last executing test programs: 1m16.395901951s ago: executing program 4 (id=139): r0 = socket(0x10, 0x803, 0xfffffffd) prctl$PR_SCHED_CORE(0x4c, 0x3, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="0e0000004a0000000700000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80a80, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wg0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000000c0)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf25140000000c000600010000000100000008001d00", @ANYRES32=r2, @ANYBLOB="0c00060002000035a000000000004771d2680673a80f6c98f29ec208da0f90c9ead0b44f44def431ed9815ff6e18d756938fd326a2d07c391e3fbc3553defa0bba48220faf1e16d8949d7cdc586dbc2286f9f2b4f35412315bbf48", @ANYRES32=r7, @ANYBLOB="08001d00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4000000) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') lseek(r8, 0x2000, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/118}, 0x7e, 0x2, 0x1000) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) clock_adjtime(0x0, &(0x7f00000002c0)={0x19b1, 0xc1bdf10000000200, 0x0, 0x0, 0x0, 0xa9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe73, 0xffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x2bc, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x290, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x7fff}}, @TCA_U32_SEL={0x274, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f, [{0x1, 0x69d, 0x8, 0x5}, {0xf, 0xd5d5, 0x3, 0x5}, {0xe, 0x1ff, 0x7, 0x8}, {0x40, 0x2, 0x8212, 0x7}, {0x9, 0x17a0, 0xc, 0x400001}, {0x5, 0x56defc42, 0xfffffff8, 0x3}, {0x48, 0x9, 0xc1, 0x1ff}, {0x867, 0x800, 0x4, 0x9}, {0x1ff, 0x7ff, 0xfffffff9, 0x7}, {0x0, 0x5, 0x755, 0x7}, {0xd0000000, 0x5, 0x6, 0x120}, {0x9, 0x2, 0x4, 0xffffff00}, {0xaf, 0x6, 0x9, 0x2}, {0x1, 0x1, 0x5, 0x4}, {0x8, 0x4, 0xa, 0xd}, {0x80000001, 0x5, 0xeb, 0x1}, {0x7fff, 0x1, 0x5, 0x3477fbe9}, {0x8, 0x7, 0x0, 0x9}, {0x10, 0x3, 0x1, 0x1ff}, {0xfffffffd, 0xff, 0x4, 0xffffff7d}, {0x3ff, 0x1, 0xffffffff, 0x508c}, {0x8, 0x4, 0xfffffffa, 0x742}, {0x10000, 0x80000000, 0x1, 0x6}, {0x59c, 0x3, 0x48, 0x9}, {0x8, 0xa, 0x1, 0x2}, {0x5, 0x4, 0xb}, {0x40, 0x0, 0xfffffffc, 0x92df}, {0x2, 0xa, 0x7e, 0x4}, {0x7, 0xe79, 0x3, 0x3}, {0x4, 0x8001, 0x5ab, 0xa}, {0x4, 0x7, 0x2, 0x40000001}, {0x5, 0xece, 0x9, 0x3}, {0xfffffff8, 0xc3a, 0x80, 0xad9}, {0x0, 0x3, 0x6, 0x9}, {0x7, 0x2, 0x7, 0x5}, {0x10001, 0x7c, 0x5, 0xce}, {0xa4, 0x8001, 0x3, 0x2ea}, {0x7, 0x400, 0x4, 0xc}]}}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0xc0c0}, 0x81a50c0c0dbbe791) 1m15.096482661s ago: executing program 4 (id=144): r0 = add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000022ee0000000006bb55a2a630bf7c045f94cd977", 0xf8, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10", @ANYRES8], 0xa) r1 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="642addbe7856b067a912d4d69c066d246c07", 0x12, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x7e) keyctl$reject(0x13, r1, 0x8, 0x1, r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12015c021916bd082a1105008bdf0102430109021200017f0580030904010200840c047f"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) 1m12.268775306s ago: executing program 4 (id=151): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m11.315813879s ago: executing program 4 (id=156): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xfffffffffffffffd, 0x4, 0x2000008, 0x802, 0x80000000024, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="fdffff"], 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7fffffff, 0xfffffffc, 0x0, {0x3, 0xa, 0xfffffffffffffffb, 0x40, 0x6, 0x6, 0x757, 0x2, 0x6, 0x0, 0x0, 0xee00, 0x0, 0x8bfffffd, 0x223b8fb9}}}, 0x78) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x3f}], 0x1) r3 = syz_clone(0x27800411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x1, r3, 0x0, 0xffffffffffffffbe) 1m11.081212131s ago: executing program 4 (id=157): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000010901080000000021000000120080090800"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x800, 0x3}, 0x30, 0x2) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xa) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf250700000006001d00c0d100000500040006000000140020000000000000000000000000000000000108001700", @ANYRES32=r2, @ANYBLOB="06000e000500000006001a004e20000005f70600020000000500130006100000"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x4001810) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) fcntl$setlease(r7, 0x400, 0x1) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES8=r3, @ANYRESHEX=r5], &(0x7f0000000180), 0x1000) unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1m10.643721849s ago: executing program 4 (id=159): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x141) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) 1m10.416380232s ago: executing program 32 (id=159): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x141) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) 14.06756454s ago: executing program 3 (id=311): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 12.749890129s ago: executing program 2 (id=316): socket(0x8, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x320, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r2 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@getqdisc={0x48, 0x26, 0x300, 0x70bd2b, 0x25df9c00, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xc, 0xc}, {0x7, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000030801030000000000000000000000000000048008000640000000900800084000000005642230146d14a3b6fd29171aa75aba7c0800084000000b08000740000000050800094000008001050003002f0000000e4454a5b357bdbc62632d19119f160c1ef1bbd31bd93d0da876291719ef9dcb73d429b7b1accd856a733569cf7a074b65096d04bea6907f38a080cb7aeaac0b9c2c667570eec8268e6ee8a800233db4e38cdfc09d5f27cbb6feed17d456ebdf4d09aadd255ea32e3356e62a8d60d6edb0e228000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040884) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x1, 0x0, 0x815, 0x2000081, 0xffffffff, 0xffffe5eb}) 11.806569165s ago: executing program 3 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x53, 0x7, 0x7fffffff}]}) unshare(0x68040000) openat$pidfd(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000880)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x2, 0xff7fb5b2, 0x3a8e5b6c, 0x40000, 0x208]}, &(0x7f0000000000)=0x78) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r1, 0x1, 0x80000}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x43e}}, {0xd1, &(0x7f0000000300)=ANY=[]}]}) syz_usb_control_io$uac3(r3, &(0x7f0000000500)={0x14, &(0x7f00000000c0)={0x20, 0x1, 0xa5, {0xa5, 0x23, "b3f090e6c2f79da9436a13678fe20d0aab685473497c044095f592f9b65acbe711c4dd5f4cc9e5e270bee77599d6369eec98c6ab1819196d6458edf025019a3f3834535eb55333c471f5f2e47b0135d88730c1eadbffb3d9c86597b57cde5ae6018bc5623a70aa3a370550eb5fdb5b6719a8b3dcdf541a9f918c4fa0788af84cb8577c90d106ddd40b8f3cc6854fb1352246c6f98420cdb038699be9f1a1b6c341b299"}}, &(0x7f0000000400)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "a57dcfe85f5a4d02d68758b978d773d3a7f9d2732941d42050f1489e0c4fbddcf84e7269845ee291d18ba572b4c5842837a02253033739030bac521b370f608628d584b24482faefcdf9cfd7c196d5416a2537afb1ad53e83ff0c433536bfd1ffa9ae5b55039d81988349fb3f9ea5846aa01a18958e2e8a80277fab82f1fc1a88ae2ef045ea492cabaa72e018473872c1868f2686d63ae260d9a0da04b5e2beb14e5f1c90c438af7b26d4d25f8437adcfb5a4dc90077b7441516867d2cedec6ef112401b5b1ff84ced967eeb3c82485d097acc"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0x15, 0x4f, "6a5c82e3456bad92d6ab204fd522bbfbacb746098c7cce42622e2320f9afe1969a2f9164297690842d69c66b5ffcb080ceaf13e7af59bc97380d9727807f55ae6b969830d9531a68a50445de85ec52"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)=ANY=[@ANYBLOB="11"], &(0x7f0000000680)={0x20, 0x82, 0x3, "a8127b"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "900c8c"}, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000010569c776b3cee66a01cf8512f1a1db006daaa7603df6a9f9312b464a2e09138f48e8e7dfde3113de84354101c95ecbe470fc1ddac0e8163ac6a89d0f9302e8264840bf77526070911cbf6cab42264b91cf1ef66f3291f12da02b3584ca8e4e0aae6c72a09d6a209e62df09e9bc10bc15456722319fe20ad88aafc31e40e43835c920ff3cc01dc0937e7861e9a73c30ac0d640ece9777c9a1fe73abb3711bad2a0d3000000000000"], &(0x7f0000000740)={0x20, 0x85, 0x3, "c90dfc"}}) 8.982938853s ago: executing program 5 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012009702000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000bad4f943162486dd6000737b00283a01fe040000000000000000000000000001fc0100000000000000000000000000008904907800000000000000000026fe80000000000000000000000000002900"/94], 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1420002002060500000000000000000007000000bf0615b27bdb8cce1f2c1607f7802bce25a562b11cb5a6ed7412c6f7087183f3c59b6e7dcae18064f720752a9c01311c00b432af58fc4069e0d50a23b45200"/98], 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xd) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x94, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xdc}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8d, 0xdea8, 0x400, 0x0, 0x0, "4acb8a41c8c563d00e1b2e88c485f5361dd0fdb7980aa6fdf78f8454301432aeec0b06169664d15fca9168207cb030c62d9b9dfec80600000000000000a100"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$netlink(0x10, 0x3, 0xf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) listen(r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) fsetxattr$security_selinux(r2, &(0x7f00000001c0), &(0x7f0000000280)='system_u:object_r:tmpfs_t:s0\x00', 0x1d, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) 8.485390628s ago: executing program 3 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x88202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040"], 0x54}, 0x1, 0x0, 0x0, 0x40801}, 0x80) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/67, 0x43, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESOCT=r8, @ANYBLOB="0000110704000000020b9aa436904610c3000000", @ANYBLOB="a100bf003f9d6231a49fe548c7cca15074b4053ad9a9379150f087f70dd10f6facc933cd90443e17bb4ba823aacb1d9fdce227453b059a3f8081f1a8c7f459e1824d2018baf5587d339bc18b7f"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r9, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r10 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r10}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0xfffffffffffffd2d, &(0x7f00000000c0)="df33c9f7b9a60000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000000), &(0x7f00000005c0)=@udp}, 