c9ab0fc3da4edfb92be40b4af234c2bc147b2d08a801b539928cb754f2f6d2d4280ee0c834ee4f5eb8b0662ffa6f7154307b0fe55fe248a3f953a09b06244674adbf31dd7489be3f26423140ffe98671ca413d678047096fcad53f5bca7e602354553af02c225a67e4e8eabf298495a99de9653638405ebe78dc75e6d16c39e1547dadbc07a014369e39175991368d05be623656c4ecb3735612546b9a9c1490f834cab7567e61c8b2669aa62f156f2ff3b76b32e11b0e0acb6c7ccd6623bef1a5ccbe5f477ae90b3918899fc6b6075c514deaf387d5f09cd59f3fb3c0a9614f1eec092a8f7c6bd200e04da47085d58adc08f1f0651f7ce0cea5792a30aa2bee9970913fc9e79bcf0b5c55adfa6967a44b84ffcd3ce7fb47a610773eb9323b8ab3b5b9670f3ddc06e678c9343d43e5ebe929f1ae4508decd56a2cefc34bab4703bbd3d83fcfdc27fc4e8a799a34742526848f6aae932ec98959f46ea50f12e0ad3ba4ef50a7b4defdf2fcf8dd2afdb8f29a1b7eed384b17c8b4ff4cfc220745cef2c083615eee226bccb8f2b7faf5a8948e60edc37a644b70011ff8b608da74a3873b2d8a6ba50dcce8a5ed6fe96c599c6d0b8a431f0b96789e974ea48400b94c2d1fbb7a8908de838cc64d4de93d506dfb450012df4af40d5980aed567e0b94281f8109ae7cb42f8253783a9ccb1cdd07245b31c0a00f13b42eedea9dd6d031f283a277f140f7ccacffc4e76829fede0479d59a542f873524651dbed995a00749e1b06182f073ebc3122ef1b007436d9eeb89d4f82ad366361ae8bb54e795b5c3d0594ccab1d5019f4b9191fd7c84598c866a8f98b2759738a65af53943b466aec83bb055e8f6c6e7755862de6c4c203fa67663702783f5f19459620a99f4de75fc85efedc44cf65adaaead7038406ebc507048b115c44209057f887f204a60ad9f6abc9b7983b930be5115cd91de9723bef58d29e421e123c7fa19ac3de2900827041d096ce0d589d45159c322ff3529687b89a10dd6c628977aedb1547ab6630995b48edba0a6f0e9ce99166dd7acdab5253f6bd4c3891c45d6ce4cf136a7791bc553769b57559215f79051388cff4761a3a63f6c73d8d7aafa8053e4f764f1c37b8b57128ecea00d7046c7532576bd413e01bf6df40bb1c3bf0480efbb1407003a98b1014552d2a1ecf99ba29c063ba96b3555cca24a211c2c604766a6b503a875040039f23f7ed46566519ee1aed0167c774555b623bee2bcfe83459af5527b312a19298e8323cd9b3fe5e075ee0867aadae8bc81939919d6d36834a87c1bf9e47d467395892aa09f12cfc172a2a9a44a43ff880219487798a206fbaca25172b3f00867d3f100f355ccb987bd0c41c015d791bae97c258ea4138a377fee51219e917893248391b7b2fa8d1bedc3ac71e5dd6ac382a0c8e0753f16bda800108d9dcbf9ccb192136b1cc555129afd8821b007543ff2d14f07003fe05cdd5fd133295c36bd44aca53c8fd91428fbd72951d4a97006636456baeac6c4d2f75d864e5aec7e738d865f2a0e5bdfadccc2486241fb38c024f981b08c8ad06bd48e99ee116c764d894f39e603949a4644ab2ed942d933876f16949c833f0bf1962b908087ff77b9318945edd47cf5c6b329e0dc403944fc9fc49e0c88f0177ba649ce61b4758ccdce20df2abbc45fec9e350286898d3fbc0ace3f75a5d8667438217ad564903ce64ee98e90ea770e431bec58c7d624278c5dc5955a555056be562308c7a003abdeb13456d43c245bcaa63c4ed17a4fb73cd53d890130322ad78c9b53073e7146ee8cc36f29f632c0e554dbcf161ab7a01badd56a0d84c8f337a2a3248c4ec96445158cb59060c352df81f6b85cccda5a0d737d44101a413d9edf5ed0bf16537520bd544e25540124ac7fc202bb8db6b141fca9cc25e85b4d064535de0dc5b8868025b71f8950ddc35d6b1bf04d8440c8ea2660fa3476578981bb467e9a54a9ebb2561f1414d34a922168537cde92375d6bb4e35cf4e2655cb0daca2a1b75013a9a5f72768b061492a381d1e339970a322f07ff3d0b9af33af6a191ed778a99b721eb89a294ebf76748230837f75cb9f5f31a0dcc4b9f6dcc99487e5799e1ff5db60f7193308a4b40dcac5e9aa3a288c03d724a5e2da794590446c236234eb0b34cc60fde282400039d7a263fad5b2df94907c54b07cc0d3e6d97a64e7306131f741caec8bfca4e40b033f4633a63d0845db13b0b59b3eb0ad2cde32856ee356d8e910524f71aa75d1b527bd0c69c7126f7d18644c3547acedcac805f9077778362d40004e8fb4d6de7f3dd679e1519f8896174be1fb9313", @ANYRES32=r4, @ANYBLOB="08001000070000000000000c00230000000000000000001400be00fe80000000000000000000000000000a0800", @ANYRES32=0x0, @ANYBLOB="0800180004000000", @ANYRES32, @ANYBLOB="0800c0000000000004004f8008009e0064010102a5fa1bc096f70000"], 0x1000}], 0x1, 0x0, 0x0, 0x10004800}, 0xc000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xf0) r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f00000000c0)={0xf0f03c, 0x4}) sendto$inet6(r5, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) 6.613722984s ago: executing program 2 (id=152): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) 6.32986987s ago: executing program 2 (id=153): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000000000002d5, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000240)={{0x62, @local, 0x4e21, 0x0, 'lblc\x00', 0x0, 0x7, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4e23, 0x4, 0x6, 0x1, 0x9}}, 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) ptrace$getregs(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)=""/216) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 6.235686157s ago: executing program 3 (id=154): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) setpgid(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r2) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3348484bb8df93fe521fe1040f858fb0192fdb61165ae96e54e95f986e1991666a28ea84021377f854fb46b740fc923244159bca8f8f9df6582f8c01dc05733e2e55fc52557ead879afe7c49146aea5741c8105fe87b521f427bf000000000000000000000000000000000000000000000000000000000000004f701390124865885190ca06cb4f206ba657fc27bf050e5038735848f0cf75411468e4dfe3b6b09f3604b8e53e9e597e20f046c1cd9dcbced8b86658007017e0"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000300"/28], 0x50) mq_open(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x40, 0x1, &(0x7f00000000c0)={0x2, 0x40, 0x1531b10a, 0x3}) sendmsg$nl_route_sched(r3, &(0x7f00000034c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003480)={&(0x7f0000000680)=@deltfilter={0x1f2c, 0x2d, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff1}, {0xfff3, 0xd}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x5}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xd050}, @filter_kind_options=@f_flow={{0x9}, {0x424, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xfffffff9}, @TCA_FLOW_POLICE={0x418, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0xdd59}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0xf392, 0x3, 0x0, 0xab0ac5c, 0x80000000, 0x8, 0x3, 0x8, 0x7, 0x256, 0x7, 0x10, 0x6ed, 0xf8a, 0x0, 0xa603, 0x9, 0x2, 0x70, 0x8, 0x5, 0x3, 0x800, 0x1ff, 0x40, 0xa, 0x6ca, 0x6, 0x59, 0x3, 0xf8, 0x3, 0x1, 0x7, 0x9, 0x2, 0x3d0, 0x375, 0x9, 0x10000, 0x1000, 0x4, 0x80, 0x9, 0x4, 0x58, 0x5, 0x7, 0x6, 0x3, 0x0, 0x80000001, 0x4, 0x1, 0x9, 0x0, 0x1000, 0x7, 0x6, 0x8001, 0x3, 0xd56, 0x7, 0x9, 0x25, 0x8, 0x6, 0x80, 0x5, 0x80000000, 0x1, 0x0, 0x2, 0xc, 0x0, 0x5, 0x82f3, 0xb181, 0xff11, 0x5, 0x4, 0x1, 0xbd, 0x4, 0x4, 0xffffffff, 0xf, 0x2, 0x5, 0xe3, 0x7159423b, 0x1, 0x6, 0xc0000, 0xfffff2a1, 0x8000, 0x1, 0xffffffff, 0x1, 0xfffffff2, 0x586, 0x3, 0x0, 0x6, 0xfffffff8, 0x1, 0x3, 0x9, 0xffff, 0x4, 0x7, 0x617a, 0x3, 0x4, 0x2, 0xc436, 0x10, 0x8, 0x2, 0x7f, 0x0, 0x69, 0x5, 0x0, 0x40, 0x8000, 0x1, 0x40000000, 0xff, 0x5, 0x8, 0x6, 0x8, 0x7ff, 0x3, 0x2, 0x6, 0x4, 0x4, 0x8000, 0xfffffc01, 0x4, 0x8000000, 0x2, 0xfffffffa, 0x7, 0x1, 0xb, 0xfffffffd, 0x1, 0x200, 0xfffffffe, 0x7, 0x5, 0x5, 0x3, 0x2, 0x7, 0x2, 0x7fffffff, 0x0, 0x2, 0x2, 0x3ff, 0x401, 0x7fff, 0x3, 0x200, 0xb9, 0x400, 0x80, 0x400, 0x80, 0x200, 0x8001, 0x4, 0x0, 0x8, 0x80000001, 0x2, 0x4b64e770, 0xa, 0x80, 0x7, 0xb, 0x400, 0x8001, 0x1, 0x3, 0x9, 0x7, 0x923, 0x3ff, 0x2, 0x10, 0x3, 0x3, 0x7ff, 0x209, 0x64, 0x3, 0x10001, 0x4, 0x3ea, 0x8, 0xe0e1, 0x1, 0x443b, 0x2, 0xfffffff8, 0x3, 0x5, 0x10, 0xe437, 0x8, 0x3, 0x6, 0x401, 0x2, 0x9, 0x0, 0x2, 0x4, 0x9, 0x4, 0xf, 0x8, 0x81, 0x1, 0x1000, 0x8, 0x8, 0xf, 0x2, 0x7fffffff, 0x100, 0x4, 0x7ff, 0x8, 0x3ff, 0xc25, 0xffff, 0xe, 0x401, 0x6, 0x16, 0x37400000, 0x2, 0x4, 0x7, 0x2, 0x1, 0x5, 0x9df]}, @TCA_POLICE_AVRATE={0x8}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xc58, 0x2, [@TCA_CGROUP_POLICE={0xc54, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1400000, 0x940a, 0x89b3, 0x4, 0x9, 0x4f, 0xffff, 0x80000001, 0xdc8, 0x4, 0x2, 0x102, 0xb1, 0x1ff, 0x5, 0x80, 0x100, 0x7, 0x6, 0xfffffff7, 0x0, 0x2, 0xfff, 0x7, 0x5, 0xffffffff, 0x4, 0x29b9, 0x24fa, 0x4, 0x7, 0x6, 0x80, 0x80000001, 0x7, 0x400, 0x3, 0x7f, 0x8, 0x5, 0x1470, 0x8, 0x401, 0xfffffffd, 0x3, 0x5, 0xd1, 0xa9a9, 0x9, 0x1, 0xc, 0xffff, 0x101, 0x80, 0x6, 0x1, 0x8, 0x1, 0x2, 0xde, 0x2, 0xfffffffb, 0xffff775e, 0x5, 0x5b, 0x6, 0x1, 0x4, 0x4, 0xfffffffe, 0x9, 0x0, 0x2, 0x9, 0x3, 0x86, 0x1, 0x0, 0x143d, 0x7fff, 0x40, 0x3, 0x3cf47d97, 0x5fc, 0x80000000, 0x8, 0xa, 0x2, 0x7, 0x3, 0x9, 0x6, 0x200, 0x5f800, 0x1, 0x81, 0x2, 0xc, 0xea9a, 0xffff, 0x2, 0x5, 0x7ff, 0x892, 0xffff0000, 0x8, 0x1, 0xfffffffb, 0xd1, 0x2, 0x9, 0x1, 0x1c00000, 0x7fff, 0x4, 0x3, 0x9, 0x1000, 0x9, 0x5, 0xd, 0x1, 0x1, 0xc09, 0x44dc, 0x80000000, 0x400, 0x5, 0x4, 0x7, 0x2, 0x7f, 0x10001, 0x4, 0x400, 0x6, 0x8, 0x7, 0x7, 0x9010a5e0, 0x0, 0x9, 0x7, 0xffffffff, 0x481c, 0x17, 0x1000002, 0x0, 0x6, 0xad4, 0x4, 0x8, 0x74, 0x407a, 0x4, 0x401, 0x10000, 0x9, 0x8001, 0xffffffec, 0x8, 0x401, 0x10001, 0x5, 0x8, 0x7, 0x85, 0xe40, 0x1, 0x5, 0x5, 0x3000000, 0x9, 0x1, 0xfffff386, 0x5, 0x5, 0xf2b, 0x6, 0x0, 0xff, 0x9, 0x562d5254, 0x6, 0x2, 0x6569, 0x7c, 0x4, 0x55e9, 0x43360000, 0x6c, 0x7, 0x0, 0x2, 0x9, 0x7fffffff, 0x2, 0x8001, 0x0, 0xd, 0x299, 0x98e9, 0xffffffff, 0x10001, 0x3, 0x400, 0x3, 0x0, 0x3, 0x9, 0x1, 0x22, 0x4, 0x5, 0x101, 0x1, 0x5, 0xffffffff, 0x1dc0000, 0xf057, 0x8, 0x4, 0x3a40, 0x4, 0x8f0, 0x8, 0xffff, 0xfff, 0x8, 0x8, 0x1, 0x7ff, 0x1, 0xf8, 0x9, 0xb, 0x50063ef7, 0xfffffffd, 0xfffffff8, 0x70, 0x9, 0x40, 0xfffffbff, 0x2c, 0x2584, 0x3, 0x7, 0x2b7f, 0xffff1d1e, 0xfffffff7, 0x6, 0xffffffff, 0x177, 0x67, 0x4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x222472211696d7e4, 0x660bc925, 0x3, 0x5, {0x9, 0x0, 0x80, 0x7, 0xa, 0x6}, {0x3, 0x2, 0x3, 0xff50, 0xc95, 0x8}, 0x4, 0x1, 0x1db7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x8, 0x91, 0x2a8, 0x6, 0xc, 0x80000000, 0xffffffff, 0x239, 0x8, 0xa, 0x1, 0x5, 0xe6, 0x4800, 0x4, 0xffff8001, 0x3, 0x7ff, 0xd09, 0x7, 0x1, 0x7f, 0xfe, 0xf97, 0x4ac, 0x9, 0x9, 0x81, 0x252, 0x9, 0x2, 0x1, 0x8001, 0x3, 0x3, 0x4, 0xf0f, 0x9, 0x0, 0x8, 0x0, 0xda7, 0x49, 0x7d, 0x2, 0x4, 0x4, 0x1, 0x200, 0xdd4, 0xfffffa62, 0x0, 0xfffffdda, 0xc, 0x0, 0x7f, 0x1ff, 0x0, 0xbf6, 0x0, 0x1000, 0x802, 0xfffffffe, 0x81f, 0xa6, 0x17d9, 0x8, 0xff, 0x3, 0xffff, 0x6, 0x5, 0xe, 0x6, 0x58e, 0x2f6, 0x80000001, 0x0, 0x7fffffff, 0x1a9b8ad9, 0x7, 0x67, 0x7, 0x4, 0x7, 0x9, 0x5d76, 0x8, 0xff, 0x4, 0x5, 0x80000001, 0xfffffff9, 0x1, 0x400, 0x8, 0x3, 0x5, 0xe5a, 0xe62, 0x7, 0x6, 0xffffffff, 0x7, 0xc, 0x3, 0x9, 0x9, 0x9, 0xa25, 0xffff638f, 0x2, 0x1, 0x1, 0x400, 0xd, 0x6, 0xd, 0xd444, 0x6, 0x8, 0x5, 0x7, 0x8, 0x2, 0x400, 0x7f, 0x3, 0x7, 0x2, 0xfffffff9, 0x400, 0x2, 0x0, 0x1, 0xfff, 0x3, 0xbbbb, 0x80000001, 0x9, 0x81, 0x8, 0x800, 0xa5, 0x1, 0x9, 0x10, 0x80000001, 0x7ac8224c, 0xffffffff, 0x9, 0x1, 0x3, 0x0, 0xed32, 0xf, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x4, 0x4, 0x5, 0x1, 0x3eef2bbb, 0x9, 0x1ff, 0x9, 0xff, 0xdee1, 0x1ff, 0x5, 0x2, 0x4, 0x10000, 0x3, 0xffffffff, 0x4, 0x80000001, 0x9, 0x2, 0x3, 0x2, 0x10, 0xffff, 0x5, 0x4, 0x4, 0x3, 0x2, 0x0, 0xe, 0x0, 0x6d40, 0x0, 0x2, 0xfff, 0x3, 0x1, 0x20c, 0x1000, 0x9, 0x6, 0x3, 0x8, 0x7f, 0x80000, 0x4, 0x455, 0x8, 0x9, 0xfffffff7, 0x43d, 0x2, 0x9, 0x4, 0x7, 0x4730, 0x6665, 0xb7, 0x9, 0x26, 0x5, 0x8, 0x5b30, 0x1, 0xffff, 0x4, 0x100, 0x8, 0x9, 0x9, 0x3, 0x3, 0x5, 0x80000000, 0x8, 0x7, 0x3, 0x5, 0x5, 0x80000001, 0x8, 0x6, 0x4, 0x78, 0xb, 0x8000, 0x0, 0xb6, 0xfffffffc, 0x8000, 0x200, 0x8]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0xe, 0x1, 0x9, 0x8, 0x3, 0x5, 0x41, 0x5, 0x56, 0x6, 0x3, 0x9, 0x6, 0x80000000, 0x3, 0xffffffff, 0x2, 0x5, 0xd05, 0x1, 0x5, 0xa, 0x9, 0xffffffff, 0x4, 0x2, 0x0, 0xf, 0xfffffffd, 0x4, 0x8, 0x18, 0x80000001, 0x3, 0x4, 0x81, 0x4, 0x4, 0x401, 0x3145, 0x5, 0xfffffffc, 0x7fffffff, 0x800, 0x3, 0x7fff, 0x10, 0xe, 0x0, 0x8000, 0x9, 0x3, 0x1, 0x6, 0x5, 0x0, 0x10000, 0x88c, 0xf339, 0x5973, 0x9, 0x8, 0x5, 0x40, 0x3, 0x0, 0xdef, 0x0, 0x3, 0x10001, 0x3, 0x2, 0x100, 0x6, 0x8, 0x8, 0x100, 0x5, 0x81, 0x8, 0x3, 0x7, 0xa, 0x1ff, 0x8, 0x7, 0xfffffff2, 0x4, 0xacc, 0xf42, 0xdf8, 0x0, 0x9, 0x6, 0x1, 0x3, 0x5, 0x9, 0xffffffc0, 0x7fffffff, 0x5, 0x5, 0x8e, 0x5da5, 0x7, 0x0, 0x6, 0xa, 0x5, 0x10001, 0x9, 0xe, 0x1200000, 0x3, 0x1, 0xfffffffc, 0x5, 0x8, 0xffff87cc, 0x444, 0xc1b, 0xa2, 0x0, 0xee, 0x9, 0x5, 0x7, 0x8001, 0x5, 0x2, 0x1, 0x63c, 0x4, 0x7, 0x3, 0x6, 0x800, 0x7fcf, 0x40, 0xb0f1, 0x200, 0x103e, 0x7fff, 0x8001, 0x100, 0x1, 0x10, 0x10001, 0x3, 0xe, 0x4, 0x3, 0x60c3, 0x3, 0xfc62, 0x7fffffff, 0xc, 0x1, 0x2, 0x8, 0x80000001, 0x5, 0x5, 0x618f, 0x2, 0x10, 0x2, 0x2, 0x1, 0x200, 0x8c, 0x10, 0x40, 0x0, 0xfff, 0x8000, 0x8d5, 0x80, 0x81, 0x5, 0x7, 0x4, 0x6, 0x1, 0x6, 0x2, 0x336a, 0x80000001, 0x3, 0xe7f, 0x0, 0x7f, 0x10001, 0x4, 0x5, 0x2, 0x7, 0x1, 0x2, 0xc70, 0x4614a948, 0xb, 0x2, 0x6, 0x200, 0x0, 0x5, 0x1e, 0x6, 0xfbaa, 0x0, 0x2, 0x9, 0xa5b, 0x5, 0x80, 0x2, 0x5, 0x9, 0x1, 0x400, 0x0, 0x2, 0x7, 0xfb8f, 0x1ff, 0x7, 0x406e, 0x7, 0x800, 0xeb, 0x9347, 0x4, 0x1, 0x1ff, 0x6, 0x7, 0x3a8, 0x7, 0x7fffffff, 0x1, 0x7, 0x361, 0x8001, 0x4, 0x40, 0x0, 0x6, 0x9, 0x80000000, 0x7ff, 0x77, 0xfffff537, 0x1ff]}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0xe38, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0x6}}, @TCA_FW_ACT={0x1b0, 0x4, [@m_pedit={0xe0, 0x13, 0x0, 0x0, {{0xa}, {0x40, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x3c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x78, 0x6, "3f7ca45747050971d42907aac364d8593628f16305036e8fdfa4ab2d74c1f06d34035b16243533fb2222d4d9cdaafa3f3dc1cc6ff5908c82496d0de5949b44725658a2802ad7997447c12b0195b9fd8058fa1445d2c6d6c6ab2908e15700e5dfecd2b54ec13ad3cedf9d2932db7ac5397036d896"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xcc, 0x9, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x93, 0x6, "85fc953f89092745b023866459280531bee3c3ea4c4054596cc1ffbccebf84b2fd8cb6a393af83db9d7e1a2d5438bffa6286d4370f0dbf3d842196797501a3a79745e11faf44353729b4116637e66c6b63f54ebd3680af0574e92ea6f99e5c55019a0395fabdf49ba277f165b37f7c39e86a960b6e6918f7fa8e2e5550cd1966add616e77cc1ef15e3264ed373c092"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FW_POLICE={0xc74, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x400, 0x4, 0xfff, {0x4, 0x0, 0x6, 0xfff8, 0x0, 0x1}, {0x5, 0x2, 0x70, 0x1, 0x2, 0xffffffff}, 0x9, 0x0, 0x7ec3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x4e2d16ef, 0x2f51, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x1, 0x9, 0x80000001, 0x1, 0x40, 0x2, 0x2f, 0x6, 0x7, 0x9, 0xfffffe01, 0x8, 0x5, 0x6, 0x200, 0xfffffffc, 0x9, 0x7, 0x2be1, 0x8, 0x1, 0x2, 0x4, 0x80, 0x63c, 0x9, 0x9, 0x7fffffff, 0x8, 0xdf2, 0x5e36f56f, 0x101, 0x9, 0x4, 0x7, 0x1ff, 0x6, 0x6, 0x5, 0x7fffffff, 0x3, 0x4, 0x7a55, 0xc3, 0x0, 0x3ff, 0x0, 0x401, 0x81, 0x200, 0x82be, 0x40, 0x2, 0xfffffffd, 0x80, 0x7, 0x9, 0x200, 0x1, 0x8, 0xffff8001, 0x8, 0x8000, 0xe3e, 0xffff, 0x0, 0x4a97, 0x807e, 0x7fff, 0x1000, 0x7ff, 0x2, 0x4, 0x1, 0x0, 0xe, 0x9, 0x3, 0x4738, 0xf2, 0x3, 0x81, 0x3, 0x0, 0x7, 0x7, 0x242, 0x43a1, 0x4, 0x3, 0x5, 0x9, 0x6, 0x5, 0x7, 0x2, 0x7ee3, 0x697f7343, 0x1ff, 0x34df, 0x3, 0x400, 0x624, 0x4, 0x1, 0x800, 0x2, 0x1e, 