0x20) 7.97721962s ago: executing program 2 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x28, r5, 0x62c21a4ade68aba1, 0xf0bd23, 0xfffffffd, {{0x32}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x1000076}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x2400c880) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x834, 0xa7, 0x8, 0x0, 0x9, 0x81, 0x5, 0xfffd, 0x9, 0x5749]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000050) 6.657910271s ago: executing program 3 (id=333): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0xfffffffffffffffe) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x76, 0xa, 0x0, 0x4000, 0xfffffffc, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 6.588546804s ago: executing program 5 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012009702000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000bad4f943162486dd6000737b00283a01fe040000000000000000000000000001fc0100000000000000000000000000008904907800000000000000000026fe80000000000000000000000000002900"/94], 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1420002002060500000000000000000007000000bf0615b27bdb8cce1f2c1607f7802bce25a562b11cb5a6ed7412c6f7087183f3c59b6e7dcae18064f720752a9c01311c00b432af58fc4069e0d50a23b45200"/98], 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xd) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x94, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xdc}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8d, 0xdea8, 0x400, 0x0, 0x0, "4acb8a41c8c563d00e1b2e88c485f5361dd0fdb7980aa6fdf78f8454301432aeec0b06169664d15fca9168207cb030c62d9b9dfec80600000000000000a100"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$netlink(0x10, 0x3, 0xf) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) 6.406078563s ago: executing program 2 (id=336): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770200000000000000664900"/25], 0x48) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 5.171879702s ago: executing program 3 (id=337): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770200000000000000664900000000"], 0x48) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 4.861842102s ago: executing program 1 (id=338): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f00000029c0)=[{{&(0x7f00000006c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000880)="945b2ff97be576059d3e6218ff323c214d4700a2df6e2022b47490bfbedda9f864b548018231bcfcd291b00e9d9080cacbaa24c23b93857b6affeccf783103f8fcee79a42a9b5615e2237c70866412d6e88a867408e0d3cca911cb758d411bf47d3cb24296aa7a921be9a8b43da8babb24575235696621ede2f7b84f6922095508228b47a7a660f5", 0x88}, {0x0}, {&(0x7f0000000940)="6c02868733c979b4c1b2e3de561000ca9a19457737f0ff4a80932944f373ba6c09031b777ff9b5cfd70e88fc7b474545a48289dd0bace6f73bc9e771e948887b216ded0231f75239ca5599d232ab7e3a3b0152ec9bffb332d2a2c5bf4ff2d8464e9a47a51fc4581f63d8ecef7f62890b058d61bd312ef2c6e85ae9d78ca492350edf07ae7b529dee7d131690e31fb6416b142ba1d1b7d7a0fcfe6c498384bfccf475e81a108887bff0732e8dc5ff801cc7ebf20e7b538045eaf213390b2ec794d6dcd0608adc3ec433c79f6f27e05d11789c70a55eaf8e4ed27e6e35d5569ca4ecf7bd7ffe8af220f800b0cd7bfeda7fcda364e9f9", 0xf5}, {&(0x7f0000002a00)="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", 0x1134}], 0x4) 4.555429464s ago: executing program 0 (id=339): r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/193, 0xc1}, {&(0x7f0000001600)=""/55, 0x37}, {&(0x7f0000001640)=""/4081, 0xff1}, {&(0x7f0000002640)=""/171, 0xab}, {&(0x7f0000002700)=""/133, 0x85}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x7, &(0x7f0000003840)=""/37, 0x25}, 0x2}, {{&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003900)=""/189, 0xbd}, {&(0x7f00000039c0)=""/64, 0x40}], 0x2, &(0x7f0000003a40)=""/246, 0xf6}, 0x3}, {{&(0x7f0000003b40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003bc0)=""/71, 0x47}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)}], 0x3, &(0x7f0000004cc0)=""/242, 0xf2}, 0xd96}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000004dc0)=""/74, 0x4a}], 0x1, &(0x7f0000000140)=""/212, 0xd4}, 0xa0000000}], 0x4, 0x0, &(0x7f0000005080)) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = syz_clone(0x14001791, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020180000000000000000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x200600, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f00000050c0)=ANY=[@ANYRES8=r3, @ANYRES8=r6, @ANYRES64=r2, @ANYRES64=r5, @ANYRES8=r6, @ANYBLOB="8a2c54cd4d092ab139115528632b8eeee2d43e21fb1e924ed060f4ca6cf85356dffba660e5f088c073e21be039223851ae887261a8c8cd87122b80a40be0e48288a7ae9790e675b21c109976a4d1ab8ea1970aec34d4ce71a20a1b945b14388f73b5b0a3d22f6f3875967572cdacbbed2087166b91cc30bebf4862c8aca460677102bd380f4529f39e45f6c7f5107a7d1b9f190f22ea7de44d59735b6067af5070b977e64a8701a837535cdc93226ceaed54f91200b76596e23a1c206859c46cd5ca1db278313f569c5e0cd94cff76ee7069d1617b6811d42b4f7cd8b81674663fa0f05c9ca65e63d46286c09a08d3835f92e4dc0a5d6a301bb5404873a1d4a00f74a68f750a6bb5f525057a444eabafb34af3ca2916df208ba39dae1b5241ae84abfbae0add5c98998ac7e673b8deda8cadc5fc5e3de0dcd5119e747acfd31b6abee0ae70c71cf32b5f94a9ad9f8379cbca0bb58c18d239ea8a912eb86dc6a82774db0309fa1a4398bdf0c80e030be01f35c652dabb4538fce042c7c552759e9e2a3f4791a8e99706748813cc52e679ac2f577f7875ce3aea3f661a08b44d3be756f6850a6a4f8b0941afc14feeeea1b438b40ce2124098044c283426f03ae7be3a80473d61c6a2f2a3f7a1b3f9edf0b31ec9a3c849e58d5beaeb908cc6908b7fba28ea23f73763f70ef5947c94ca27a87709564b973d276aba9001fa3691b081ecdcaef291bc03a966b5d7a14d5dd3455f4e9ffafe6ada758e88895bc191d8244b8637d91c0d46d51bf92635664985fa4471ec5ae795082311824118999ae12dc5b5be00d456ba0fdf5d8ddb8c7a5986dd6c742c53bcee202d33c8a162240ea6209759bfb7c90b4b40b3f459465ca87d6695d6229b48eaa38c875dc0615aebdcc595ab43637cb81b18c17be9fea42327118ce80f5f2ffcc2861993f3b0d46f205bc6e766ee27ea4b83b50aebb343eed3f2432a59d9dcf29625d50bd5877e625665db863b514bb52f7abef6e1e2dd5b6ed5a511136e2086eb556ba34514615ff27156d9e8f23c84d352b2e1a10643ac2b98c94bd4a1db85bd6b6a55fb2be43ae11f5d54dd4d40757ac797232366217f047afedd6557289e3dc6861e3165ba329d6311c6d0395406398167d588d2af0242f5ad02a0ebf0399551f4b13ca9cc8826eba00e92b84b696ba9d21d49eb1df97412a2bf1c6a04726f5027d02eaf2c89ce2c6de27f9808b21326a878164d11d75899eac16f9ed755afe9eece479bf5e0537815a0b37f34e1756a73fb169f3ce798a2c2f3e8244052cab98c3b4bbd190fe207bffcaf2c525b5b5730c732772aa0392c11520038281175dcb16d78b15c6b63aef64c24731c74b086ede30fe1689d971db8b642818947967141844856807c85ae1c37bafc0526fb736837f52c8d0e8e4af0cf4eb72d26c3396cbb96ef422b02211ed4b5242ce5c66d2cb944eacd9872952b3f661ee544c1a3fbbe145e4ee0b985c13c3e2cfa1a4134673a181f556d516706da0fb6c7b0f12512f49c185d2ebc6adfd1f9d74ee8488be6714507d175ff3041eca5d0e0b524fbabcc53db9c9ee650c09451d86eaed82528c81e8b8272e81ccc67e0e9727e409caf0339a8263523dfd1c4dd7de5ac71a80f23359021f025c5646f87488757f3f7ac8b95b0816aac4d61c3c73fdf4f31274667c7c5169fec4f7cec506b1a73888f20d2295685d0c0d185d009c944735228d10bb4d459d9d1f88418e86c5ec00138e3ae4569cc45632cc8fb19be39a45f57ec2a83ed7aa88d12972b96e9f8c8ad15075ce8ca9bad69543256be75a178a97943586fd9de151d464c78ad9117c20a9b780241c24c24fe4e1c6790b1d415bf8099dca0f1b9bdb65f97d4aa5eb3e56facd8ad4e797e48dfa840efcd4c3b9a03a407b3fae0c489c786b6b472d55c0b54b3e0e19d2a42b3955d841f39e6455a7cbc1fcf33755aa118e42e26ec7976ab755f44592ed9be20d5fae29ca135f0ac00a87237d6e9aa682bd0e171afceb77bfe655a4ccd011847dbc6d3f728d3b2f201c514f677b2aaf57c4f0d7e2dccb24fa058f77517f44fe4cc5931fc84591e2e9a3008371f3a2ede6aab92f46fe11ff35c40f618a6aab5ad52e69837981c4ed32b7433fa4d825064e72520b1205a11035eec9337e79cfc5daf4d0e4658e945541fdddc39d3126ad4d97aa7328fe68717545be6bc09cb4441c3149270ebca06c749f87f87e3aa5fe341b6055ee81af96a870005e233206e3f6bd29651d1af85af59d8e4cdd9db870d92cf778fa6fa72fed3705f9da23d0bc7aae55a6cd99fba2378816c25cb6ac3b449c09ceb3d1f2a07fe787a332d81551427da206c53e694b7e0dc995d7884470f88dcd5f25368e5e2d2129c0e50331767d30ba2db49feb6ff06e4d6a0539f7718771cb279c70889d7eeac9268d2145190463de45e569c7b8a74c92115019a66380198c111e5f7d75eca493442df467052bd3b6f7072548d909c6b642ba8c79ada73b75620801f7442cbd800c8aaceedfdb149e9e8f0ffaa422ba5535bfdfe3ce8ac2b395fb2725ccde43fb0059059e22ba55f4bb1fcd359da3f26679b9063a51639482c7add4a8b07002da6c5f1afefc31009b11f1d22bf58c2732b88cfadc9fb5102fe2c3bc97733c46034cd987489f162c426360548721c7717c8ce768052290ef75d08fef062c4bef183aee7188ec10365282d9c1234e98897541a25e63f0c74beaecbcb06cc0364b889e8d6f7cc26b7c9cca23e8e02e986d9c597ef15bddfed89bf15b0a6090ab2e7c574cb95530c75fc3ceb5f0d6305930d7cc6de2db569757564d0d8cd48f0eab92250efbfbb3c33e4356247d6a3d7063c810a2b89ae9b229fac1f3e29d08cf6f7b8322dc10f76a147af7ef433127507dfce777b54c4694dbfc716b5a24e4a9b221a6b4f4de30842de27bdb8d0a0f7feec76cf40bf374cd63854bb921bc7b51a363e0e454611f8fdd280c5972c1db67b3327f4484214d7e930bad2792e261d4456ab1325cb0b784960495616801e9711a09908df0249636c09f6b51c8d60c7785ed3d299bac1163da06749d304b8abbd3e79675847fbcf7708c41148967dbbea8e79873b9326aade0b107f7a51b525db498663c35e045ff52f58739cb18dd659e57668d4fadd68c548f599b46ac9828b1f0c91de8e4a9ccd12e77a0a8a14617e0d41a9473441dc4496e1b7b76c8528cd84169bd436cf431908d689ca2cb875eaa24bd23e43f082a7c57af51df529d670cd980bd1a4d9879253c076867d0b00229a48a08ccce50ba7311d1eb3312dc313bd381b06b685e4a103f00db5902e6a41332f5615b011f58846a8c60f20ab64217e62e6d6e02184b053f300e40b6ee98e7bfcd2c33540c620d218abd1237151c298b1a91161b4b7a483bffcc9724e03d6c1a52a62c22eeec2b8bbf28976679feedff964353fd1fb5f6a1b45945e0cb9d964036b16470a0bd82927e23307ee402f15164835048f77addd384c49f284798510161ed84d5067241c655ebc0fcd05ed22b3ede92723eb5f2350f38a162f88740fcdf3a96c504e02f540848c3f749df8d32767908640b69bf261adbe8470eae1576ced93a15c870ce5aa1517cd163e4fb0393ae7fc22de0c66da2a9c2700dcbd364163a124b14f83cf3e2084ea839f0e9e6026cd42365a800b01f6ebfb21177c360d27dbc1f2b8c8d76637e3586835a7c23e5ae0c44c34943465e6f0e0aca25bd9b18fa8e556c2cb5fd1e734f78176c85df37726889f8d85e8e9ce4e1f6d0c74dc0400f6f56af796cb4178cc696a4df04d91e5e9990e042616734d0e512c82d62ced3faa4637cecedf2fb271b21487ec01584cad2b1ff33c93fba0105a243396db283c14407cd9d7f7334ecc688996191f19f52121b0bc711bd182eb1cd74564c0f44da8ab3e618cc76d23f843c2ecc6ed76263ba53cc756c707881a0afb5e2b725a63fbb6311ec1ac72dbff73a94c3368ba304c980151b7655847c6a5a37023c6180e35c564e72602ff8f9565a98cfccac71ff1ecc17e626a4949ab984b01ad5048a85a0f1f7af062c3b9637024ef9c93d2e15dab040bc09f6031649cce52d7f3947d9dd046f3f90f2a82db19b61c6ff4e58234826de9158cd6586440f8a31011fe80440c9446bea3069cff7ce281c9adf80ab67cd90cfa86d9f608fbd4ab801fa4a796fb8f964bcedd836dbab54d013813c31fcccae721c2e014bee09ba303e9d31c81edf13fc6553fccc482ace6cc47843a9ec9f8215c96f3fdc11a6c6057bf4a7bb8501073742c0e5bf953bbc5255e24298c79a79dcba70c018104fc9c51ca588d6d46b115f17ea93a8f094a2b7441bb90678a2edffcf9f8bcce83ed2f5d4987937d9cff256e1cc3145694ab9192d7b3023659b0c30b76f68aa6c4ed1d9bcabe718c423ac374a2eed589203643d4d5b7d82f9ac6ba6d5110813dd35a054608806583b93211f16bb478fe7ada1e02112d7c79c0af535ad439c6a9dbf57452b05787a7e6d1f0b854ad5a42e7df07427137ccc27a661452c099f29720945fb8d6d4d4cba935a2e360bdbd4f70317c6dbf79846be32f23cbb0b5cd63195c1127b2c8bba8758e9646f3aa140b3f576400f761faa4217b7728af238eec328e21c3d0487b2f08c08eec9e0ec0662b685caee9a53415c655378ae8791cac25d591f2129dcf70c447767cfa5a7eb3968ce89da91606b88c39eda8ec1fba95b43de0069c7ecfd1e46405d62f47c425571a074e763fa9b42e597040409faf302eda0f5187245cae74ba3d8a789aeecd68b1b40b11f0f917c809918a7b2b08df857f61b52f38b28f61b98767df2d0ff4e6208e6e0139cdfd840be97749b27b1da2eafee41b206341dda7d5555a63ce2c5367f13e1ad049736864345a019e58f38ee98d578a1992dbe1f456771579fc62bb1030f38bb8327fd0b5f642439222591ec2086f023c1755b2d72932f63290e71936cb050d34fc3d155fa4231c4c0e5503e36775fe77a5063868391a2e4b220acfb358cebcdafff80915bb15c69417bc3bd6e87c52903c2fa45da006676be7d66273d6ca05d5bd9b3bab69385c0e195f4e3a90d271c598f3aacc0042e8b9e33c429a09288bd61c99c905c09cca2c08df91b772c698f1f7f9c5a1ce9d4e9b9803ecf4ff6d76b1b1d5551185e597791cf3c905027e649f5e3fc8defb1033b6bb122ab0f3a371bf9f3dbd40b5805f9cfb93e2167dd8f594b769fdaa7a063a5e090fc9337dd6981e56bcf2a1b34c4be409931a7103bbfc8c5c8bae2bd8d649d7287929d1bd620f63492ca19c61a88796b7d0bdc1563973f03cecb2e2a661f7bb909c343cc51a9d7fb6d7040532fd6cbddc6cdd8d887c5d94dce20f0617f9d0778ff6340b26d9adca3a1f6c4dbaf9b421e3439e2f6c2ea390a6a92dabf81bd383e487edb744a7f6d6fc1f5fc72950bb35ce0033739b8892c17e332ad2f25ce2711a59b6b23b88336b6ab96e21f5af6676a615ca635eda710705255958f15eab8a933447ed655b6ccc06be4efc2cb6176b48bed87ee6110b4621751dcb8e803f162cb27fb2a2ac956a57eb79b687e72fee4b6f4f0ab79021419183a1c217e5c824c153ade964f3189e49e5c36debbaa6ea8f38ead88505faf4ccca76302c2be639b27244ce7c15acf5a3259540b6530252b6adf88a87ec9bc2f3aae5290341d5968b9ef04b2f587240eec0f89c59f01472d932873321e03b00c1937fd95a8d603be92fd4cecca34ca608444743611897296a1ddfc262b1f33fa61b13c3c4"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_disconnect(r10) 4.534517157s ago: executing program 2 (id=340): socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x2, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x800000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0xc0, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xac, 0x1, [@m_bpf={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0xff, 0x8, 0xe, 0x81}, {0x0, 0x6, 0x74, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2002, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x1a4, &(0x7f0000000380)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b9646", 0x16e, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0xf8, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}, {"c059ed860531d55fe1b715edc4722dac0800cad918fb02490c2103b615837affe9725fdd77f247a393c1e2f83d392ac0709c0366b523b16c830e2047ff8bdf2079253db45078adce777d76f64c88275f9b3aeeba17178fc17ff7ebfae6043c739d75d8420ed033d4173336caa3750636ea511d6df2cfac337f7dea5e03be033eada10656993ee9a4abec16b9110d719253faaa8467d74e2fa73522803824021fb51ae3228d771fab3df41d6bb9cf05be3f9fc013e5c9f40397edab568043d8152fd3753bd4c7795edb681bc50c5feaca97e2fa0d74e24e29ab8bdc0cc4acaafb000c25c918b4f4fd82a6b4a8eceec8cb000df6b5c18847086f3910ed26469ad91722d5b0bee8377f155692eb5ee2629f409f1c294531f4fd6f90f28bf8daeb83089cf98b2fafc5385be8941921fdfc0edc987ca26e21674143d7a9dc0564f291df655289e34348ae9b58ff81f89f3ed8dce1dc4794b2"}}}}}}}, 0x0) 4.497641754s ago: executing program 5 (id=341): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.634369207s ago: executing program 2 (id=342): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x108, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xf6, 0x4a, 0x0, 0x1, [@typed={0xc, 0x140, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff"]}]}, 0x108}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 3.629842219s ago: executing program 3 (id=343): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) r1 = msgget$private(0x0, 0xa4) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/24) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.529861445s ago: executing program 2 (id=344): openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x80c41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000087d1ed430000000000001090224000100002000090400000703000100092109010000000000008081032000000bfb"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ppoll(&(0x7f0000000100)=[{r0, 0x5082}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe25, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x5e, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0xa000000, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x3d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000000c0)={0x9, 0x2, {0x0, 0xb0, 0x3, {0x0, 0x2}, {0xb, 0x9}, @ramp={0x67b, 0x8, {0x40, 0x6, 0x4, 0x9}}}, {0x55, 0x9, 0x3, {0x5, 0xdd67}, {0x7, 0x315}, @const={0x7, {0x4, 0x2, 0x0, 0x5a}}}}) 3.499044413s ago: executing program 1 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012009702000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000bad4f943162486dd6000737b00283a01fe040000000000000000000000000001fc0100000000000000000000000000008904907800000000000000000026fe80000000000000000000000000002900"/94], 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1420002002060500000000000000000007000000bf0615b27bdb8cce1f2c1607f7802bce25a562b11cb5a6ed7412c6f7087183f3c59b6e7dcae18064f720752a9c01311c00b432af58fc4069e0d50a23b45200"/98], 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xd) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x94, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xdc}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8d, 0xdea8, 0x400, 0x0, 0x0, "4acb8a41c8c563d00e1b2e88c485f5361dd0fdb7980aa6fdf78f8454301432aeec0b06169664d15fca9168207cb030c62d9b9dfec80600000000000000a100"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$netlink(0x10, 0x3, 0xf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) listen(r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) fsetxattr$security_selinux(r2, &(0x7f00000001c0), &(0x7f0000000280)='system_u:object_r:tmpfs_t:s0\x00', 0x1d, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) 2.945916901s ago: executing program 0 (id=346): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r2, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x80004, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r7, 0x20, &(0x7f0000000000)=[r7], 0x1) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 2.832124385s ago: executing program 1 (id=347): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB], 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00'/20, @ANYRES32=0x0, @ANYBLOB="100a0500231a0500340012800e00010069703665727370616e00000020000280060003003000000014000600fc020000000000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000340)={0x6, @capture={0x1000, 0x0, {0x70b6, 0xfffff9f2}, 0xea, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) setresuid(0xee00, 0xee00, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={[{@userxattr, 0x3a}, {@xino_on}, {@xino_off}, {@volatile}, {@nfs_export_off}], [], 0x2f}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_nanosleep(0x1, 0x1, &(0x7f00000001c0)={0x77359400}, 0xfffffffffffffffe) syz_emit_ethernet(0xf2, &(0x7f0000000540)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x12, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@lsrr={0x83, 0xf, 0xf8, [@multicast2, @broadcast, @broadcast]}, @rr={0x7, 0x23, 0x86, [@loopback, @private=0xa010101, @multicast1, @private=0xa010100, @remote, @empty, @loopback, @multicast2]}]}}, {0x4e24, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f866e12904b133e6bafc6eb170fb006", "211475fc21552dce5cda9c00"}}}}}}}, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) setsockopt$packet_buf(r6, 0x107, 0x5, &(0x7f0000000000)='Qe', 0x2) openat$cgroup_ro(r6, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000002c0)) 1.973886995s ago: executing program 0 (id=348): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.834874974s ago: executing program 5 (id=349): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000004bbe98a7ac9418c3620b0ad06a2b442a083663edc956e0c315e1790dd6d023b2e37b8f04685df7308c96cf30b6aa82deb7b3620ccc241f1748267ec511c3747a4dd8f5dd2abbc2c0b22f527f413eb6602f08987ab398", @ANYRESHEX, @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0xcd, &(0x7f00000006c0)=""/205, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0x8, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000180)={0x800, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x41000, 0x44, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x21) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB='&'], 0x10) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000340), &(0x7f0000000080)=r0}, 0x20) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x1) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) syz_usb_connect(0x7, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001c859fcaa049570810904008100feffff02055c97b1dee7673c95041b060e1525b63aab6d01e0d5d6bd4b8fe3000000000000"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x402) writev(r6, &(0x7f00000002c0), 0x0) mount(0x0, &(0x7f00000004c0)='./sys/module/usbcore/parameters/quirks\x00', &(0x7f00000003c0)='selinuxfs\x00', 0x81000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/usbcore/parameters/quirks\x00', 0x8003, 0x1a) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x4800) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r11, 