0x3, 0x3, 0x7, 0x1, 0x7, 0xde, 0x2, 0x80000000, 0xff, 0x0, 0x3, 0x4, 0x80, 0x0, 0x7, 0xb, 0xd, 0x5b1, 0x2, 0x6, 0x5, 0x8, 0x3ff, 0x1, 0x40, 0x2, 0x0, 0x8, 0xa10c, 0xc, 0x9, 0x6, 0x8, 0xfffff000, 0x4, 0xff, 0x2, 0x32731eb3, 0x7, 0x993, 0x8, 0xd888, 0xad1f, 0x1, 0xfff, 0xa5a5aa15, 0xfffffffb, 0x5, 0x0, 0xff, 0x5, 0xfffffe64, 0x4, 0x245, 0x9, 0x9, 0x5, 0x1000, 0x5, 0xfffffff9, 0x80000001, 0x8, 0x6, 0x2, 0x34, 0x6, 0x35c, 0x6, 0xffff, 0xcb, 0x5, 0x7, 0x9, 0x9, 0x9, 0x5, 0x3152, 0x5, 0x8001, 0x0, 0x401, 0x9, 0x7, 0x8, 0x3, 0x6, 0x3, 0x4, 0xb, 0x7, 0x46, 0xab, 0x4, 0x0, 0x80, 0x7, 0x1, 0x4, 0x0, 0x3, 0x7fffffff, 0x385, 0x6, 0x4, 0x5, 0x7, 0x4, 0xd, 0x9, 0x7fffffff, 0x200, 0x3, 0x5, 0x8, 0xf, 0xe, 0x6, 0x1, 0x6, 0x9, 0x3, 0x2, 0xffffffd9, 0x0, 0x6, 0xb36, 0x5, 0x1, 0x0, 0x1, 0x1, 0x3, 0x7657, 0x100000, 0x101, 0x6, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x6, 0x5, 0x3, 0x6, 0x8, 0xffffffff, 0x1, 0x0, 0x1f8bc00, 0x7fffffff, 0xfffeffff, 0x5, 0x8, 0x10000, 0x101, 0x7, 0x4, 0xffffffff, 0x8, 0x4, 0x81, 0x65f584fb, 0x2, 0x3, 0xffff, 0x0, 0x61f6, 0x2, 0x0, 0x9, 0x101, 0x1800000, 0x4, 0x5, 0x3, 0x8000, 0xaaba, 0x1, 0xfa, 0x3, 0x100, 0x6, 0x3, 0xfff, 0x4, 0x8000, 0x5, 0x6, 0xfff, 0xffffd3f4, 0xfffffffd, 0x7ff, 0x0, 0xb, 0x8000, 0x80, 0x5, 0x496, 0x9, 0x6, 0xffff831c, 0xf, 0x9, 0x5, 0x0, 0x8001, 0x2, 0x1, 0x7fff, 0x9, 0x4, 0xffff, 0x0, 0x9, 0x3d5cc0e2, 0x200, 0x81, 0xfffff000, 0x5, 0x2, 0x4, 0x5, 0x7, 0x200, 0x8b8, 0xd, 0x1aec, 0xfc, 0x7, 0x7, 0x1, 0xfc, 0x8, 0x5, 0x1, 0xfe9c, 0x8, 0x9, 0x1, 0xfd7, 0x2, 0xc5, 0x8, 0x5e2b, 0xc, 0x0, 0x4, 0x7, 0x80000000, 0x2, 0x2, 0xa, 0xb11, 0x145, 0x513a, 0x7a51, 0x10001, 0x3b, 0xffffffff, 0x7, 0x4, 0xe, 0x99be, 0x1, 0x3, 0xb, 0x5, 0x7, 0x423, 0x7, 0x1000, 0x2, 0xffffffff, 0x400, 0xfffffff7, 0x2, 0xfff, 0x8, 0x0, 0x7fffffff, 0x5, 0x9, 0x3, 0xfff, 0xd37, 0x0, 0x6, 0x7, 0x8, 0x7, 0xc, 0x2, 0x7fff, 0xcd5, 0x10, 0x400, 0xc, 0x10000, 0x0, 0xfffffffb, 0x401, 0x2, 0xfffffffd, 0x4, 0x5e71, 0x1, 0x302, 0x4, 0x0, 0xa919, 0x7, 0x7, 0x3, 0x5384, 0x4, 0xfffffffb, 0x101, 0x4, 0x100, 0x2, 0x1, 0x101, 0x8001, 0x4, 0x3, 0x3, 0x8, 0x56b2, 0x5, 0x1, 0xe, 0x1ff, 0x200, 0x4, 0x5, 0x5, 0x4, 0x10000, 0x5, 0xe2, 0x2, 0xffff4fbe, 0x0, 0x3, 0x4, 0x4, 0x7f, 0xb, 0x3, 0x65, 0x1, 0x59ec, 0x7fff, 0x85, 0x2, 0x9, 0x4, 0x80000000, 0x6, 0x80, 0x7fff, 0x8, 0x7, 0x3, 0x0, 0x7, 0xffff, 0x1fe000, 0x5, 0x5977, 0x4, 0xdedd, 0x1000, 0x3, 0x0, 0xb, 0x762, 0xff, 0x0, 0x3ff, 0xfffffffc, 0x2, 0x3, 0x9, 0x3, 0xfffffffd, 0x3ff, 0x7ff, 0x5, 0x2, 0x5, 0x8, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0xf95, 0x6, 0x5, 0xe96e, 0x1ff, 0x6, 0xe16, 0x6, 0x2, 0x9, 0x2, 0x900, 0x58d, 0xa, 0xf2, 0x8, 0x0, 0x0, 0x7fffffff, 0x2, 0x8, 0x9, 0x0, 0x2, 0x9, 0x571d, 0x8, 0x1, 0x101, 0x200, 0x0, 0x10001, 0xfffffffc, 0x1ff, 0xcc, 0xfffffffc, 0x100, 0x4, 0x1, 0x9, 0x1, 0x4, 0xfffffffc, 0x40, 0x4, 0x10000, 0x0, 0xfee9, 0x7, 0x8, 0x0, 0x6, 0x2, 0xb, 0x81, 0x8000, 0x4, 0x7f, 0xd, 0x4, 0x8, 0x42a, 0x80000000, 0x5, 0x3, 0x1, 0x80, 0x3, 0x2, 0xffffffff, 0x10, 0x3, 0x8, 0x7, 0xfffffc00, 0x6, 0x9, 0x6, 0x6, 0xc5, 0x442, 0x5, 0xe, 0x350, 0xff0, 0xfffffff7, 0x0, 0x323c, 0x9, 0x3, 0xffffd30a, 0x9, 0x9, 0x3, 0xb, 0x4, 0x4, 0xc, 0x15b7, 0x3c6, 0x100, 0x8, 0x80000000, 0xffffffff, 0x40, 0x6, 0x10000, 0x6, 0x4, 0x3, 0x101, 0x525a, 0x7, 0xa, 0x3, 0x7, 0x4, 0x8, 0x4, 0x1, 0xffffff60, 0x8, 0x3, 0xf, 0x4f446098, 0x6, 0x6, 0x7, 0x6, 0x5, 0x2, 0xc1, 0x10, 0x9, 0x9, 0xffffff80, 0x3, 0x3ff, 0xfffffffe, 0x9, 0x4, 0x49d, 0x2, 0x0, 0x9, 0x1, 0xc7, 0x682, 0x3, 0x1, 0x7, 0x5, 0x9, 0x5b46, 0x3ff, 0x6, 0x8000, 0x4, 0x92d, 0x1, 0x10001, 0x2, 0xdf, 0xffff, 0x8, 0x214, 0x4, 0x1ff, 0x4, 0x5, 0xfffffffb, 0x80, 0x8, 0x7, 0x9, 0x8, 0x97d, 0xa, 0x744, 0xa, 0x4, 0xef5, 0xfffffff7, 0x6, 0xffff, 0x9, 0xfff, 0x8, 0x5, 0x879, 0x3, 0x3, 0x40, 0x2, 0x5, 0x101, 0x7, 0x7ff, 0x0, 0xfffffffe, 0xecc7, 0x7, 0x401, 0x2, 0x3, 0x9, 0x10, 0x7, 0x5f, 0x4, 0x3365, 0x9, 0xf99, 0xd, 0x8, 0xd, 0x80000000, 0x581, 0x5, 0x1, 0x7ff, 0xffffffff, 0x8, 0x6, 0x400, 0x9, 0xd, 0xffff, 0x6, 0x1, 0x1, 0x0, 0xb, 0x1, 0x7, 0x4, 0x7ff, 0x0, 0x6, 0x3, 0x76f6, 0x3, 0x5, 0x6, 0x9, 0x57, 0x3, 0x8a, 0x6, 0xd7d2, 0x7, 0x8001, 0x2, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x1f2c}, 0x1, 0x0, 0x0, 0x802}, 0x20000884) pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 5.450087775s ago: executing program 4 (id=155): syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2) 5.410670266s ago: executing program 1 (id=156): ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x1000}) 5.329917927s ago: executing program 4 (id=157): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES8=r6, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x3, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {0x9, 0xf}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.277145574s ago: executing program 1 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, 0x0, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/83, 0x53}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4, &(0x7f0000000540)=""/100, 0x64}, 0x9}, {{&(0x7f00000006c0)=@ax25={{0x3, @null}, [@netrom, @rose, @netrom, @null, @remote, @bcast, @default]}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1, &(0x7f0000000840)=""/60, 0x3c}, 0xcfeb5e57}, {{&(0x7f0000000880)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000900)=""/12, 0xc}], 0x1, &(0x7f0000000980)=""/109, 0x6d}, 0x5}, {{&(0x7f0000000a00)=@tipc=@id, 0x80, &(0x7f0000001040)=[{&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000000b80)=""/185, 0xb9}, {&(0x7f0000000c40)=""/252, 0xfc}, {&(0x7f0000000d40)=""/18, 0x12}, {&(0x7f0000000d80)=""/211, 0xd3}, {&(0x7f0000000e80)=""/204, 0xcc}, {&(0x7f0000000f80)=""/185, 0xb9}], 0x7}, 0x401}, {{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001140)=""/192, 0xc0}, {&(0x7f0000001200)=""/156, 0x9c}, {&(0x7f00000012c0)=""/168, 0xa8}, {&(0x7f00000024c0)=""/234, 0xea}, {&(0x7f00000025c0)=""/140, 0x8c}], 0x5, &(0x7f0000002700)=""/254, 0xfe}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002880)=""/208, 0xd0}, {&(0x7f0000001380)=""/59, 0x3b}, {&(0x7f0000002980)=""/176, 0xb0}, {&(0x7f0000002a40)=""/121, 0x79}, {&(0x7f0000002ac0)}, {&(0x7f0000002c00)=""/10, 0xa}, {&(0x7f0000002c40)=""/25, 0x19}], 0x7, &(0x7f0000002d00)=""/198, 0xc6}, 0xd}, {{&(0x7f0000002e00)=@tipc=@name, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e80)=""/145, 0x91}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/13, 0xd}, {&(0x7f0000002fc0)=""/249, 0xf9}], 0x2, &(0x7f0000003100)=""/145, 0x91}, 0x380}], 0x8, 0x20, &(0x7f00000033c0)={0x0, 0x989680}) 4.388874813s ago: executing program 1 (id=159): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="00150100000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.350514728s ago: executing program 2 (id=160): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P7 \x0fy\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x196, &(0x7f0000000440)={0x6, 0x8, 0x100307, 0x3}) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full', 0x20, 0x0, 0x20, 0xe1}, 0x2f) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000340), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80800) fchdir(r7) r8 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x0) 4.329176588s ago: executing program 0 (id=161): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r0, 0x118, 0x4, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) close(r2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_submit(0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, &(0x7f0000000700)=[{0x1}], 0x1, 0x2, 0x0, 0x0, 0x0, 0x4c}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') 3.378190019s ago: executing program 0 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0xffff2000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) epoll_pwait2(r5, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d022bbd7000fedbdf2501000000050005000400000008000400ffff00000800030006000000050006"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fc0200000014000100fe88000000000000000000000000010114000100fc0000000000000000000000000000000500060002000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x880) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) 3.057301283s ago: executing program 3 (id=163): r0 = socket$inet6(0xa, 0x4, 0xfffffff9) socket(0x9, 0x4, 0x8a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x15, 0x800, 0x80000000) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000006c0)={0x4, {{0xa, 0x4e23, 0x8, @private2, 0x573}}, {{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}, 0x108) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x20542, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0044d00, &(0x7f0000000200)=0x28) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000000580)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000980)=""/4096, 0x1000, 0xbc8c, 0x9, 0x1, 0x7ff, 0x7fff}}, 0x120) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="2f400ca50e9dbf79484f5671d4bc7d69009f2f94122d827c0c5e59f69e323f85073c8ae66af70d429fcba307b911c3763550b78a2dc2ef54cf1bc843f050d0257ec9f4deb1589b38d5a73cff4220d6e62002df7a804b62655d5703a2dfe212f0f9c8f983d5ab64aabf1f8c4e08f9b0974e1d08638d73d59c564f744fe0bbf92e57094849028e4dc202db7a980925f707000000000000000000c97654796a2cf17928ffe87b07aa95d275e12a9987ba412382b5f7ed3faf200990e217670476085725ba4e347b0e85d3cf1ede1ef551e63bc7268703b0bc2266c20bb436793877da03ed2286a36a06cbaab71626cc0cd9361c04a12d090f382b4ec82134a4ba80b3271aaef0e683a1089d721f8bad9b0bb11b866ebb25c84102e698212baba1d8cf245f0e442f5aca8dda9f8fe96b4bd0116d7f3c0f0b652e53023953a23c0ab26b3ac1b847af1d7bfba54a7b91bd569e6d6b6269ff483480870cd54adfabfa3a180f7e92ba512bec82e37aa2ee04b672609fc278e0490f7cfd2e67bc3a57b0c45477566a712d6d949ec8db739bbef0d99683d84c3402d677aa333e4046922903e2d6b1e81556b924e8089ba862bf47d959e0dbb5a9c4610b38a5254827f5db15694027af410b22b85989a81e78a1fb9d415622801e8d0ed5e0b1e2c8bde548d599a8fa776bdb826f2071f31fb81b15", @ANYRES32, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000030200000040000dd4b19815c52"], 0x20) socket$inet6(0xa, 0x802, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) 2.053412965s ago: executing program 0 (id=164): r0 = socket$inet6(0xa, 0x4, 0xfffffff9) socket(0x9, 0x4, 0x8a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x15, 0x800, 0x80000000) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000006c0)={0x4, {{0xa, 0x4e23, 0x8, @private2, 0x573}}, {{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}, 0x108) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x20542, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0044d00, &(0x7f0000000200)=0x28) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000000580)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000980)=""/4096, 0x1000, 0xbc8c, 0x9, 0x1, 0x7ff, 0x7fff}}, 0x120) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000030200000040000dd4b19815c52"], 0x20) socket$inet6(0xa, 0x802, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) 1.663154262s ago: executing program 4 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/83, 0x53}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4, &(0x7f0000000540)=""/100, 0x64}, 0x9}, {{&(0x7f00000006c0)=@ax25={{0x3, @null}, [@netrom, @rose, @netrom, @null, @remote, @bcast, @default]}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1, &(0x7f0000000840)=""/60, 0x3c}, 0xcfeb5e57}, {{&(0x7f0000000880)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000900)=""/12, 0xc}], 0x1, &(0x7f0000000980)=""/109, 0x6d}, 0x5}, {{&(0x7f0000000a00)=@tipc=@id, 0x80, &(0x7f0000001040)=[{&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000000b80)=""/185, 0xb9}, {&(0x7f0000000c40)=""/252, 0xfc}, {&(0x7f0000000d40)=""/18, 0x12}, {&(0x7f0000000d80)=""/211, 0xd3}, {&(0x7f0000000e80)=""/204, 0xcc}, {&(0x7f0000000f80)=""/185, 0xb9}], 0x7}, 0x401}, {{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001140)=""/192, 0xc0}, {&(0x7f0000001200)=""/156, 0x9c}, {&(0x7f00000012c0)=""/168, 0xa8}, {&(0x7f00000024c0)=""/234, 0xea}, {&(0x7f00000025c0)=""/140, 0x8c}], 0x5, &(0x7f0000002700)=""/254, 0xfe}}, {{&(0x7f0000002800), 0x80, &(0x7f0000002c80)=[{&(0x7f0000002880)=""/208, 0xd0}, {&(0x7f0000001380)=""/59, 0x3b}, {&(0x7f0000002980)=""/176, 0xb0}, {&(0x7f0000002a40)=""/121, 0x79}, {&(0x7f0000002ac0)}, {&(0x7f0000002b00)=""/211, 0xd3}, {&(0x7f0000002c00)=""/10, 0xa}, {&(0x7f0000002c40)=""/25, 0x19}], 0x8, &(0x7f0000002d00)=""/198, 0xc6}, 0xd}, {{&(0x7f0000002e00)=@tipc=@name, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e80)=""/145, 0x91}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/13, 0xd}, {&(0x7f0000002fc0)=""/249, 0xf9}], 0x2, &(0x7f0000003100)=""/145, 0x91}, 0x380}], 0x8, 0x20, &(0x7f00000033c0)={0x0, 0x989680}) 1.325290702s ago: executing program 1 (id=166): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x44f3, 0xfd, 0x206, 0x0, 0x3, 0x2, 0x4, 0x20f, r2}, 0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0xff3b) r5 = socket$packet(0x11, 0x2, 0x300) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioperm(0x7f, 0x8, 0x5) ioctl$FIDEDUPERANGE(r5, 0xc0189436, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/4122, 0x101a}], 0x1) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002600)=""/152) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback}, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'lo\x00'}) 1.008030249s ago: executing program 3 (id=167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f00000002c0)=@random="946338fc5d77c6009ab8c9d440bb8528", 0x10, 0x2) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000000c0009800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001fffffff8500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="03000000000000000000020202000900010073797a30000000000900769d9c5a7adab4e9cc99bcde98030073797a66d5a28e4abbd0b66386f0dd24e1881a235267fd0652771409e06d3db191c812f67c2dfd273ca4a1b634b548d7e10214fa69704b209f69599825"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x20854}, 0x4) close(r2) ioctl$PPPIOCGIDLE(r2, 0x8010743f, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES32=r9], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f00000002c0)=@random="946338fc5d77c6009ab8c9d440bb8528", 0x10, 0x2) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000000c0009800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14) (async) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001fffffff8500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="03000000000000000000020202000900010073797a30000000000900769d9c5a7adab4e9cc99bcde98030073797a66d5a28e4abbd0b66386f0dd24e1881a235267fd0652771409e06d3db191c812f67c2dfd273ca4a1b634b548d7e10214fa69704b209f69599825"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x20854}, 0x4) (async) close(r2) (async) ioctl$PPPIOCGIDLE(r2, 