0x100000000) write$binfmt_aout(r10, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)) writev(r7, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="0810b841e7b8c5afc0bbe5f1230e1b8bad301dd4de3cac61856df1e3444083303ca13006b2fe5ee12dc16199c3109ecee03ca163ce34f8d9a13b4d000f43204c7d07393297be382e0694882890a8d59bbb94c37b1a57bb9ac552c63813199ff63b5ad0d448cd615a1790c81c8c7394956add6009b83951e2e668f0381b6d2ca79e890aacea24ab716ec77a9d14a03f228b0836971552d52fb595483f9e57a98dbf8f1b2af86315f96bb97ff704ac39b371fbf0cbf83efda3981c7fbf732cfb370f5c52d0f2708e984c8d6bc60b59ab867faa4e8516ca2ca8410b06859880b7f8e419213319e42901f93a01ba5e9b0fb4eb11beea0845dded4a1840ded5439fd43991a143787bc6929506a8847521d494ce671fb1ad2cda8ba856a01a07af82406397db4643c142d3912f610e3ae9e8508d48a9c0954f268fd346e787338be74716faf0ae4ff6fcc57ef2022966c24717dbd7f6c0100fd28c36e409710f1005eb56ce9f8decc88df27e820c45f27a312ed524689a61c0a16205270e6e1e7a62b7bf2cd0bbf8c975d98056927c5fe9cbb7c70e0cfc4d34c97c357adf1c725297de8f3ba8efcad842b9962dd726e160287b1af0b9791f8f5880a606987b4d3b85aafa7edf1f1033af5a290e3de6f1520caf1c9c2a696dc04e37750084b563c268eb0295f2b63e9f76e59a764a753e36d2bed3a3e199192c1629a876b91f5406c94c5757f32c1849b554835a4ac1b2f69a781255b859170315abbbb52667fd11b15280cd79ea86451e937e5667a7690caec45277aae3fdadefed9e9289b2040a25da405a14a163dfcb1499c4de313a6aa5ef58ce3cd86615a5bd8063e42638824df548f8abd5fdbd7158fa28c74eb29340418c87d4518c4aa9bbb4e01bcf559048116b768837cf599a439d52271db13fc7e0bff95e677a31f87b6e097e22253485864c8a8a275309cf8fcffbb2f3351149d3386010f1bc2c3359495e49639976f592597bf971b271723ee8963fb4e979e32433042ac943bba51d21a4ac5286317497b852333fbb42ef03ccbd3f220d0c50277a1dc0eb1a5498e29e1a6d4f2178ea43bac36fd9d816cfae4627362c4b4f3ed8a8aa27e59da6e102e1ef20561a5e7c1a2260dbcf2343ab56b7c13bbfe7b509966ba20093cfaf4717ce8011c54378c09ad51161b328db9a3906df705ff6a3df5f6ce19d8c1d2a72601b4149549ee43dab62b9701511b1c1ebf6530ff9480c171b5c68aa5901d84819af9a42cffe35d3a4d867cd1812cf1e3aea15ee56b93ee0d65915371d87f5e96e8a85da5ba89886dddbb0a7ad5d77f6766e7132e5e56c4c605d434b9a3726960573d96dc2033bfc9fa1d7eefcb9491eb2dc55a43cddcba4cab7c1155b3254d37865f6045e2f4c31a25004c02392b8942673b3210b3c51e83ca5c54e817485bf247eacdab175a5eae063230c8ac45d0d2e0f76404eaf49f40434733d8e69309775b5dfa38368d0fa385787c937194c000b111fd512a9260e98b64cc9498f727b21573b779e8250a00c2c5e583f324695e28e19f550fc1536943db7ab7bdf3e0543b0bffec465bff037b6600eb5d6d37ef6ba6503fc4a395c4f011b138718265d7ca11dba0d0bfa5e97e8d653309e206bc6701742abdcacf9261b834acbc602bcbdcc74c8f360df1821306db69afd520a823269b714c54e88dfab17880ec2023477d952976b673261955909184858a87e902d3b272056447c882676297a466305d292f725facc26dc10413ff8e4b4cd9871ca8d14b59df62cf19cae6b3b548b34032ff1d64640c1d734c730eca28b43148e20309f10c3be7823407314c9b6f7b7568d59d9dac5a5dc4d802ee5ef00dc6e800bf5948cfd4bf42e3d82500cf3bf6922afbd715c431ebdc6ebea8c858b7f7647df975e85aad2781a29ec497393cb2834fcfc6817c8e659f158ac918392afed4b6be6ec4914a39898e1de46ab5bb7d560e6dbbc1d5ac7537fb0ddea37cbc47d153edcdda2c21590ca39e96a22e0e6383a4781dd85239d47cf377d3673a6603cc39c3dd3be97403e8503cdfad3c470b225c47bbd55f903f9eb981c2c9ac084ee2bcbe94ce0777e4ebefd04621a21a0c22e2b700a265529e855f0f48f3c49659defe8814ddf38acfc3625785d7fda9e3b22f6a4e8bc4d24d307a1445cc9b24b01a27462d7bbb38c21357712cb23c9214987678ef3a24bbf5e1afa2f6fce13d5a993ac3295b6a5696f930f95891844d354d4770f54c3d82eee4532fda5e3c588e5ddd5d0c8aead2b5a638c3a6b000a4ba4f4f3b949d42a95b2db3d36770dd0a0fa38aa3c4a1861bceb8e65953bfab32a24a32b0e6a541a0fdcef20aa1660f85cc3e67fbced6544686009cb7a2679a946e5d450b57a5ff26221bc2892289d6976c8c6533cd1d99b5a318486e3f815b2aca4ed829a02397d8777f5e51182d0a642676d8bc777088e5553fb06aca344c11e008f4986f658dad61537955034003a8d6733456e1be6d34e5003d83ac0553e06226a64b075aebe51cd2ca4dc125bd2e5216d8badb9ae0bd6037f1f2a521fcce6c3dbf50bcd3eee15217b3e905b23cc48b277c28fae49e7c848849024a9b63118a83c8ad22c62dc827ab1d3087a3ee5dc441f618bc5f1b905208af39d39fa6ef98b14cfab17086f8560219378ddf6441fd9c42492ca0c93a3b8f34f52ff2e0487f7889283170fbe3d0a6b", 0x780}], 0x2) 1.767578359s ago: executing program 1 (id=350): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770200000000000000664900"/25], 0x48) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 963.776483ms ago: executing program 1 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012009702000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000bad4f943162486dd6000737b00283a01fe040000000000000000000000000001fc0100000000000000000000000000008904907800000000000000000026fe80000000000000000000000000002900"/94], 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1420002002060500000000000000000007000000bf0615b27bdb8cce1f2c1607f7802bce25a562b11cb5a6ed7412c6f7087183f3c59b6e7dcae18064f720752a9c01311c00b432af58fc4069e0d50a23b45200"/98], 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xd) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x94, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xdc}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8d, 0xdea8, 0x400, 0x0, 0x0, "4acb8a41c8c563d00e1b2e88c485f5361dd0fdb7980aa6fdf78f8454301432aeec0b06169664d15fca9168207cb030c62d9b9dfec80600000000000000a100"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$netlink(0x10, 0x3, 0xf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0xe) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) fsetxattr$security_selinux(r2, &(0x7f00000001c0), &(0x7f0000000280)='system_u:object_r:tmpfs_t:s0\x00', 0x1d, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) 479.649937ms ago: executing program 0 (id=352): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="843a091fe2de2831da5ef7d090d4a00928b83a9c6b2c90fbecc3e22f619a4309320832ca55b139de3b0385906c20db1fe4955f62ba20d4d5d6c6e459146fe893a8a5c842b8f242f9a8237d0c6347f4ce5d2148728963c9c15aaa8b", 0x5b, 0x0, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_open_procfs$userns(r1, &(0x7f0000000180)) inotify_init() getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) flock(0xffffffffffffffff, 0x5) syz_open_dev$dri(&(0x7f0000000240), 0x7, 0x400000) syz_clone(0x10000, &(0x7f0000000280)="2073fe36276adaf8450f8314990b223770b255b77e274c29ec3645d7cf8c6316b4e730a54febc74bfdd826fe77d9e4e71b00cacd4c60db47d28dd21c4ef5bab576fc1cf1545c99fc286a4c3ac0e5224d709df34ab925d2b2171f69dad18aaf6080600571457ab7444fabfa25adac138fda9eaa580abf64ac320c334e65832ae731b49abb1cc8f8c51b6d165ecca818b54ca74c6ca9a398a7afbeac53154213db34b02d01576d95e8ef04856212e9adc889dc3b26d2264b3b83e6dbdc008d7a918cf16b9d406ee3edf01124db33de525e1466eae6136dd722a12e4d6fde9c", 0xde, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="e9e056eafa64acd9fa49033869388106d11b7d96d33bbf271ec71f1f25fb0c6317b94daa76bd0b4d8a2a34b3b457c8e1818ca3913d882563d76aa32723a296e70605cf821407982a81d6b5cbc243cf0e410b3e59b8838dede0412c5e1ff03ae3a9f57d3b3a3ea31da6bd581d72ef136749824f485cdf58cbe67ec9182a7f3af3a5839761d538a88b8ab6f16f45c0e31a26451a517d") syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) userfaultfd(0xc0801) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000500)={0x1}) sendmsg$inet(r0, &(0x7f00000018c0)={&(0x7f0000000540)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000580)}, {&(0x7f0000000680)="07651eb5cd982f10d0db723538aefbf3cae79e1c2f2028cd4ba44e446c822e3fbe23d113dc818823306799ab39a4b756e6688be39d0df242bac1901aa4c774b9ae4417cf84c0397d86246a97a6619b50a51c5ef10b0922aba2baff0433e9240cd4ca19e7a309e8945b751a0ab5560dbaa0018f6a72b8988be4bf6e92", 0x7c}, {&(0x7f0000000740)="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", 0x1000}], 0x3, &(0x7f0000001780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xed, 0x1, 0x4, [{@private=0xa010100, 0x2}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}]}, @lsrr={0x83, 0xb, 0x93, [@broadcast, @multicast1]}, @timestamp={0x44, 0x18, 0x13, 0x0, 0xc, [0x7190, 0x80, 0x2, 0x870, 0x7fffffff]}, @timestamp_addr={0x44, 0x34, 0xb2, 0x1, 0x5, [{@remote, 0x9}, {@multicast1}, {@rand_addr=0x64010100, 0x2}, {@local, 0xffff}, {@rand_addr=0x64010100, 0xb45}, {@local, 0x126f}]}, @timestamp_addr={0x44, 0x34, 0x23, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@private=0xa010101, 0x2}, {@multicast2, 0x7fffffff}, {@empty, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa5fb}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x118}, 0x40000) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000001900)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x60880}, 0x4010) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001a80)="5e921f41fceee996386d697c52344039a87f6ab4d0bea87b136adb30c48f76b3b3e951c12d2d8638b781f0900c7cdac9d9affcbd39e4e974dc3852fee00fdc25d9718838c2d24950ce5cf99e1f143da941a15f263b1d9999a2b0d85d5b51d2688154aca06ba1b9acac335e65d86f007a085c02ab3bc21980b0cca39a712a95c07ffabe0e15e21f3589ea633a872c7f9ff83d5cce29c997ddf5475af27917d4de9a044519c45f16189a01d895e22cb643c3143b5f5abe40c72050ef56539d72a4c0fa7b50", 0xc4}, {&(0x7f0000001b80)="25693039dc6c44e0e54fc765b4e15af96e7179a985315c5005670b457cf53d0fa7983b5adc8a9f274761117063ce6c244608c13eb98e7ce25dbdb19f67318eece0af44f879dd9a8cc21926ed39534d85c9abefa3af0d668b50ba91ab0bfa2bd14d690737a1417072b0e3e1306f3b2279828e191cbfa94f389d33543ed7662d15d4bd798ce73137bcd7a1f60e6fc8717f73808be70fbf2ea87c2fdda86a1e8d1c59212f812977925575b7245121f40b8988dc8eb439e1581db38ccbda325e04a19465457d65c39e826a080498db33ad8180aa20b59ea46c4d72e34ddbc2", 0xdd}, {&(0x7f0000001c80)="a89761f18fddc66431bb8ec837fb1153170d454ec3f1e3fc4351175c30aa8cea16f79bdf58298bf374e621175f512c8332e38233e2699cfeca0df0854bc01fa6d58bc7e108d9985e8a5e67be22ab1c34b379b9515fd57a9d1c2378c7095d293e115bbeeef5899f4f9d17c8fb025354547083e10c8903a6c7ead498561e2b0581a9104633e9bacb0386dbc7766673d6d5d469eab6323e939a6010b02e61c76e3c0af6e9461c3417413cf3b3ac9c3313bfe19282c08bdae3fb1a69c0", 0xbb}, {&(0x7f0000001d40)="b108b7e1e9083943006851fb99927928c60930c4fc5f46b9ee46085f09e67f4f7b44410acc1ec1b6bc21f6628989131647797eccb8435e74a0c35cdc903d5bae7cfe50dda4bfd4b2e2158e14437316df4c745e5970be4de1af2fe68667", 0x5d}, {&(0x7f0000001dc0)="b5bdff4b6cab2732f25e059f54c298f2c30d9be29a365083bf4c736fa4302d4270610c1c46bcbb0fe83cf7086abfaf1457fc9b1ce5ba5b20ae77f98ea4808382c235ceb5514f348c8bbe61305fd821c89ef15f614b154293fb440f979319a802317abea0bdbe79cde38b17b2394c38782573f223bacc65450ad06b9220446ba3837e6e0fc3c640d166dbfc718113fdcdebb445cb35a2d4981674ffee921bdd2b20f36f268bfc9d2567a5144157fa8b58e37bb4a6859916a0cf5023e3a6a48ca5fa147338fb9da0b72b9f29ea8f7821a1c8fed25a268cc810", 0xd8}, {&(0x7f0000001ec0)="4ba160f0402b1c36f7589f759530786452ebff05cc2df07fdcc5b37f035b5e446cbdad92a4fca5958ddb9936e03625e60ad788243f623d998effa68c7f50a5ebd17a86209c935872e060fff9ee06295477078063", 0x54}, {&(0x7f0000001f40)="0c2dd1e461275c5b1f45e32d728ad00094fc0e74972285e0328856dc7b94d6d943140314401889ce10788d9082aeb3b4e8fa40a43ecd86702a31aff36ad485635d40d49f2715ccae990837850d571efafeba05c2a5fda4942fd25042f088d836f72861239cbb6e83ff74388a71270cfc1003ba2a2b74e8b38cc7ea956e327f90765132140043ed527aac98752690d98c8cfada6e53e2a4562bea5a0c18637bce7e5dee2ddc34518cafd919f03f8fded2f4bba143c0df522b4d08f83d9403000daeb9b7e37a58914be2258af65db7d5e5d268e5fff67f6cad59deff36d658ad2c6a91ed215324263f85eff156d79f84a447", 0xf1}, {&(0x7f0000002040)="5c48a14608745a8d9c681512242a24bf7399b26206e4b4622fdfd914cfb0eda697433ceb6f63b8fa0cbefe2e5a04ba5b5647516c6699b78bb43052d524afbf2b4733778e6e643b258246bb4e9682309128fe19fadfcf61dc35db36917fa4fd8faf1051c4b604c7e79a6453ba16e37560e354759d23d453d4c4b2bda7eb487795af2779cfb35f4c59530f186b5e5c18fcbd26b8f74b20e19297a0ac3e31340face2e3cf0404b4f9d0ee4b04ccb046c73fb45db30fe84b2fc6b09ce2e9de41242eff", 0xc1}], 0x8, &(0x7f00000021c0)=[{0x88, 0x84, 0x6, "dbd7545119e024d668b4f770333ab55409e1fea58d3920154e4132898c5801fc9fc6d0909000838cdbd06d2164662f8ed87ec44f2a146812f8a09e56ff6ef275d14ba2f692a9d54acec8844b097dca9955a41217b5f1e4b92f5dd058f195636caaf2a281582c104a9f086494bc359ef13b8c6d3877"}, {0x68, 0x109, 0x5, "4caa97d8625fe8eb5cc1169e2e2ff6822a7f2e286d71e74fc4b7facc42bf51895fb70b6b71099a313a716b65e8b625580c836834a7257ab0cf689a8b00bcef5db8ae38f58a4841efcf0806c301669e0057c94497e229"}], 0xf0}, 0x840) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002300), 0x105001, 0x0) ioctl$BLKGETZONESZ(0xffffffffffffffff, 0x80041284, &(0x7f0000002340)=0xd) accept4$packet(0xffffffffffffffff, &(0x7f0000002380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000023c0)=0x14, 0x80800) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000002400)={[0x6, 0x3, 0xd, 0x8000, 0x7fffffff, 0x1, 0x4, 0x0, 0x6, 0x100000000, 0x808000000000000, 0xfef9, 0x5, 0x800, 0x0, 0x924], 0xd33baff7ffa1359f, 0x10000}) pipe2$9p(&(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RSTATu(r5, &(0x7f0000002500)={0x70, 0x7d, 0x2, {{0x0, 0x56, 0xfffb, 0xe0000000, {0x0, 0x1, 0x2}, 0x10100000, 0x9, 0x5, 0x2, 0xf, '/dev/ttyprintk\x00', 0xf, '/dev/dri/card#\x00', 0x4, '*-$.', 0x1, ','}, 0x5, 'syz1\x00', r2, r3, r2}}, 0x70) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002580)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 'pim6reg0\x00'}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002600)="106e9a3455383070dab1f606907a8e9a1aa5bb244587b7fe3842708aad0443504922313f23ec0b9bd649461f37e07adc75e900325618a21245764f06e50c34475c0456f58a62bd3bc10d4bd963bad07d6ea7d5d507c8c53cc488264cdadf2888b4f1835106c1af577e4fb05e014e8f43f3df6ed438db4d8eb1857de39f0f943fd1637d823f089955f65a1b90680476ed5d0decad8042844dddee86bb5dde981432589c25b1981e564684e4d21446fd2a36bea67d7606d4", 0xb7}, {&(0x7f00000026c0)="087466531dabd7ad7b330eb9e4d3a575353ed5c901460bab53be92636c0115e2393f5f76978ffb3a236a11f90051168b8f9545b6683864b4006fbc70ae615969dea3dda3fb5e51621336c218b1783eb8211b0980d39556fcededc862fb5a7b4dda390c381c650dadb85bd5f9dcdb752842fb71175212267c27f2a168def18bca8685077a517f1f18aad7c7b105b9b241d6a669ccb0827d2b2a004c7c781e08b336b46e5d36203923fae6bbba5d111ba55fdfc262a4ffb0764ad607fc86e1e8aca2d7a880f31f5290d21acc587f41858c59", 0xd1}, {&(0x7f00000027c0)="0704d99150ee03ee5d6e2a909bf996ce04315e0dbe68c8252ea91441dd0921cff35c698ddc3354daee0094bd366faa5e6d9ad9ba6d2213f94ce853743edd973abf99723494774afb7a97c9bb2d6a4b279a0d76c9cddd94a64bd13f8f5048d06ee5eec582eb63be23a9a20ced8c8a2b52e91d5fdc56d082ed0a165c92962a997b35a653cf685fdd3ecb44cb43ffcbcdc7b9a5d6d42990705bb1ced284f2f193d00b02611f6a28716384865107f8655bc13698512feae2080b8ecf7d09f8e3da3dfdf50eee146daafbd2c260e23dbb8aa883c0f0175f7f397cec52d0febac6", 0xde}, {&(0x7f00000028c0)="51c6f448406d72b996548c2f0ce406b3ed21e2b66dc312975d2a2fccd9b7225d680953c229336f6bc4b7d4933f4cad2564083086db51c02a1e7c766afeb3674c72d933e3c5308d62f2323a8eb7e94a57a84deddee3f504316c50451b37be39a1607a478fa5fe6087fe6dd057deec2c7991fdf0b6d480e45070f1e54c966ec215f71b63764e2018f429bfc54aae276983174762a79cfbdc79ef27f1bfa1d1297d20db0559cdd657ce36e76406fc7db6260d54ce037618c11271b90182d495ce0dc4502a92bbf4dc5dc7b00cc452672b5f073d84897b2171b49a12e09c3e1cc4f99a4c519fa752b66ce8395bacd687d59c4f572125d7865c74", 0xf8}, {&(0x7f00000029c0)="fe463b5d3dd9bddd0528e134d768a0ab37c6ff4a6205fe7e4f1d3a4a4e2fbe9687a1233619d96a49d457d6a2032327b1b4d45409a27c81b42b89db38281e058e7bfc0bfc2fa28f3231d257c9df32d2b22ad85ce9878596d4199e808e9e7d97911a511a8d49081e98c4e5e07ce51a19f21cc4b8b159f4f14d615cfd7da20c8ac610d0", 0x82}, {&(0x7f0000002a80)="53224ddfb9c3dd527b018cdee26573f47305dacb3e734ec2086b9ccf6c7e1bc5eca52396fc77eadd0ead5d6069ff3ec4", 0x30}, {&(0x7f0000002ac0)="286cc6233f21ab26429e373d509942e9454e729359dc2de76bcdfb2fdc848d1e0726623fad9c56005594c04d1a258928e7489fca14c1879e6bc89106e15876a22221955dccc97acf", 0x48}, {&(0x7f0000002b40)="bd7cef1fbf81031551a04054794ecb0df40314ade66e75839302a9ec939dcb970b4dc32468a6c181bed19f36b7fce3625ace6b08552bdc636472802c20948f1251feb06b9521d685aefa8800434905a48e", 0x51}], 0x8, &(0x7f0000002c40)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffe08d}}], 0x18}, 0x4800) r6 = eventfd2(0xd01, 0x1) fcntl$addseals(r6, 0x409, 0x8) 467.230167ms ago: executing program 5 (id=353): socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x2, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x800000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0xc0, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xac, 0x1, [@m_bpf={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0xff, 0x8, 0xe, 0x81}, {0x0, 0x6, 0x74, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2002, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x1a4, &(0x7f0000000380)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b9646", 0x16e, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0xf8, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}, {"c059ed860531d55fe1b715edc4722dac0800cad918fb02490c2103b615837affe9725fdd77f247a393c1e2f83d392ac0709c0366b523b16c830e2047ff8bdf2079253db45078adce777d76f64c88275f9b3aeeba17178fc17ff7ebfae6043c739d75d8420ed033d4173336caa3750636ea511d6df2cfac337f7dea5e03be033eada10656993ee9a4abec16b9110d719253faaa8467d74e2fa73522803824021fb51ae3228d771fab3df41d6bb9cf05be3f9fc013e5c9f40397edab568043d8152fd3753bd4c7795edb681bc50c5feaca97e2fa0d74e24e29ab8bdc0cc4acaafb000c25c918b4f4fd82a6b4a8eceec8cb000df6b5c18847086f3910ed26469ad91722d5b0bee8377f155692eb5ee2629f409f1c294531f4fd6f90f28bf8daeb83089cf98b2fafc5385be8941921fdfc0edc987ca26e21674143d7a9dc0564f291df655289e34348ae9b58ff81f89f3ed8dce1dc4794b2"}}}}}}}, 0x0) 322.935585ms ago: executing program 0 (id=354): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x108, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xf6, 0x4a, 0x0, 0x1, [@typed={0xc, 0x140, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff"]}]}, 0x108}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 20.740114ms ago: executing program 0 (id=355): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f00000029c0)=[{{&(0x7f00000006c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000880)="945b2ff97be576059d3e6218ff323c214d4700a2df6e2022b47490bfbedda9f864b548018231bcfcd291b00e9d9080cacbaa24c23b93857b6affeccf783103f8fcee79a42a9b5615e2237c70866412d6e88a867408e0d3cca911cb758d411bf47d3cb24296aa7a921be9a8b43da8babb24575235696621ede2f7b84f6922095508228b47a7a660f5", 0x88}, {0x0}, {&(0x7f0000000940)="6c02868733c979b4c1b2e3de561000ca9a19457737f0ff4a80932944f373ba6c09031b777ff9b5cfd70e88fc7b474545a48289dd0bace6f73bc9e771e948887b216ded0231f75239ca5599d232ab7e3a3b0152ec9bffb332d2a2c5bf4ff2d8464e9a47a51fc4581f63d8ecef7f62890b058d61bd312ef2c6e85ae9d78ca492350edf07ae7b529dee7d131690e31fb6416b142ba1d1b7d7a0fcfe6c498384bfccf475e81a108887bff0732e8dc5ff801cc7ebf20e7b538045eaf213390b2ec794d6dcd0608adc3ec433c79f6f27e05d11789c70a55eaf8e4ed27e6e35d5569ca4ecf7bd7ffe8af220f800b0cd7bfeda7fcda364e9f9", 0xf5}, {&(0x7f0000002a00)="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", 0x1134}], 0x4) 6.577853ms ago: executing program 1 (id=356): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}]}, 0x60}}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) 0s ago: executing program 5 (id=357): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) kernel console output (not intermixed with test programs): h: 249 > 2 [ 67.018157][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.037094][ T29] audit: type=1400 audit(1785055837.940:147): avc: denied { read } for pid=5607 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.042328][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.058541][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.074573][ T29] audit: type=1400 audit(1785055837.970:148): avc: denied { open } for pid=5607 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.098285][ T29] audit: type=1400 audit(1785055837.980:149): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 67.120581][ T29] audit: type=1400 audit(1785055837.990:150): avc: denied { module_request } for pid=5607 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 67.210124][ T29] audit: type=1400 audit(1785055838.080:151): avc: denied { sys_module } for pid=5608 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.373525][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.380960][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.388177][ T5617] bridge_slave_0: entered allmulticast mode [ 68.395106][ T5617] bridge_slave_0: entered promiscuous mode [ 68.402472][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.409639][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.416883][ T5611] bridge_slave_0: entered allmulticast mode [ 68.423934][ T5611] bridge_slave_0: entered promiscuous mode [ 68.457964][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.465252][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.472349][ T5608] bridge_slave_0: entered allmulticast mode [ 68.479142][ T5608] bridge_slave_0: entered promiscuous mode [ 68.486053][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.493117][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.500301][ T5617] bridge_slave_1: entered allmulticast mode [ 68.507206][ T5617] bridge_slave_1: entered promiscuous mode [ 68.514305][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.521500][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.528816][ T5611] bridge_slave_1: entered allmulticast mode [ 68.535473][ T5611] bridge_slave_1: entered promiscuous mode [ 68.554581][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.561757][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.568933][ T5608] bridge_slave_1: entered