0x8010743f, 0x0) (async) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES32=r9], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) 967.414101ms ago: executing program 0 (id=168): ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x1000}) 930.667404ms ago: executing program 2 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, 0x0, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/83, 0x53}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4, &(0x7f0000000540)=""/100, 0x64}, 0x9}, {{&(0x7f00000006c0)=@ax25={{0x3, @null}, [@netrom, @rose, @netrom, @null, @remote, @bcast, @default]}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1, &(0x7f0000000840)=""/60, 0x3c}, 0xcfeb5e57}, {{&(0x7f0000000880)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000900)=""/12, 0xc}], 0x1, &(0x7f0000000980)=""/109, 0x6d}, 0x5}, {{&(0x7f0000000a00)=@tipc=@id, 0x80, &(0x7f0000001040)=[{&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000000b80)=""/185, 0xb9}, {&(0x7f0000000c40)=""/252, 0xfc}, {&(0x7f0000000d40)=""/18, 0x12}, {&(0x7f0000000d80)=""/211, 0xd3}, {&(0x7f0000000e80)=""/204, 0xcc}, {&(0x7f0000000f80)=""/185, 0xb9}], 0x7}, 0x401}, {{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001140)=""/192, 0xc0}, {&(0x7f0000001200)=""/156, 0x9c}, {&(0x7f00000012c0)=""/168, 0xa8}, {&(0x7f00000024c0)=""/234, 0xea}, {&(0x7f00000025c0)=""/140, 0x8c}], 0x5, &(0x7f0000002700)=""/254, 0xfe}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002880)=""/208, 0xd0}, {&(0x7f0000001380)=""/59, 0x3b}, {&(0x7f0000002980)=""/176, 0xb0}, {&(0x7f0000002a40)=""/121, 0x79}, {&(0x7f0000002ac0)}, {&(0x7f0000002c00)=""/10, 0xa}, {&(0x7f0000002c40)=""/25, 0x19}], 0x7, &(0x7f0000002d00)=""/198, 0xc6}, 0xd}, {{&(0x7f0000002e00)=@tipc=@name, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e80)=""/145, 0x91}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/13, 0xd}, {&(0x7f0000002fc0)=""/249, 0xf9}], 0x2, &(0x7f0000003100)=""/145, 0x91}, 0x380}], 0x8, 0x20, &(0x7f00000033c0)={0x0, 0x989680}) 865.308459ms ago: executing program 1 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001d31dc736347a7953cdc3b3e0fe9dd82a67dce6e66f4400ab63bf4a9f373d0a8dc74e055feae467777903f028ffad435b8cd4dcd85b318eea3c89739b8a64c64a81cfd718e91d5beb5fd568b5a5b95b9889c377198dc522655986bce690a53eae59fcdf29588113fbca018029fb57607376015f9954691872efd99de2889dfd29e7e2ec972a79ab5365c41eb15a7c7fed5736f221e96f84b2bbcfa7d7d8d518fef5de4322af70fe147e174435fc4d021ee4dfdd41c8b6c4f5894223113c383e2681d8939bf0f296ddc6e3840dc9b07bf89", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) (fail_nth: 3) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x5000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0xd000, 0x3, 0x0, 0x40, 0x9, 0x80, 0x6, 0x5, 0x6, 0x3}, {0x80a0000, 0x1000, 0x0, 0x5, 0x1, 0x2, 0xfd, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xa, 0xe7, 0x3, 0xf, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0x4, 0x1000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x85, 0x0, 0xc, 0x4, 0x7, 0x80, 0xc, 0x1}, {0x100000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x80, 0x3, 0x6}, {0x100000, 0x1, 0x9, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x8, 0xf0, 0xa}, {0x10000, 0x8}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0x3000, [0x5, 0x5, 0x15e, 0x2]}) 864.696017ms ago: executing program 0 (id=171): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = syz_open_dev$loop(0x0, 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x0, 0xfe, 0x800, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) clock_gettime(0x0, &(0x7f00000025c0)) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) 0s ago: executing program 4 (id=172): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r0, 0x118, 0x4, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) close(r2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_submit(0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, &(0x7f0000000700)=[{0x1}], 0x1, 0x2, 0x0, 0x0, 0x0, 0x4c}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 57.180152][ T30] audit: type=1400 audit(1758872243.684:62): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.183872][ T5831] cgroup: Unknown subsys name 'net' [ 57.202961][ T30] audit: type=1400 audit(1758872243.684:63): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.230271][ T30] audit: type=1400 audit(1758872243.714:64): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.436379][ T5831] cgroup: Unknown subsys name 'cpuset' [ 57.444227][ T5831] cgroup: Unknown subsys name 'rlimit' [ 57.618345][ T30] audit: type=1400 audit(1758872244.124:65): avc: denied { setattr } for pid=5831 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.651629][ T30] audit: type=1400 audit(1758872244.124:66): avc: denied { create } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.672148][ T30] audit: type=1400 audit(1758872244.124:67): avc: denied { write } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.692552][ T30] audit: type=1400 audit(1758872244.124:68): avc: denied { read } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.713174][ T30] audit: type=1400 audit(1758872244.124:69): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.724209][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 57.749449][ T30] audit: type=1400 audit(1758872244.124:70): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.772929][ T30] audit: type=1400 audit(1758872244.154:71): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.732054][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.965953][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.971273][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.985728][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.993737][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.001136][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.008602][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.008708][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.016634][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.024033][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.037582][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.044663][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.053085][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.056961][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.061875][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.067612][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.082258][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.089827][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.090873][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.103376][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.104352][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.116080][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.119985][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.126343][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.146400][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.147808][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.560268][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 61.618532][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 61.649852][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 61.741988][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 61.842691][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.849876][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.857889][ T5843] bridge_slave_0: entered allmulticast mode [ 61.864617][ T5843] bridge_slave_0: entered promiscuous mode [ 61.899556][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 61.910104][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.917230][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.924514][ T5843] bridge_slave_1: entered allmulticast mode [ 61.931133][ T5843] bridge_slave_1: entered promiscuous mode [ 61.974814][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.981945][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.989121][ T5845] bridge_slave_0: entered allmulticast mode [ 61.996240][ T5845] bridge_slave_0: entered promiscuous mode [ 62.003775][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.010858][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.018047][ T5845] bridge_slave_1: entered allmulticast mode [ 62.025300][ T5845] bridge_slave_1: entered promiscuous mode [ 62.031882][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.039144][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.046321][ T5847] bridge_slave_0: entered allmulticast mode [ 62.053316][ T5847] bridge_slave_0: entered promiscuous mode [ 62.080986][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.088103][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.095374][ T5841] bridge_slave_0: entered allmulticast mode [ 62.102308][ T5841] bridge_slave_0: entered promiscuous mode [ 62.117130][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.124410][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.131487][ T5847] bridge_slave_1: entered allmulticast mode [ 62.138957][ T5847] bridge_slave_1: entered promiscuous mode [ 62.155871][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.165048][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.172117][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.180177][ T5841] bridge_slave_1: entered allmulticast mode [ 62.187083][ T5841] bridge_slave_1: entered promiscuous mode [ 62.212123][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.231310][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.267797][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.279271][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.290869][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.321706][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.356410][ T5843] team0: Port device team_slave_0 added [ 62.362296][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.369689][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.377060][ T5852] bridge_slave_0: entered allmulticast mode [ 62.383857][ T5852] bridge_slave_0: entered promiscuous mode [ 62.391919][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.425265][ T5847] team0: Port device team_slave_0 added [ 62.432256][ T5843] team0: Port device team_slave_1 added [ 62.438406][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.445609][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.452754][ T5852] bridge_slave_1: entered allmulticast mode [ 62.459356][ T5852] bridge_slave_1: entered promiscuous mode [ 62.473912][ T5845] team0: Port device team_slave_0 added [ 62.480929][ T5841] team0: Port device team_slave_0 added [ 62.487856][ T5847] team0: Port device team_slave_1 added [ 62.509669][ T5845] team0: Port device team_slave_1 added [ 62.516605][ T5841] team0: Port device team_slave_1 added [ 62.568620][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.576041][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.602168][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.615122][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.622062][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.648909][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.662394][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.686510][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.693534][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.722598][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.741666][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.748667][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.775314][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.792770][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.802357][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.809392][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.835270][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.846554][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.853912][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.879812][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.891038][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.898239][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.924661][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.968246][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.975427][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.001694][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.039610][ T5843] hsr_slave_0: entered promiscuous mode [ 63.045835][ T5843] hsr_slave_1: entered promiscuous mode [ 63.053696][ T5852] team0: Port device team_slave_0 added [ 63.061283][ T5852] team0: Port device team_slave_1 added [ 63.121815][ T5847] hsr_slave_0: entered promiscuous mode [ 63.128418][ T5847] hsr_slave_1: entered promiscuous mode [ 63.134669][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 63.140438][ T5847] Cannot create hsr debugfs directory [ 63.150914][ T5845] hsr_slave_0: entered promiscuous mode [ 63.158346][ T5845] hsr_slave_1: entered promiscuous mode [ 63.164342][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 63.170041][ T5845] Cannot create hsr debugfs directory [ 63.193329][ T5851] Bluetooth: hci3: command tx timeout [ 63.193332][ T5846] Bluetooth: hci2: command tx timeout [ 63.193502][ T5846] Bluetooth: hci0: command tx timeout [ 63.198882][ T5851] Bluetooth: hci1: command tx timeout [ 63.204517][ T5861] Bluetooth: hci4: command tx timeout [ 63.211018][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.227451][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.253389][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.289360][ T5841] hsr_slave_0: entered promiscuous mode [ 63.295446][ T5841] hsr_slave_1: entered promiscuous mode [ 63.301280][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 63.307285][ T5841] Cannot create hsr debugfs directory [ 63.313398][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.320327][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.346410][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.505749][ T5852] hsr_slave_0: entered promiscuous mode [ 63.511762][ T5852] hsr_slave_1: entered promiscuous mode [ 63.517827][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 63.524234][ T5852] Cannot create hsr debugfs directory [ 63.748531][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.760847][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.777279][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.791924][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.827972][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.841098][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.867875][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.883776][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.930750][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.940997][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.951547][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.962066][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.039838][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.048787][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.059604][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.070021][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.188648][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.203649][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.220367][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.240379][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.249946][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.270035][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.281271][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.306128][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.313348][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.328134][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.346833][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.353951][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.368595][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.381875][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.402241][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.431835][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.438935][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.448722][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.455805][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.465883][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.472956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.484633][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.498121][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.505248][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.528437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.535521][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.564265][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.571340][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.690446][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 64.690461][ T30] audit: type=1400 audit(1758872251.194:86): avc: denied { sys_module } for pid=5845 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.829109][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.870268][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.920404][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.927566][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.973692][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.980783][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.089823][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.100450][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.126795][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.138673][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.162048][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.274203][ T5861] Bluetooth: hci4: command tx timeout [ 65.279626][ T5861] Bluetooth: hci1: command tx timeout [ 65.284665][ T5859] Bluetooth: hci3: command tx timeout [ 65.285808][ T5846] Bluetooth: hci0: command tx timeout [ 65.290517][ T5851] Bluetooth: hci2: command tx timeout [ 65.303118][ T5847] veth0_vlan: entered promiscuous mode [ 65.317658][ T5843] veth0_vlan: entered promiscuous mode [ 65.328220][ T5845] veth0_vlan: entered promiscuous mode [ 65.335057][ T5841] veth0_vlan: entered promiscuous mode [ 65.374573][ T5847] veth1_vlan: entered promiscuous mode [ 65.384156][ T5843] veth1_vlan: entered promiscuous mode [ 65.395075][ T5845] veth1_vlan: entered promiscuous mode [ 65.418240][ T5841] veth1_vlan: entered promiscuous mode [ 65.440446][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.484476][ T5845] veth0_macvtap: entered promiscuous mode [ 65.513552][ T5843] veth0_macvtap: entered promiscuous mode [ 65.527816][ T5845] veth1_macvtap: entered promiscuous mode [ 65.547366][ T5841] veth0_macvtap: entered promiscuous mode [ 65.560471][ T5847] veth0_macvtap: entered promiscuous mode [ 65.570632][ T5847] veth1_macvtap: entered promiscuous mode [ 65.580026][ T5843] veth1_macvtap: entered promiscuous mode [ 65.587264][ T5841] veth1_macvtap: entered promiscuous mode [ 65.616484][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.647409][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.662013][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.681862][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.693939][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.705445][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.716180][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.728072][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.747785][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.765498][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.783338][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.791859][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.802260][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.825936][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.837271][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.857050][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.867302][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.886046][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.894932][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.921162][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.930656][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.968596][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.980098][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.015953][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.031793][ T5852] veth0_vlan: entered promiscuous mode [ 66.065282][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.077072][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.089892][ T5852] veth1_vlan: entered promiscuous mode [ 66.105862][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.115882][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.163803][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.167286][ T5852] veth0_macvtap: entered promiscuous mode [ 66.171689][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.193726][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.206232][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.215774][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.226845][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.236038][ T5852] veth1_macvtap: entered promiscuous mode [ 66.259576][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.268882][ T30] audit: type=1400 audit(1758872252.764:87): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.FuunzO/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.272185][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.306185][ T30] audit: type=1400 audit(1758872252.764:88): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.334238][ T30] audit: type=1400 audit(1758872252.764:89): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.FuunzO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.355723][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.374489][ T30] audit: type=1400 audit(1758872252.804:90): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.384114][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.400748][ T30] audit: type=1400 audit(1758872252.814:91): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.FuunzO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.435051][ T30] audit: type=1400 audit(1758872252.814:92): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.FuunzO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.465582][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.474843][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.479790][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.486886][ T30] audit: type=1400 audit(1758872252.814:93): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.530373][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.530404][ T30] audit: type=1400 audit(1758872252.884:94): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.541649][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.573918][ T30] audit: type=1400 audit(1758872252.884:95): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="gadgetfs" ino=7672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.607253][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.640076][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.812292][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.280529][ T5966] o2cb: This node has not been configured. [ 67.286529][ T5966] o2cb: Cluster check failed. Fix errors before retrying. [ 67.293716][ T5966] (syz.0.1,5966,1):user_dlm_register:674 ERROR: status = -22 [ 67.301096][ T5966] (syz.0.1,5966,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 67.316010][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.333716][ T5959] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.357548][ T5851] Bluetooth: hci2: command tx timeout [ 67.363019][ T5859] Bluetooth: hci3: command tx timeout [ 67.363178][ T5846] Bluetooth: hci0: command tx timeout [ 67.368395][ T5859] Bluetooth: hci1: command tx timeout [ 67.374222][ T5851] Bluetooth: hci4: command tx timeout [ 67.386075][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.398950][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.455782][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.492619][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 67.497838][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.506214][ T5959] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 67.517932][ T5959] usb 4-1: config 0 has no interface number 0 [ 67.528953][ T5959] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 67.563591][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.593316][ T1753] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 67.612538][ T5959] usb 4-1: Product: syz [ 67.616734][ T5959] usb 4-1: Manufacturer: syz [ 67.633911][ T5959] usb 4-1: SerialNumber: syz [ 67.676069][ T5959] usb 4-1: config 0 descriptor?? [ 67.699771][ T5959] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 67.864912][ T1753] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 67.881168][ T1753] usb 1-1: config 0 has no interface number 0 [ 67.889563][ T1753] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 67.898969][ T1753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.911268][ T1753] usb 1-1: config 0 descriptor?? [ 67.941798][ T1753] usb 1-1: selecting invalid altsetting 3 [ 67.962700][ T1753] comedi comedi5: could not set alternate setting 3 in high speed [ 67.970565][ T1753] usbdux 1-1:0.207: driver 'usbdux' failed to auto-configure device. [ 67.995074][ T5986] Zero length message leads to an empty skb [ 68.027832][ T1753] usbdux 1-1:0.207: probe with driver usbdux failed with error -22 [ 68.190739][ T5987] usb 1-1: USB disconnect, device number 2 [ 68.653596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.867512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.914421][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.970331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.072301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.175173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.302863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 69.406500][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 69.424322][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.435163][ T5851] Bluetooth: hci4: command tx timeout [ 69.444795][ T5851] Bluetooth: hci0: command tx timeout [ 69.444858][ T50] Bluetooth: hci2: command tx timeout [ 69.450292][ T5851] Bluetooth: hci3: command tx timeout [ 69.462270][ T5846] Bluetooth: hci1: command tx timeout [ 69.465228][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.493381][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 69.695352][ T5959] usb 4-1: qt2_attach - failed to power on unit: -71 [ 70.253599][ T6010] gfs2: not a GFS2 filesystem [ 70.259891][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 70.259906][ T30] audit: type=1400 audit(1758872256.514:152): avc: denied { bind } for pid=6007 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.288994][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.298229][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.314580][ T5959] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 70.332774][ T5959] usb 4-1: USB disconnect, device number 2 [ 70.342323][ T30] audit: type=1400 audit(1758872256.754:153): avc: denied { mounton } for pid=6005 comm="syz.0.14" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 70.420228][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.501518][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.515153][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.526683][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.555605][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.565763][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.576823][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.585085][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.606051][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.622527][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.631604][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.642564][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.653689][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.661879][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.671098][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.683504][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.691131][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.700426][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.811632][ T30] audit: type=1400 audit(1758872257.314:154): avc: denied { read write } for pid=6019 comm="syz.2.18" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 70.819734][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.847436][ T30] audit: type=1400 audit(1758872257.314:155): avc: denied { open } for pid=6019 comm="syz.2.18" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 70.848427][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 70.872769][ T5959] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.929569][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 70.952381][ T30] audit: type=1400 audit(1758872257.314:156): avc: denied { setopt } for pid=6019 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.988843][ T6024] mmap: syz.2.18 (6024) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.033594][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.040098][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.054180][ T10] usb 2-1: Product: syz [ 71.058404][ T10] usb 2-1: Manufacturer: syz [ 71.070642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.079173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.113415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.122676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 71.168028][ T5959] usb 4-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 71.182189][ T10] usb 2-1: SerialNumber: syz [ 71.182202][ T5959] usb 4-1: too many endpoints for config 0 interface 0 altsetting 29: 32, using maximum allowed: 30 [ 71.208099][ T10] usb 2-1: config 0 descriptor?? [ 71.234799][ T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 71.236488][ T30] audit: type=1400 audit(1758872257.574:157): avc: denied { create } for pid=6019 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.265028][ T5959] usb 4-1: config 0 interface 0 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 71.282354][ T5959] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.385291][ T5959] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 71.400852][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.522777][ T6029] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.19'. [ 71.558664][ T30] audit: type=1400 audit(1758872257.984:158): avc: denied { ioctl } for pid=6026 comm="syz.4.19" path="socket:[9352]" dev="sockfs" ino=9352 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.756865][ T5959] usb 4-1: Product: syz [ 71.761061][ T5959] usb 4-1: Manufacturer: syz [ 71.765994][ T5959] usb 4-1: SerialNumber: syz [ 71.772265][ T5959] usb 4-1: config 0 descriptor?? [ 71.799292][ T48] usb 2-1: USB disconnect, device number 2 [ 71.810138][ T48] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 71.880441][ T30] audit: type=1400 audit(1758872258.004:159): avc: denied { read write } for pid=6026 comm="syz.4.19" name="vbi7" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.927656][ T6031] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 71.946257][ T30] audit: type=1400 audit(1758872258.004:160): avc: denied { open } for pid=6026 comm="syz.4.19" path="/dev/vbi7" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.986869][ T30] audit: type=1400 audit(1758872258.014:161): avc: denied { ioctl } for pid=6026 comm="syz.4.19" path="/dev/vbi7" dev="devtmpfs" ino=994 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.030932][ T5959] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 72.243432][ T5959] usb 4-1: USB disconnect, device number 3 [ 72.999792][ T6044] tmpfs: Bad value for 'nr_blocks' [ 73.155454][ T6041] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 73.267398][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.552702][ T5908] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.739524][ T10] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 73.764272][ T10] usb 5-1: config 0 has no interface number 0 [ 73.780516][ T10] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.824017][ T10] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 73.837518][ T10] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 73.849075][ T10] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 73.859000][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.868448][ T10] usb 5-1: config 0 descriptor?? [ 73.877264][ T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input5 [ 73.892531][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 73.902763][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.913237][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 73.924776][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.936324][ T5908] usb 1-1: config 0 descriptor?? [ 73.945632][ T5908] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 74.390731][ T6068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.31'. [ 75.287373][ T6079] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.33'. [ 75.692713][ T5908] gspca_vc032x: reg_r err -110 [ 76.020304][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 76.020319][ T30] audit: type=1400 audit(1758872262.524:192): avc: denied { mounton } for pid=6076 comm="syz.3.34" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 76.212990][ T5908] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 77.072706][ T5957] usb 1-1: USB disconnect, device number 3 [ 77.117567][ T30] audit: type=1400 audit(1758872263.624:193): avc: denied { setopt } for pid=6087 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.239706][ T48] usb 5-1: USB disconnect, device number 2 [ 77.429184][ T30] audit: type=1400 audit(1758872263.924:194): avc: denied { getopt } for pid=6087 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.042722][ T30] audit: type=1400 audit(1758872264.524:195): avc: denied { create } for pid=6094 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.118982][ T6105] fuse: Bad value for 'user_id' [ 78.124825][ T6105] fuse: Bad value for 'user_id' [ 78.139937][ T30] audit: type=1400 audit(1758872264.644:196): avc: denied { create } for pid=6106 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.418237][ T30] audit: type=1400 audit(1758872264.744:197): avc: denied { ioctl } for pid=6106 comm="syz.3.42" path="socket:[9662]" dev="sockfs" ino=9662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.426215][ T5958] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 78.806113][ T6123] veth0: entered promiscuous mode [ 79.159526][ T30] audit: type=1400 audit(1758872265.304:198): avc: denied { ioctl } for pid=6114 comm="syz.4.45" path="socket:[8844]" dev="sockfs" ino=8844 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.267346][ T30] audit: type=1400 audit(1758872265.304:199): avc: denied { create } for pid=6114 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.294642][ T5958] usb 3-1: not running at top speed; connect to a high speed hub [ 79.321524][ T30] audit: type=1400 audit(1758872265.314:200): avc: denied { ioctl } for pid=6114 comm="syz.4.45" path="socket:[8848]" dev="sockfs" ino=8848 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.350453][ T6128] netlink: 'syz.3.46': attribute type 21 has an invalid length. [ 79.358214][ T6128] netlink: 156 bytes leftover after parsing attributes in process `syz.3.46'. [ 79.424016][ T6114] veth0: left promiscuous mode [ 79.542748][ T5958] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.563150][ T5958] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 79.572331][ T5958] usb 3-1: config 1 has no interface number 1 [ 79.596816][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.609270][ T30] audit: type=1400 audit(1758872265.314:201): avc: denied { setopt } for pid=6114 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.632765][ T5958] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 79.669765][ T5958] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 79.695772][ T5958] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.733236][ T6133] Illegal XDP return value 4294967262 on prog (id 11) dev syz_tun, expect packet loss! [ 79.837896][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.878515][ T5958] usb 3-1: Product: syz [ 79.950670][ T5958] usb 3-1: Manufacturer: syz [ 80.013079][ T5958] usb 3-1: SerialNumber: syz [ 80.737417][ T5958] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 80.754887][ T5958] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 80.793931][ T5958] usb 3-1: USB disconnect, device number 2 [ 81.090924][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 81.090939][ T30] audit: type=1400 audit(1758872267.594:203): avc: denied { mounton } for pid=6146 comm="syz.1.51" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.090955][ T6147] fuse: Unknown parameter 'fp' [ 81.220086][ T1204] cfg80211: failed to load regulatory.db [ 82.448468][ T6162] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.55'. [ 82.593492][ T5987] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 82.909547][ T5987] usb 3-1: not running at top speed; connect to a high speed hub [ 82.931788][ T5987] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.948689][ T5987] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 82.957994][ T5987] usb 3-1: config 1 has no interface number 1 [ 82.979646][ T5987] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 82.994659][ T6169] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.052148][ T5987] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 83.085716][ T5987] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.119988][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 83.128827][ T6169] bridge_slave_1: left allmulticast mode [ 83.134462][ T6169] bridge_slave_1: left promiscuous mode [ 83.140992][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.160003][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.171859][ T6169] bridge_slave_0: left allmulticast mode [ 83.177546][ T6169] bridge_slave_0: left promiscuous mode [ 83.183217][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.192984][ T5987] usb 3-1: Product: syz [ 83.197170][ T5987] usb 3-1: Manufacturer: syz [ 83.232746][ T5987] usb 3-1: SerialNumber: syz [ 83.954382][ T6174] gfs2: not a GFS2 filesystem [ 83.961360][ T6176] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.50'. [ 84.234611][ T6158] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 84.527455][ T30] audit: type=1400 audit(1758872271.034:204): avc: denied { ioctl } for pid=6178 comm="syz.0.59" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9868 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.569499][ T6179] netlink: 'syz.0.59': attribute type 9 has an invalid length. [ 84.571364][ T6158] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20001 [ 84.583899][ T6179] warning: `syz.0.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.611723][ T30] audit: type=1400 audit(1758872271.074:205): avc: denied { connect } for pid=6157 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.613986][ T6158] IPVS: dh: FWM 3 0x00000003 - no destination available [ 84.642618][ T5959] IPVS: starting estimator thread 0... [ 84.684886][ T30] audit: type=1400 audit(1758872271.194:206): avc: denied { create } for pid=6157 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.730053][ T30] audit: type=1400 audit(1758872271.194:207): avc: denied { bind } for pid=6157 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.762679][ T6189] IPVS: using max 44 ests per chain, 105600 per kthread [ 84.793168][ T30] audit: type=1400 audit(1758872271.284:208): avc: denied { create } for pid=6191 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.815214][ T30] audit: type=1400 audit(1758872271.284:209): avc: denied { bind } for pid=6191 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.853522][ T5987] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 84.861515][ T5987] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 84.882600][ T30] audit: type=1400 audit(1758872271.284:210): avc: denied { connect } for pid=6191 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.916052][ T30] audit: type=1400 audit(1758872271.284:211): avc: denied { write } for pid=6191 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.927473][ T5987] usb 3-1: USB disconnect, device number 3 [ 84.966999][ T30] audit: type=1400 audit(1758872271.324:212): avc: denied { create } for pid=6191 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 85.117523][ T6204] geneve2: entered promiscuous mode [ 85.122995][ T6204] geneve2: entered allmulticast mode [ 85.325749][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 85.373431][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.65'. [ 85.607592][ T6216] netlink: 48 bytes leftover after parsing attributes in process `syz.2.66'. [ 86.033685][ T6219] IPv6: Can't replace route, no match found [ 86.041842][ T6219] binder: 6210:6219 ioctl c0306201 0 returned -14 [ 86.143963][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 86.322674][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 86.632731][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 86.632749][ T30] audit: type=1400 audit(1758872273.064:222): avc: denied { block_suspend } for pid=6207 comm="syz.4.65" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.318111][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 87.330244][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.360002][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.536287][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.802056][ T6232] gfs2: not a GFS2 filesystem [ 88.151609][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.164481][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 88.172631][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.183482][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.195378][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.212531][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.236726][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 88.244375][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.269024][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.285269][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.302823][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.383127][ T10] usb 3-1: string descriptor 0 read error: -22 [ 88.446954][ T5959] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 88.792734][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 88.812012][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.019507][ T10] usb 3-1: can't set config #168, error -71 [ 89.211970][ T10] usb 3-1: USB disconnect, device number 4 [ 89.334492][ T5959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.337220][ T6248] FAULT_INJECTION: forcing a failure. [ 89.337220][ T6248] name failslab, interval 1, probability 0, space 0, times 1 [ 89.345648][ T5959] usb 2-1: not running at top speed; connect to a high speed hub [ 89.364703][ T5959] usb 2-1: config 23 has an invalid interface number: 71 but max is 0 [ 89.373001][ T5959] usb 2-1: config 23 has no interface number 0 [ 89.392598][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 89.392626][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.392637][ T6248] Call Trace: [ 89.392643][ T6248] [ 89.392651][ T6248] dump_stack_lvl+0x16c/0x1f0 [ 89.392680][ T6248] should_fail_ex+0x512/0x640 [ 89.392707][ T6248] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 89.392730][ T6248] should_failslab+0xc2/0x120 [ 89.392751][ T6248] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 89.392769][ T6248] ? __alloc_skb+0x2b2/0x380 [ 89.392790][ T6248] ? avc_has_perm+0x144/0x1f0 [ 89.392811][ T6248] __alloc_skb+0x2b2/0x380 [ 89.392830][ T6248] ? __pfx___alloc_skb+0x10/0x10 [ 89.392848][ T6248] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 89.392870][ T6248] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 89.392898][ T6248] netlink_alloc_large_skb+0x69/0x130 [ 89.392929][ T6248] netlink_sendmsg+0x6a1/0xdd0 [ 89.392956][ T6248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.392988][ T6248] ____sys_sendmsg+0xa98/0xc70 [ 89.393016][ T6248] ? copy_msghdr_from_user+0x10a/0x160 [ 89.393037][ T6248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.393074][ T6248] ___sys_sendmsg+0x134/0x1d0 [ 89.393097][ T6248] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.393149][ T6248] __sys_sendmsg+0x16d/0x220 [ 89.393171][ T6248] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.393209][ T6248] do_syscall_64+0xcd/0x4e0 [ 89.393234][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.393251][ T6248] RIP: 0033:0x7fce4bb8eec9 [ 89.393266][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.393282][ T6248] RSP: 002b:00007fce4cada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.393301][ T6248] RAX: ffffffffffffffda RBX: 00007fce4bde5fa0 RCX: 00007fce4bb8eec9 [ 89.393313][ T6248] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 89.393323][ T6248] RBP: 00007fce4cada090 R08: 0000000000000000 R09: 0000000000000000 [ 89.393333][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.393342][ T6248] R13: 00007fce4bde6038 R14: 00007fce4bde5fa0 R15: 00007ffd137c7a28 [ 89.393365][ T6248] [ 89.649189][ T6254] xt_l2tp: missing protocol rule (udp|l2tpip) [ 89.821786][ T5959] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice= 9.30 [ 89.830889][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.839010][ T5959] usb 2-1: Product: syz [ 89.843161][ T5959] usb 2-1: Manufacturer: syz [ 89.847723][ T5959] usb 2-1: SerialNumber: syz [ 89.909743][ T5959] usb_ehset_test 2-1:23.71: probe with driver usb_ehset_test failed with error -32 [ 89.969966][ T6256] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.74'. [ 90.307896][ T30] audit: type=1400 audit(1758872276.814:223): avc: denied { connect } for pid=6231 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.662570][ T30] audit: type=1400 audit(1758872276.884:224): avc: denied { open } for pid=6231 comm="syz.1.70" path="/dev/ttyq6" dev="devtmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 90.968454][ T6264] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.77'. [ 91.280848][ T30] audit: type=1400 audit(1758872276.894:225): avc: denied { bind } for pid=6231 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.522542][ T30] audit: type=1400 audit(1758872276.894:226): avc: denied { node_bind } for pid=6231 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 92.138223][ T30] audit: type=1400 audit(1758872276.894:227): avc: denied { connect } for pid=6231 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.158395][ T30] audit: type=1400 audit(1758872276.894:228): avc: denied { write } for pid=6231 comm="syz.1.70" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.435950][ T48] usb 2-1: USB disconnect, device number 3 [ 94.625245][ T30] audit: type=1400 audit(1758872281.104:229): avc: denied { setcurrent } for pid=6280 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 94.681704][ T6284] xt_l2tp: missing protocol rule (udp|l2tpip) [ 94.860328][ T30] audit: type=1400 audit(1758872281.364:230): avc: denied { associate } for pid=6280 comm="syz.1.82" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.771852][ T30] audit: type=1400 audit(1758872282.274:231): avc: denied { ioctl } for pid=6295 comm="syz.2.85" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.907997][ T30] audit: type=1400 audit(1758872282.364:232): avc: denied { write } for pid=6297 comm="syz.3.86" path="socket:[10511]" dev="sockfs" ino=10511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.443825][ T30] audit: type=1400 audit(1758872282.724:233): avc: denied { relabelfrom } for pid=6303 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.673616][ T30] audit: type=1400 audit(1758872282.734:234): avc: denied { relabelto } for pid=6303 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.150079][ T30] audit: type=1400 audit(1758872283.484:235): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.162547][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 99.490245][ T6325] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.504781][ T30] audit: type=1400 audit(1758872285.984:236): avc: denied { mount } for pid=6322 comm="syz.0.94" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 100.074045][ T30] audit: type=1400 audit(1758872286.014:237): avc: denied { accept } for pid=6322 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.239451][ T30] audit: type=1400 audit(1758872286.014:238): avc: denied { mounton } for pid=6322 comm="syz.0.94" path="/21/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 100.265912][ T30] audit: type=1400 audit(1758872286.014:239): avc: denied { mount } for pid=6322 comm="syz.0.94" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 100.452486][ T10] usb 2-1: device descriptor read/all, error -71 [ 100.787046][ T6343] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.97'. [ 100.906878][ T6345] overlayfs: failed to resolve './file0': -2 [ 102.581104][ T30] audit: type=1400 audit(1758872289.084:240): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 102.872603][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.952600][ T5987] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 103.040116][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 103.060488][ T30] audit: type=1400 audit(1758872289.564:241): avc: denied { write } for pid=6363 comm="syz.2.103" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 103.070313][ T6364] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.103'. [ 103.084206][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.114915][ T10] usb 2-1: Product: syz [ 103.119113][ T10] usb 2-1: Manufacturer: syz [ 103.132621][ T10] usb 2-1: SerialNumber: syz [ 103.139469][ T30] audit: type=1400 audit(1758872289.564:242): avc: denied { write } for pid=6363 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.204421][ T5987] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.212884][ T5987] usb 1-1: not running at top speed; connect to a high speed hub [ 103.223049][ T5987] usb 1-1: config 23 has an invalid interface number: 71 but max is 0 [ 103.250375][ T5987] usb 1-1: config 23 has no interface number 0 [ 103.398798][ T5987] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice= 9.30 [ 103.412615][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.442831][ T5987] usb 1-1: Product: syz [ 103.447061][ T5987] usb 1-1: Manufacturer: syz [ 103.451745][ T5987] usb 1-1: SerialNumber: syz [ 103.475795][ T5987] usb_ehset_test 1-1:23.71: probe with driver usb_ehset_test failed with error -32 [ 103.493955][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.501422][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.294671][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.330496][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.393081][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.457919][ T3808] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.468500][ T3808] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.485718][ T3808] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.496080][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 104.511710][ T3808] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.524554][ T6380] bridge_slave_1: left allmulticast mode [ 104.531003][ T6380] bridge_slave_1: left promiscuous mode [ 104.543194][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.545747][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.560495][ T30] audit: type=1326 audit(1758872291.054:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee04d8eec9 code=0x7fc00000 [ 104.591533][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.591626][ T6380] bridge_slave_0: left allmulticast mode [ 104.608104][ T6382] fuse: Bad value for 'group_id' [ 104.609925][ T30] audit: type=1400 audit(1758872291.114:244): avc: denied { mounton } for pid=6381 comm="syz.2.108" path="/27/file0" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.638587][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.643228][ T6382] fuse: Bad value for 'group_id' [ 104.647847][ T6380] bridge_slave_0: left promiscuous mode [ 104.659680][ T9] usb 5-1: config 0 descriptor?? [ 104.665304][ T30] audit: type=1400 audit(1758872291.164:245): avc: denied { read write } for pid=6381 comm="syz.2.108" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.667600][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 104.699456][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.714323][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.719108][ T30] audit: type=1400 audit(1758872291.204:246): avc: denied { open } for pid=6381 comm="syz.2.108" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.752040][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.762391][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.771159][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.779922][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.787471][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.794965][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.802379][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.810447][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.819326][ T48] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.831340][ T48] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [] on [ 104.871442][ T30] audit: type=1400 audit(1758872291.374:247): avc: denied { nlmsg_write } for pid=6386 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.878935][ T6387] Bluetooth: MGMT ver 1.23 [ 104.902724][ T30] audit: type=1400 audit(1758872291.374:248): avc: denied { name_bind } for pid=6386 comm="syz.2.109" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 104.966184][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 104.977977][ T6387] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.132800][ T30] audit: type=1400 audit(1758872291.644:249): avc: denied { read } for pid=6390 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.153321][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 105.163009][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 105.170349][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 105.177443][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 105.284759][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 105.292068][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 105.299421][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 105.306775][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 105.367823][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 105.393885][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 105.418590][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 105.437212][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 105.456908][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 105.474083][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 105.501482][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 105.511474][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 105.524430][ T9] pwc: Registered as video103. [ 105.535224][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 105.562192][ T9] usb 5-1: USB disconnect, device number 3 [ 105.800098][ T9] usb 1-1: USB disconnect, device number 4 [ 106.061336][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 106.061784][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 106.061900][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 106.064960][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 106.067865][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 106.075696][ T10] usb 2-1: USB disconnect, device number 6 [ 107.442018][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 107.778039][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 108.413298][ T6424] netlink: 48 bytes leftover after parsing attributes in process `syz.2.117'. [ 108.732640][ T5908] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 108.732727][ T5959] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.895404][ T5908] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 108.904881][ T5908] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.963994][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 108.967021][ T5908] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.982213][ T5959] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 108.990937][ T5959] usb 1-1: config 0 has no interface number 0 [ 109.001254][ T5959] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.021535][ T5908] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 109.032599][ T5959] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.042545][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.082675][ T5959] usb 1-1: config 0 interface 85 has no altsetting 0 [ 109.082749][ T5908] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 109.105974][ T5908] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 109.115410][ T5908] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 109.117374][ T5959] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 109.136542][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.160551][ T5908] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.172546][ T5959] usb 1-1: Product: syz [ 109.186907][ T5908] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 109.192798][ T5959] usb 1-1: Manufacturer: syz [ 109.213403][ T5959] usb 1-1: SerialNumber: syz [ 109.241892][ T5959] usb 1-1: config 0 descriptor?? [ 109.252614][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 109.268812][ T5908] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 109.329890][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.345841][ T5908] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 109.357937][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 109.371377][ T5908] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 109.402544][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.410568][ T5908] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.426969][ T10] usb 4-1: config 0 descriptor?? [ 109.434368][ T5908] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 109.448767][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 109.469414][ T5908] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 109.811963][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 109.811979][ T30] audit: type=1400 audit(1758872296.314:258): avc: denied { read write } for pid=6425 comm="syz.0.118" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.843587][ T5908] usb 3-1: string descriptor 0 read error: -22 [ 109.849999][ T5908] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 109.867412][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.959754][ T5908] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 110.047174][ T5959] appletouch 1-1:0.85: Failed to read mode from device. [ 110.090609][ T5959] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 110.099532][ T30] audit: type=1400 audit(1758872296.334:259): avc: denied { unlink } for pid=6411 comm="syz.1.115" name="#1" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.140166][ T5959] usb 1-1: USB disconnect, device number 5 [ 110.148184][ T30] audit: type=1400 audit(1758872296.354:260): avc: denied { open } for pid=6425 comm="syz.0.118" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.175796][ T30] audit: type=1800 audit(1758872296.404:261): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.115" name="file0" dev="overlay" ino=144 res=0 errno=0 [ 110.205235][ T54] Bluetooth: hci5: Frame reassembly failed (-84) [ 110.742897][ T30] audit: type=1400 audit(1758872297.224:262): avc: denied { create } for pid=6441 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.166710][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 111.485852][ T10] gspca_vc032x: reg_r err -110 [ 111.490728][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 111.557731][ T5959] usb 3-1: USB disconnect, device number 5 [ 112.357880][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.691183][ T5959] usb 4-1: USB disconnect, device number 4 [ 113.392518][ T5957] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 113.455873][ T6475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.128'. [ 114.014933][ T5957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.035196][ T5957] usb 3-1: not running at top speed; connect to a high speed hub [ 114.127187][ T6486] gfs2: not a GFS2 filesystem [ 114.521721][ T5957] usb 3-1: config 23 has an invalid interface number: 71 but max is 0 [ 114.530045][ T5957] usb 3-1: config 23 has no interface number 0 [ 114.538398][ T5957] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice= 9.30 [ 114.552533][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.560547][ T5957] usb 3-1: Product: syz [ 114.581645][ T5957] usb 3-1: Manufacturer: syz [ 114.588870][ T5957] usb 3-1: SerialNumber: syz [ 114.599070][ T5957] usb_ehset_test 3-1:23.71: probe with driver usb_ehset_test failed with error -32 [ 114.651269][ T30] audit: type=1400 audit(1758872301.154:263): avc: denied { execute } for pid=6492 comm="syz.0.136" path="/29/memory.events" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.692352][ T30] audit: type=1400 audit(1758872301.194:264): avc: denied { create } for pid=6492 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.829109][ T30] audit: type=1400 audit(1758872301.194:265): avc: denied { setopt } for pid=6492 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.251949][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 116.119371][ T30] audit: type=1400 audit(1758872302.594:266): avc: denied { read } for pid=6504 comm="syz.1.138" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.252521][ T48] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.338268][ T30] audit: type=1400 audit(1758872302.594:267): avc: denied { open } for pid=6504 comm="syz.1.138" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.462918][ T48] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.492832][ T48] usb 5-1: config 0 has no interface number 0 [ 116.500167][ T48] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.540546][ T48] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.557808][ T48] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.573903][ T48] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 116.593164][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.614572][ T30] audit: type=1400 audit(1758872303.124:268): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 116.638487][ T48] usb 5-1: config 0 descriptor?? [ 116.742718][ T5908] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.786393][ T30] audit: type=1400 audit(1758872303.294:269): avc: denied { set_context_mgr } for pid=6515 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 117.246976][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.256383][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.295908][ T9] usb 3-1: USB disconnect, device number 6 [ 117.308711][ T30] audit: type=1400 audit(1758872303.294:270): avc: denied { map } for pid=6515 comm="syz.1.142" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.312544][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 117.386155][ T30] audit: type=1400 audit(1758872303.354:271): avc: denied { call } for pid=6515 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 117.386345][ T5908] usb 1-1: no configurations [ 117.443185][ T5908] usb 1-1: can't read configurations, error -22 [ 117.468875][ T48] usbhid 5-1:0.1: can't add hid device: -71 [ 117.475772][ T48] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 117.489884][ T48] usb 5-1: USB disconnect, device number 4 [ 117.531222][ T30] audit: type=1400 audit(1758872304.034:272): avc: denied { connect } for pid=6489 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.564007][ T30] audit: type=1400 audit(1758872304.064:273): avc: denied { bind } for pid=6489 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.583274][ T5908] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.591807][ T30] audit: type=1400 audit(1758872304.064:274): avc: denied { write } for pid=6489 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.732535][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 117.738388][ T5908] usb 1-1: no configurations [ 117.743488][ T5908] usb 1-1: can't read configurations, error -22 [ 117.752577][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 117.803080][ T5908] usb usb1-port1: attempt power cycle [ 117.880763][ T6490] cgroup: fork rejected by pids controller in /syz3 [ 118.422686][ T6491] syz.3.135 uses obsolete (PF_INET,SOCK_PACKET) [ 118.453782][ T5908] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.476827][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 118.483318][ T5908] usb 1-1: no configurations [ 118.487966][ T5908] usb 1-1: can't read configurations, error -22 [ 118.508521][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.516906][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 118.534429][ T9] usb 3-1: config 23 has an invalid interface number: 71 but max is 0 [ 118.545752][ T9] usb 3-1: config 23 has no interface number 0 [ 118.645418][ T9] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice= 9.30 [ 118.672561][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.692529][ T5908] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 118.707765][ T9] usb 3-1: Product: syz [ 118.719482][ T9] usb 3-1: Manufacturer: syz [ 118.734151][ T9] usb 3-1: SerialNumber: syz [ 118.740030][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 118.749075][ T5908] usb 1-1: no configurations [ 118.756111][ T5908] usb 1-1: can't read configurations, error -22 [ 118.768285][ T9] usb_ehset_test 3-1:23.71: probe with driver usb_ehset_test failed with error -32 [ 118.788059][ T5908] usb usb1-port1: unable to enumerate USB device [ 119.363053][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.559806][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.620152][ T5908] usb 2-1: config 10 has an invalid interface number: 41 but max is 0 [ 119.633132][ T5908] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 119.643861][ T5908] usb 2-1: config 10 has no interface number 0 [ 119.650271][ T5908] usb 2-1: config 10 interface 41 has no altsetting 0 [ 119.673840][ T5908] usb 2-1: language id specifier not provided by device, defaulting to English [ 119.728819][ T5908] usb 2-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice=56.29 [ 119.745010][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.775264][ T5908] usb 2-1: Product: 쏾尮験羝㌪䑾甮⠇ቴ [ 119.796945][ T5908] usb 2-1: SerialNumber: syz [ 119.974414][ T7052] xt_l2tp: missing protocol rule (udp|l2tpip) [ 120.436250][ T5857] usb 3-1: USB disconnect, device number 7 [ 120.833563][ T7059] sctp: [Deprecated]: syz.4.151 (pid 7059) Use of int in maxseg socket option. [ 120.833563][ T7059] Use struct sctp_assoc_value instead [ 121.389594][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 121.389607][ T30] audit: type=1400 audit(1758872307.874:276): avc: denied { mount } for pid=7065 comm="syz.3.154" name="/" dev="autofs" ino=12359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 121.652739][ T30] audit: type=1400 audit(1758872308.034:277): avc: denied { mounton } for pid=7065 comm="syz.3.154" path="/23/file1" dev="autofs" ino=12359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 121.765297][ T5908] usb 2-1: Found UVC 0.00 device 쏾尮験羝㌪䑾甮⠇ቴ (0499:101b) [ 121.790608][ T5908] usb 2-1: No valid video chain found. [ 121.826776][ T5908] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.926862][ T5908] snd-usb-audio 2-1:10.41: probe with driver snd-usb-audio failed with error -2 [ 121.979582][ T5908] usb 2-1: USB disconnect, device number 7 [ 122.777188][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.157'. [ 122.786593][ T30] audit: type=1400 audit(1758872309.214:278): avc: denied { name_connect } for pid=7080 comm="syz.4.157" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.064702][ T7086] hub 9-0:1.0: USB hub found [ 123.073503][ T7086] hub 9-0:1.0: 1 port detected [ 123.081291][ T30] audit: type=1400 audit(1758872309.554:279): avc: denied { write } for pid=7080 comm="syz.4.157" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 123.266496][ T5957] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.308852][ T7095] gfs2: not a GFS2 filesystem [ 123.445327][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 123.462924][ T5957] usb 2-1: no configurations [ 123.462946][ T5957] usb 2-1: can't read configurations, error -22 [ 123.633032][ T5957] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.792539][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 123.836571][ T5957] usb 2-1: no configurations [ 123.836591][ T5957] usb 2-1: can't read configurations, error -22 [ 123.836819][ T5957] usb usb2-port1: attempt power cycle [ 124.182579][ T5957] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.182718][ T30] audit: type=1400 audit(1758872310.684:280): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 124.396533][ T30] audit: type=1400 audit(1758872310.904:281): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 124.685792][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 124.686347][ T5957] usb 2-1: no configurations [ 124.686361][ T5957] usb 2-1: can't read configurations, error -22 [ 124.737103][ T30] audit: type=1400 audit(1758872311.244:282): avc: denied { create } for pid=7104 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.835278][ T5957] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.870267][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 124.876532][ T5957] usb 2-1: no configurations [ 124.876660][ T5957] usb 2-1: can't read configurations, error -22 [ 124.878689][ T5957] usb usb2-port1: unable to enumerate USB device [ 125.157308][ T5908] hid_parser_main: 6 callbacks suppressed [ 125.157328][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.157365][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.157378][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.157391][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.157404][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.157417][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.157430][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.157443][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.157455][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.157468][ T5908] hid-generic BC8C:0009:0001.0002: unknown main item tag 0x0 [ 125.229141][ T5908] hid-generic BC8C:0009:0001.0002: hidraw0: HID v7.ff Device [syz0] on syz0 [ 125.724072][ T9] hid-generic BC8C:0009:0001.0003: hidraw0: HID v7.ff Device [syz0] on syz0 [ 125.879999][ T7111] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.165'. [ 126.104139][ T30] audit: type=1400 audit(1758872312.584:283): avc: denied { setopt } for pid=7114 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.593815][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 127.312021][ T7133] FAULT_INJECTION: forcing a failure. [ 127.312021][ T7133] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.312456][ T7133] [ 127.312463][ T7133] ====================================================== [ 127.312468][ T7133] WARNING: possible circular locking dependency detected [ 127.312474][ T7133] syzkaller #0 Not tainted [ 127.312481][ T7133] ------------------------------------------------------ [ 127.312485][ T7133] syz.1.170/7133 is trying to acquire lock: [ 127.312492][ T7133] ffffffff8e4cebc0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 127.312531][ T7133] [ 127.312531][ T7133] but task is already holding lock: [ 127.312534][ T7133] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 127.312565][ T7133] [ 127.312565][ T7133] which lock already depends on the new lock. [ 127.312565][ T7133] [ 127.312580][ T7133] [ 127.312580][ T7133] the existing dependency chain (in reverse order) is: [ 127.312584][ T7133] [ 127.312584][ T7133] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 127.312600][ T7133] _raw_spin_lock_nested+0x31/0x40 [ 127.312616][ T7133] raw_spin_rq_lock_nested+0x29/0x130 [ 127.312631][ T7133] task_rq_lock+0xcf/0x490 [ 127.312646][ T7133] cgroup_move_task+0x81/0x2a0 [ 127.312663][ T7133] css_set_move_task+0x288/0x5f0 [ 127.312675][ T7133] cgroup_post_fork+0x201/0x9e0 [ 127.312691][ T7133] copy_process+0x5cfa/0x7690 [ 127.312709][ T7133] kernel_clone+0xfc/0x930 [ 127.312725][ T7133] user_mode_thread+0xc7/0x110 [ 127.312742][ T7133] rest_init+0x23/0x2b0 [ 127.312752][ T7133] start_kernel+0x3ee/0x4d0 [ 127.312768][ T7133] x86_64_start_reservations+0x18/0x30 [ 127.312785][ T7133] x86_64_start_kernel+0x130/0x190 [ 127.312799][ T7133] common_startup_64+0x13e/0x148 [ 127.312814][ T7133] [ 127.312814][ T7133] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 127.312830][ T7133] _raw_spin_lock_irqsave+0x3a/0x60 [ 127.312844][ T7133] try_to_wake_up+0xb7/0x1870 [ 127.312859][ T7133] __wake_up_common+0x135/0x1f0 [ 127.312879][ T7133] __wake_up+0x31/0x60 [ 127.312895][ T7133] tty_port_default_wakeup+0x2a/0x40 [ 127.312915][ T7133] serial8250_tx_chars+0x68e/0x860 [ 127.312933][ T7133] serial8250_handle_irq+0x761/0xcb0 [ 127.312951][ T7133] serial8250_default_handle_irq+0x9a/0x250 [ 127.312969][ T7133] serial8250_interrupt+0xf5/0x1b0 [ 127.312988][ T7133] __handle_irq_event_percpu+0x22c/0x7d0 [ 127.313004][ T7133] handle_irq_event+0xab/0x1e0 [ 127.313019][ T7133] handle_edge_irq+0x3ca/0x9e0 [ 127.313033][ T7133] __common_interrupt+0xcd/0x2f0 [ 127.313052][ T7133] common_interrupt+0x61/0xe0 [ 127.313063][ T7133] asm_common_interrupt+0x26/0x40 [ 127.313076][ T7133] handle_softirqs+0x1dd/0x8e0 [ 127.313093][ T7133] __irq_exit_rcu+0x109/0x170 [ 127.313109][ T7133] irq_exit_rcu+0x9/0x30 [ 127.313121][ T7133] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 127.313134][ T7133] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.313145][ T7133] console_flush_all+0x9a2/0xc60 [ 127.313157][ T7133] console_unlock+0xd8/0x210 [ 127.313168][ T7133] vprintk_emit+0x418/0x6d0 [ 127.313180][ T7133] _printk+0xc7/0x100 [ 127.313188][ T7133] kauditd_hold_skb+0x205/0x250 [ 127.313204][ T7133] kauditd_send_queue+0x236/0x290 [ 127.313219][ T7133] kauditd_thread+0x623/0xa70 [ 127.313234][ T7133] kthread+0x3c2/0x780 [ 127.313244][ T7133] ret_from_fork+0x56a/0x730 [ 127.313253][ T7133] ret_from_fork_asm+0x1a/0x30 [ 127.313266][ T7133] [ 127.313266][ T7133] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 127.313279][ T7133] _raw_spin_lock_irqsave+0x3a/0x60 [ 127.313290][ T7133] __wake_up+0x1c/0x60 [ 127.313303][ T7133] tty_port_default_wakeup+0x2a/0x40 [ 127.313316][ T7133] serial8250_tx_chars+0x68e/0x860 [ 127.313332][ T7133] serial8250_handle_irq+0x761/0xcb0 [ 127.313347][ T7133] serial8250_default_handle_irq+0x9a/0x250 [ 127.313362][ T7133] serial8250_interrupt+0xf5/0x1b0 [ 127.313377][ T7133] __handle_irq_event_percpu+0x22c/0x7d0 [ 127.313390][ T7133] handle_irq_event+0xab/0x1e0 [ 127.313402][ T7133] handle_edge_irq+0x3ca/0x9e0 [ 127.313413][ T7133] __common_interrupt+0xcd/0x2f0 [ 127.313427][ T7133] common_interrupt+0xba/0xe0 [ 127.313435][ T7133] asm_common_interrupt+0x26/0x40 [ 127.313444][ T7133] _raw_spin_unlock_irqrestore+0x31/0x80 [ 127.313456][ T7133] uart_write+0x2a4/0xb30 [ 127.313468][ T7133] n_tty_write+0x41c/0x11e0 [ 127.313483][ T7133] file_tty_write.constprop.0+0x504/0x9b0 [ 127.313495][ T7133] redirected_tty_write+0xd4/0x150 [ 127.313507][ T7133] vfs_write+0x7d0/0x11d0 [ 127.313518][ T7133] ksys_write+0x12a/0x250 [ 127.313528][ T7133] do_syscall_64+0xcd/0x4e0 [ 127.313542][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.313551][ T7133] [ 127.313551][ T7133] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 127.313564][ T7133] _raw_spin_lock_irqsave+0x3a/0x60 [ 127.313579][ T7133] serial8250_console_write+0x181/0x1890 [ 127.313595][ T7133] console_flush_all+0x801/0xc60 [ 127.313607][ T7133] console_unlock+0xd8/0x210 [ 127.313618][ T7133] vprintk_emit+0x418/0x6d0 [ 127.313630][ T7133] _printk+0xc7/0x100 [ 127.313638][ T7133] register_console+0xc2d/0x11b0 [ 127.313651][ T7133] univ8250_console_init+0x5f/0x90 [ 127.313665][ T7133] console_init+0x14f/0x680 [ 127.313679][ T7133] start_kernel+0x29f/0x4d0 [ 127.313690][ T7133] x86_64_start_reservations+0x18/0x30 [ 127.313702][ T7133] x86_64_start_kernel+0x130/0x190 [ 127.313714][ T7133] common_startup_64+0x13e/0x148 [ 127.313725][ T7133] [ 127.313725][ T7133] -> #0 (console_owner){-...}-{0:0}: [ 127.313737][ T7133] __lock_acquire+0x12a6/0x1ce0 [ 127.313753][ T7133] lock_acquire+0x179/0x350 [ 127.313761][ T7133] console_lock_spinning_enable+0xb0/0xd0 [ 127.313773][ T7133] console_flush_all+0x7aa/0xc60 [ 127.313784][ T7133] console_unlock+0xd8/0x210 [ 127.313796][ T7133] vprintk_emit+0x418/0x6d0 [ 127.313808][ T7133] _printk+0xc7/0x100 [ 127.313815][ T7133] should_fail_ex+0x4e7/0x640 [ 127.313829][ T7133] strncpy_from_user+0x3b/0x2e0 [ 127.313840][ T7133] strncpy_from_user_nofault+0x7f/0x180 [ 127.313852][ T7133] bpf_probe_read_user_str+0x26/0x70 [ 127.313868][ T7133] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 127.313876][ T7133] bpf_trace_run4+0x252/0x5b0 [ 127.313886][ T7133] __bpf_trace_sched_switch+0x145/0x190 [ 127.313899][ T7133] __traceiter_sched_switch+0x6f/0xc0 [ 127.313910][ T7133] __schedule+0x183b/0x5de0 [ 127.313921][ T7133] preempt_schedule_common+0x44/0xc0 [ 127.313933][ T7133] preempt_schedule_thunk+0x16/0x30 [ 127.313947][ T7133] __slab_alloc.constprop.0+0x89/0xb0 [ 127.313964][ T7133] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 127.313974][ T7133] __alloc_skb+0x2b2/0x380 [ 127.313986][ T7133] netlink_alloc_large_skb+0x69/0x130 [ 127.314001][ T7133] netlink_sendmsg+0x6a1/0xdd0 [ 127.314013][ T7133] ____sys_sendmsg+0xa98/0xc70 [ 127.314029][ T7133] ___sys_sendmsg+0x134/0x1d0 [ 127.314041][ T7133] __sys_sendmsg+0x16d/0x220 [ 127.314052][ T7133] do_syscall_64+0xcd/0x4e0 [ 127.314065][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.314075][ T7133] [ 127.314075][ T7133] other info that might help us debug this: [ 127.314075][ T7133] [ 127.314078][ T7133] Chain exists of: [ 127.314078][ T7133] console_owner --> &p->pi_lock --> &rq->__lock [ 127.314078][ T7133] [ 127.314093][ T7133] Possible unsafe locking scenario: [ 127.314093][ T7133] [ 127.314095][ T7133] CPU0 CPU1 [ 127.314098][ T7133] ---- ---- [ 127.314101][ T7133] lock(&rq->__lock); [ 127.314107][ T7133] lock(&p->pi_lock); [ 127.314113][ T7133] lock(&rq->__lock); [ 127.314120][ T7133] lock(console_owner); [ 127.314126][ T7133] [ 127.314126][ T7133] *** DEADLOCK *** [ 127.314126][ T7133] [ 127.314129][ T7133] 4 locks held by syz.1.170/7133: [ 127.314135][ T7133] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 127.314161][ T7133] #1: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 127.314186][ T7133] #2: ffffffff8e5af000 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 127.314209][ T7133] #3: ffffffff8e5af070 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 127.314235][ T7133] [ 127.314235][ T7133] stack backtrace: [ 127.314242][ T7133] CPU: 0 UID: 0 PID: 7133 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT(full) [ 127.314255][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.314262][ T7133] Call Trace: [ 127.314265][ T7133] [ 127.314270][ T7133] dump_stack_lvl+0x116/0x1f0 [ 127.314286][ T7133] print_circular_bug+0x275/0x350 [ 127.314304][ T7133] check_noncircular+0x14c/0x170 [ 127.314326][ T7133] __lock_acquire+0x12a6/0x1ce0 [ 127.314347][ T7133] lock_acquire+0x179/0x350 [ 127.314356][ T7133] ? console_lock_spinning_enable+0x9f/0xd0 [ 127.314370][ T7133] ? console_lock_spinning_enable+0x88/0xd0 [ 127.314385][ T7133] console_lock_spinning_enable+0xb0/0xd0 [ 127.314398][ T7133] ? console_lock_spinning_enable+0x9f/0xd0 [ 127.314411][ T7133] console_flush_all+0x7aa/0xc60 [ 127.314426][ T7133] ? __pfx_console_flush_all+0x10/0x10 [ 127.314442][ T7133] ? is_printk_cpu_sync_owner+0x32/0x40 [ 127.314459][ T7133] console_unlock+0xd8/0x210 [ 127.314473][ T7133] ? __pfx_console_unlock+0x10/0x10 [ 127.314486][ T7133] ? do_raw_spin_unlock+0x160/0x230 [ 127.314499][ T7133] ? _printk+0xc7/0x100 [ 127.314508][ T7133] ? __down_trylock_console_sem+0xb0/0x140 [ 127.314520][ T7133] vprintk_emit+0x418/0x6d0 [ 127.314535][ T7133] ? __pfx_vprintk_emit+0x10/0x10 [ 127.314550][ T7133] ? do_user_addr_fault+0x927/0x1370 [ 127.314562][ T7133] ? find_held_lock+0x2b/0x80 [ 127.314583][ T7133] _printk+0xc7/0x100 [ 127.314592][ T7133] ? __pfx__printk+0x10/0x10 [ 127.314603][ T7133] ? __pfx____ratelimit+0x10/0x10 [ 127.314619][ T7133] should_fail_ex+0x4e7/0x640 [ 127.314634][ T7133] strncpy_from_user+0x3b/0x2e0 [ 127.314646][ T7133] ? lock_acquire+0x179/0x350 [ 127.314656][ T7133] strncpy_from_user_nofault+0x7f/0x180 [ 127.314670][ T7133] bpf_probe_read_user_str+0x26/0x70 [ 127.314687][ T7133] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 127.314696][ T7133] bpf_trace_run4+0x252/0x5b0 [ 127.314708][ T7133] ? __pfx_bpf_trace_run4+0x10/0x10 [ 127.314720][ T7133] ? rcu_is_watching+0x12/0xc0 [ 127.314735][ T7133] ? __lock_acquire+0xb97/0x1ce0 [ 127.314754][ T7133] __bpf_trace_sched_switch+0x145/0x190 [ 127.314768][ T7133] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 127.314782][ T7133] ? lock_acquire+0x179/0x350 [ 127.314793][ T7133] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 127.314809][ T7133] __traceiter_sched_switch+0x6f/0xc0 [ 127.314820][ T7133] ? set_next_task_rt+0x403/0x6a0 [ 127.314838][ T7133] __schedule+0x183b/0x5de0 [ 127.314854][ T7133] ? __pfx___schedule+0x10/0x10 [ 127.314867][ T7133] ? rcu_is_watching+0x12/0xc0 [ 127.314881][ T7133] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.314896][ T7133] ? __alloc_skb+0x2b2/0x380 [ 127.314909][ T7133] ? preempt_schedule_thunk+0x16/0x30 [ 127.314924][ T7133] ? __alloc_skb+0x2b2/0x380 [ 127.314936][ T7133] preempt_schedule_common+0x44/0xc0 [ 127.314950][ T7133] preempt_schedule_thunk+0x16/0x30 [ 127.314968][ T7133] __slab_alloc.constprop.0+0x89/0xb0 [ 127.314986][ T7133] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 127.314998][ T7133] ? __alloc_skb+0x2b2/0x380 [ 127.315011][ T7133] __alloc_skb+0x2b2/0x380 [ 127.315023][ T7133] ? __pfx___alloc_skb+0x10/0x10 [ 127.315036][ T7133] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 127.315052][ T7133] netlink_alloc_large_skb+0x69/0x130 [ 127.315068][ T7133] netlink_sendmsg+0x6a1/0xdd0 [ 127.315084][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.315102][ T7133] ____sys_sendmsg+0xa98/0xc70 [ 127.315119][ T7133] ? copy_msghdr_from_user+0x10a/0x160 [ 127.315133][ T7133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.315154][ T7133] ___sys_sendmsg+0x134/0x1d0 [ 127.315167][ T7133] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.315190][ T7133] __sys_sendmsg+0x16d/0x220 [ 127.315205][ T7133] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.315224][ T7133] do_syscall_64+0xcd/0x4e0 [ 127.315241][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.315253][ T7133] RIP: 0033:0x7fdd9098eec9 [ 127.315262][ T7133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.315274][ T7133] RSP: 002b:00007fdd8ebf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.315286][ T7133] RAX: ffffffffffffffda RBX: 00007fdd90be6180 RCX: 00007fdd9098eec9 [ 127.315293][ T7133] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 127.315301][ T7133] RBP: 00007fdd8ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.315308][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.315315][ T7133] R13: 00007fdd90be6218 R14: 00007fdd90be6180 R15: 00007ffc6b9986f8 [ 127.315326][ T7133] [ 128.580396][ T7133] CPU: 0 UID: 0 PID: 7133 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT(full) [ 128.580412][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.580419][ T7133] Call Trace: [ 128.580425][ T7133] [ 128.580431][ T7133] dump_stack_lvl+0x116/0x1f0 [ 128.580450][ T7133] should_fail_ex+0x512/0x640 [ 128.580465][ T7133] strncpy_from_user+0x3b/0x2e0 [ 128.580477][ T7133] ? lock_acquire+0x179/0x350 [ 128.580488][ T7133] strncpy_from_user_nofault+0x7f/0x180 [ 128.580502][ T7133] bpf_probe_read_user_str+0x26/0x70 [ 128.580520][ T7133] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 128.580529][ T7133] bpf_trace_run4+0x252/0x5b0 [ 128.580540][ T7133] ? __pfx_bpf_trace_run4+0x10/0x10 [ 128.580551][ T7133] ? rcu_is_watching+0x12/0xc0 [ 128.580566][ T7133] ? __lock_acquire+0xb97/0x1ce0 [ 128.580584][ T7133] __bpf_trace_sched_switch+0x145/0x190 [ 128.580598][ T7133] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 128.580610][ T7133] ? lock_acquire+0x179/0x350 [ 128.580620][ T7133] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 128.580634][ T7133] __traceiter_sched_switch+0x6f/0xc0 [ 128.580646][ T7133] ? set_next_task_rt+0x403/0x6a0 [ 128.580662][ T7133] __schedule+0x183b/0x5de0 [ 128.580679][ T7133] ? __pfx___schedule+0x10/0x10 [ 128.580691][ T7133] ? rcu_is_watching+0x12/0xc0 [ 128.580704][ T7133] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.580718][ T7133] ? __alloc_skb+0x2b2/0x380 [ 128.580731][ T7133] ? preempt_schedule_thunk+0x16/0x30 [ 128.580746][ T7133] ? __alloc_skb+0x2b2/0x380 [ 128.580757][ T7133] preempt_schedule_common+0x44/0xc0 [ 128.580770][ T7133] preempt_schedule_thunk+0x16/0x30 [ 128.580786][ T7133] __slab_alloc.constprop.0+0x89/0xb0 [ 128.580804][ T7133] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 128.580815][ T7133] ? __alloc_skb+0x2b2/0x380 [ 128.580827][ T7133] __alloc_skb+0x2b2/0x380 [ 128.580839][ T7133] ? __pfx___alloc_skb+0x10/0x10 [ 128.580851][ T7133] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 128.580867][ T7133] netlink_alloc_large_skb+0x69/0x130 [ 128.580882][ T7133] netlink_sendmsg+0x6a1/0xdd0 [ 128.580897][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.580913][ T7133] ____sys_sendmsg+0xa98/0xc70 [ 128.580930][ T7133] ? copy_msghdr_from_user+0x10a/0x160 [ 128.580944][ T7133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.580962][ T7133] ___sys_sendmsg+0x134/0x1d0 [ 128.580976][ T7133] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.580995][ T7133] __sys_sendmsg+0x16d/0x220 [ 128.581008][ T7133] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.581025][ T7133] do_syscall_64+0xcd/0x4e0 [ 128.581040][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.581051][ T7133] RIP: 0033:0x7fdd9098eec9 [ 128.581061][ T7133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.581072][ T7133] RSP: 002b:00007fdd8ebf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.581083][ T7133] RAX: ffffffffffffffda RBX: 00007fdd90be6180 RCX: 00007fdd9098eec9 [ 128.581090][ T7133] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 128.581096][ T7133] RBP: 00007fdd8ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.581102][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.581108][ T7133] R13: 00007fdd90be6218 R14: 00007fdd90be6180 R15: 00007ffc6b9986f8 [ 128.581117][ T7133] [ 129.164706][ T7139] capability: warning: `syz.0.171' uses deprecated v2 capabilities in a way that may be insecure [ 129.176290][ T30] audit: type=1400 audit(1758872315.674:284): avc: denied { create } for pid=7128 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 129.481179][ T7143] gfs2: not a GFS2 filesystem [ 132.394253][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.400545][ T1296] ieee802154 phy1 wpan1: encryption failed: -22