allmulticast mode [ 68.575614][ T5608] bridge_slave_1: entered promiscuous mode [ 68.637035][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.648094][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.668172][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.679017][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.689671][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.719002][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.747415][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.754551][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.762565][ T5607] bridge_slave_0: entered allmulticast mode [ 68.769450][ T5607] bridge_slave_0: entered promiscuous mode [ 68.789775][ T5617] team0: Port device team_slave_0 added [ 68.802059][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.809748][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.816938][ T5607] bridge_slave_1: entered allmulticast mode [ 68.823649][ T5607] bridge_slave_1: entered promiscuous mode [ 68.830361][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.837452][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.845240][ T5612] bridge_slave_0: entered allmulticast mode [ 68.851922][ T5612] bridge_slave_0: entered promiscuous mode [ 68.866451][ T5617] team0: Port device team_slave_1 added [ 68.873722][ T5608] team0: Port device team_slave_0 added [ 68.881127][ T5611] team0: Port device team_slave_0 added [ 68.893026][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.900226][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.907486][ T5612] bridge_slave_1: entered allmulticast mode [ 68.914147][ T5612] bridge_slave_1: entered promiscuous mode [ 68.928041][ T5608] team0: Port device team_slave_1 added [ 68.935019][ T5611] team0: Port device team_slave_1 added [ 68.973701][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.990779][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.997937][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.024087][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.050323][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.061064][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.070786][ T5613] Bluetooth: hci3: command tx timeout [ 69.070790][ T5618] Bluetooth: hci1: command tx timeout [ 69.073878][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.091538][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.098513][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.124480][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.135716][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.142725][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.145230][ T5613] Bluetooth: hci4: command tx timeout [ 69.168687][ T5618] Bluetooth: hci0: command tx timeout [ 69.169250][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.191517][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.198713][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.225188][ T5613] Bluetooth: hci2: command tx timeout [ 69.231402][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.264604][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.271795][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.297998][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.309407][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.316411][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.342362][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.372184][ T5612] team0: Port device team_slave_0 added [ 69.379769][ T5612] team0: Port device team_slave_1 added [ 69.392036][ T5607] team0: Port device team_slave_0 added [ 69.427538][ T5607] team0: Port device team_slave_1 added [ 69.451481][ T5611] hsr_slave_0: entered promiscuous mode [ 69.457965][ T5611] hsr_slave_1: entered promiscuous mode [ 69.471361][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.478502][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.504488][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.532980][ T5617] hsr_slave_0: entered promiscuous mode [ 69.539130][ T5617] hsr_slave_1: entered promiscuous mode [ 69.545333][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 69.551123][ T5617] Cannot create hsr debugfs directory [ 69.563805][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.571040][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.597035][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.608375][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.615494][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.641546][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.662943][ T5608] hsr_slave_0: entered promiscuous mode [ 69.669093][ T5608] hsr_slave_1: entered promiscuous mode [ 69.675179][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 69.680905][ T5608] Cannot create hsr debugfs directory [ 69.691768][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.698755][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.724753][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.856906][ T5612] hsr_slave_0: entered promiscuous mode [ 69.862981][ T5612] hsr_slave_1: entered promiscuous mode [ 69.869108][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 69.874869][ T5612] Cannot create hsr debugfs directory [ 69.888674][ T5607] hsr_slave_0: entered promiscuous mode [ 69.895167][ T5607] hsr_slave_1: entered promiscuous mode [ 69.901099][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 69.906941][ T5607] Cannot create hsr debugfs directory [ 70.200455][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.211897][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.219733][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.229708][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.237489][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.247836][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.255598][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.265475][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.329177][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.338335][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.353012][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.362144][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.370422][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.379811][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.400224][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.410504][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.471986][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.480958][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.490729][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.499287][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.507433][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.517129][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.526032][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.535320][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.621680][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.634602][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.643021][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.652168][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.660537][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.669774][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.679296][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.693827][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.702978][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.769811][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.778290][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.801299][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.808893][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.823041][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.830192][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.855513][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.864866][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.872625][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.881600][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.889693][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.899320][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.916968][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.926353][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.941601][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.964346][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.971450][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.988512][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.995608][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.017379][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.067852][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.087516][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.095236][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.130252][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.137455][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.146372][ T5613] Bluetooth: hci1: command tx timeout [ 71.147404][ T5618] Bluetooth: hci3: command tx timeout [ 71.187655][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.224942][ T5618] Bluetooth: hci4: command tx timeout [ 71.225296][ T5613] Bluetooth: hci0: command tx timeout [ 71.237160][ T5608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.261140][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.304422][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.311610][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.321462][ T5613] Bluetooth: hci2: command tx timeout [ 71.358668][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.381508][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.388700][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.469324][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.512304][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.519464][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.544005][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.551128][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.897932][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.060157][ T5611] veth0_vlan: entered promiscuous mode [ 72.113150][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.135977][ T5611] veth1_vlan: entered promiscuous mode [ 72.159855][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.251107][ T5611] veth0_macvtap: entered promiscuous mode [ 72.263768][ T5617] veth0_vlan: entered promiscuous mode [ 72.311768][ T5611] veth1_macvtap: entered promiscuous mode [ 72.330314][ T5617] veth1_vlan: entered promiscuous mode [ 72.363715][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.377202][ T5608] veth0_vlan: entered promiscuous mode [ 72.403285][ T5608] veth1_vlan: entered promiscuous mode [ 72.429594][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.455747][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.466015][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.486583][ T5617] veth0_macvtap: entered promiscuous mode [ 72.517011][ T112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.530835][ T5617] veth1_macvtap: entered promiscuous mode [ 72.550662][ T112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.559677][ T112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.586854][ T112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.598630][ T5612] veth0_vlan: entered promiscuous mode [ 72.604953][ T5608] veth0_macvtap: entered promiscuous mode [ 72.633530][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.642197][ T5608] veth1_macvtap: entered promiscuous mode [ 72.663380][ T5612] veth1_vlan: entered promiscuous mode [ 72.677065][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.698856][ T112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.708269][ T112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.734595][ T112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.758435][ T112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.791702][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.809809][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.818675][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.834405][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.874100][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.881676][ T5612] veth0_macvtap: entered promiscuous mode [ 72.892193][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.915960][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.924855][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.945359][ T29] audit: type=1400 audit(1785055843.840:152): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.zNeZnz/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.973292][ T29] audit: type=1400 audit(1785055843.840:153): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.991629][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.006138][ T29] audit: type=1400 audit(1785055843.850:154): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.zNeZnz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.013851][ T5612] veth1_macvtap: entered promiscuous mode [ 73.032207][ T29] audit: type=1400 audit(1785055843.850:155): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.065465][ T29] audit: type=1400 audit(1785055843.850:156): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.zNeZnz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.072277][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.109281][ T29] audit: type=1400 audit(1785055843.850:157): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.zNeZnz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.111905][ T5607] veth0_vlan: entered promiscuous mode [ 73.153525][ T29] audit: type=1400 audit(1785055843.850:158): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.159945][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.176919][ T29] audit: type=1400 audit(1785055843.880:159): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.205194][ T29] audit: type=1400 audit(1785055843.880:160): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="gadgetfs" ino=8350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.211315][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.229236][ T5613] Bluetooth: hci1: command tx timeout [ 73.238775][ T5618] Bluetooth: hci3: command tx timeout [ 73.240820][ T29] audit: type=1400 audit(1785055843.880:161): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.251862][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.304986][ T5618] Bluetooth: hci0: command tx timeout [ 73.305197][ T5613] Bluetooth: hci4: command tx timeout [ 73.352445][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.371617][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.378655][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.380672][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.387497][ T5613] Bluetooth: hci2: command tx timeout [ 73.422648][ T5607] veth1_vlan: entered promiscuous mode [ 73.473821][ T1123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.487753][ T1123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.497632][ T1123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.514566][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.525206][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.533462][ T1123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.666320][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.674680][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.731790][ T5607] veth0_macvtap: entered promiscuous mode [ 73.788379][ T5607] veth1_macvtap: entered promiscuous mode [ 73.888507][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.912882][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.933799][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.040860][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.055607][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.071144][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.127203][ T1123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.148067][ T1123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.194599][ T1123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.207865][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.811160][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.904994][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.965126][ T5714] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.013964][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.070640][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.145045][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 75.165709][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.204055][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.247727][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.305589][ T5613] Bluetooth: hci1: command tx timeout [ 75.315679][ T5613] Bluetooth: hci3: command tx timeout [ 75.333550][ T5714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 75.385101][ T5613] Bluetooth: hci4: command tx timeout [ 75.394776][ T5613] Bluetooth: hci0: command tx timeout [ 75.416262][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.465655][ T5613] Bluetooth: hci2: command tx timeout [ 75.518082][ T5714] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 75.546550][ T5714] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 75.558497][ T5714] usb 4-1: Manufacturer: syz [ 75.894589][ T5714] usb 4-1: config 0 descriptor?? [ 76.417268][ T5714] rc_core: IR keymap rc-hauppauge not found [ 76.435412][ T5714] Registered IR keymap rc-empty [ 76.458078][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.495355][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.537663][ T5714] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 76.614510][ T5714] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 76.651618][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.684384][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.734795][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.778136][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.825587][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.828411][ T5848] Bluetooth: MGMT ver 1.23 [ 76.846161][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.884932][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 77.033773][ T5852] hub 8-0:1.0: USB hub found [ 77.041302][ T5852] hub 8-0:1.0: 1 port detected [ 77.457071][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 77.474731][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.485985][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 77.524794][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 77.687554][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 78.584316][ T5714] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 78.616802][ T5714] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 78.626110][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.135100][ T5714] usb 4-1: USB disconnect, device number 2 [ 79.171944][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.239333][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 79.268725][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.321932][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.804883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 80.171959][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 80.171978][ T29] audit: type=1400 audit(1785055850.470:235): avc: denied { create } for pid=5864 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.176316][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 80.364863][ T29] audit: type=1400 audit(1785055851.260:236): avc: denied { setopt } for pid=5868 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.581898][ T10] usb 2-1: unable to read config index 2 descriptor/start: -71 [ 80.614119][ T10] usb 2-1: can't read configurations, error -71 [ 80.638455][ T29] audit: type=1400 audit(1785055851.290:237): avc: denied { bind } for pid=5868 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.707886][ T29] audit: type=1400 audit(1785055851.300:238): avc: denied { name_bind } for pid=5868 comm="syz.0.17" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.812836][ T29] audit: type=1400 audit(1785055851.300:239): avc: denied { node_bind } for pid=5868 comm="syz.0.17" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 80.891743][ T29] audit: type=1400 audit(1785055851.310:240): avc: denied { write } for pid=5868 comm="syz.0.17" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.954185][ T29] audit: type=1400 audit(1785055851.770:241): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.338468][ T24] cfg80211: failed to load regulatory.db [ 82.036024][ T29] audit: type=1400 audit(1785055852.940:242): avc: denied { block_suspend } for pid=5884 comm="syz.1.23" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.091791][ T29] audit: type=1400 audit(1785055852.970:243): avc: denied { ioctl } for pid=5884 comm="syz.1.23" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=930 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.208519][ T29] audit: type=1400 audit(1785055852.980:244): avc: denied { mounton } for pid=5884 comm="syz.1.23" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.298494][ T5895] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 83.091631][ T5902] use of bytesused == 0 is deprecated and will be removed in the future, [ 83.110986][ T5902] use the actual size instead. [ 84.495544][ T5802] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.689554][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.720789][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.751831][ T5802] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 84.783084][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.837717][ T5802] usb 4-1: config 0 descriptor?? [ 85.313539][ T5802] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 85.342279][ T5802] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 85.366825][ T5802] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 85.390984][ T5802] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 85.400419][ T5802] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 85.443921][ T5802] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 85.468805][ T5802] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 85.481475][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 85.481492][ T29] audit: type=1400 audit(1785055856.380:260): avc: denied { ioctl } for pid=5915 comm="syz.3.31" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.532578][ T5802] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 85.534013][ T29] audit: type=1400 audit(1785055856.430:261): avc: denied { read } for pid=5927 comm="syz.1.35" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.534216][ T29] audit: type=1400 audit(1785055856.430:262): avc: denied { open } for pid=5927 comm="syz.1.35" path="/dev/input/event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.808459][ T29] audit: type=1400 audit(1785055856.710:263): avc: denied { mount } for pid=5915 comm="syz.3.31" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.817149][ T5916] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 85.880422][ T29] audit: type=1400 audit(1785055856.770:264): avc: denied { read } for pid=5936 comm="syz.2.38" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.920358][ T29] audit: type=1400 audit(1785055856.770:265): avc: denied { open } for pid=5936 comm="syz.2.38" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.920429][ T5939] binder: BINDER_SET_CONTEXT_MGR already set [ 86.064081][ T992] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.085970][ T5939] binder: 5936:5939 ioctl 4018620d 200000004a80 returned -16 [ 86.098308][ T29] audit: type=1400 audit(1785055856.770:266): avc: denied { ioctl } for pid=5936 comm="syz.2.38" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.404749][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 86.430249][ T5916] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 86.445624][ T992] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 86.458958][ T29] audit: type=1400 audit(1785055856.780:267): avc: denied { set_context_mgr } for pid=5936 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.490319][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.501814][ T992] usb 2-1: Product: syz [ 86.510377][ T992] usb 2-1: Manufacturer: syz [ 86.522287][ T29] audit: type=1400 audit(1785055856.820:268): avc: denied { map } for pid=5936 comm="syz.2.38" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.559059][ T992] usb 2-1: SerialNumber: syz [ 86.561584][ T5721] usb 4-1: USB disconnect, device number 3 [ 86.583541][ T992] usb 2-1: config 0 descriptor?? [ 86.662442][ T29] audit: type=1400 audit(1785055856.890:269): avc: denied { create } for pid=5936 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.818143][ T992] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 87.029411][ T992] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 87.146892][ T992] usb 2-1: USB disconnect, device number 4 [ 87.283621][ T5956] syzkaller0: entered promiscuous mode [ 87.293042][ T5956] syzkaller0: entered allmulticast mode [ 87.391048][ T5957] pim6reg1: entered promiscuous mode [ 87.419627][ T5957] pim6reg1: entered allmulticast mode [ 87.659358][ T5962] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 90.047683][ T5713] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.153601][ T5985] comedi comedi2: pcmmio: I/O port conflict (0x80,32) [ 90.244270][ T5713] usb 3-1: Using ep0 maxpacket: 8 [ 90.274060][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.303011][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 90.328060][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 90.428036][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 90.481922][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 90.511826][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 90.537669][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.586700][ T5713] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 90.621586][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.648677][ T5713] usb 3-1: Product: syz [ 90.661482][ T5713] usb 3-1: Manufacturer: syz [ 90.675522][ T5713] usb 3-1: SerialNumber: syz [ 90.696963][ T5713] usb 3-1: config 0 descriptor?? [ 90.715256][ T5980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.724981][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.727248][ T5713] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 90.764844][ T5713] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 90.906483][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.182526][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.269885][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.336935][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.364416][ T24] usb 4-1: SerialNumber: syz [ 91.400143][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 91.400160][ T29] audit: type=1400 audit(1785055862.290:291): avc: denied { write } for pid=5979 comm="syz.2.48" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.469498][ T5998] binder: 5979:5998 ioctl 89f0 200000000580 returned -22 [ 91.493572][ T29] audit: type=1400 audit(1785055862.390:292): avc: denied { write } for pid=5979 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.551946][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 91.855156][ T5992] mmap: syz.3.54 (5992): VmData 37478400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 91.939138][ T24] usb 4-1: 0:2 : does not exist [ 91.962382][ T29] audit: type=1400 audit(1785055862.390:293): avc: denied { nlmsg_write } for pid=5979 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.963356][ T24] usb 4-1: unit 5 not found! [ 92.115596][ T29] audit: type=1400 audit(1785055862.840:294): avc: denied { create } for pid=6000 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.171215][ T24] usb 4-1: USB disconnect, device number 4 [ 92.191173][ T5721] usb 3-1: USB disconnect, device number 2 [ 92.241053][ T29] audit: type=1400 audit(1785055862.850:295): avc: denied { bind } for pid=6000 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.503263][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.630477][ T29] audit: type=1400 audit(1785055862.850:296): avc: denied { write } for pid=6000 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.806954][ T29] audit: type=1400 audit(1785055863.710:297): avc: denied { setopt } for pid=6012 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.913563][ T6019] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=6019 comm=syz.4.59 [ 92.926275][ T29] audit: type=1400 audit(1785055863.810:298): avc: denied { create } for pid=6012 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.964358][ T29] audit: type=1400 audit(1785055863.810:299): avc: denied { connect } for pid=6012 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.964846][ T6020] Bluetooth: hci0: unsupported parameter 255 [ 93.023598][ T29] audit: type=1400 audit(1785055863.810:300): avc: denied { write } for pid=6012 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.054813][ T6020] Bluetooth: hci0: unsupported parameter 255 [ 93.062778][ T5721] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.226243][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 93.234367][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.250410][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.263193][ T5721] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 93.289160][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.348414][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 93.349741][ T5721] usb 2-1: config 0 descriptor?? [ 93.418289][ T6028] veth1_vlan: entered allmulticast mode [ 93.436111][ T5721] hub 2-1:0.0: USB hub found [ 93.595336][ T5721] hub 2-1:0.0: 1 port detected [ 94.238274][ T5721] hub 2-1:0.0: activate --> -90 [ 95.164915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.600980][ T5713] usb 2-1-port1: config error [ 95.611482][ T5713] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 95.628012][ T5721] usb 2-1: USB disconnect, device number 5 [ 96.635576][ T5721] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.818231][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 96.850489][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.398733][ T6067] atomic_op ffff88804a401998 conn xmit_atomic 0000000000000000 [ 97.724879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 97.856949][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.909326][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.979881][ T5721] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 98.026575][ T5721] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.078872][ T5721] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 98.097541][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 98.097557][ T29] audit: type=1400 audit(1785055869.000:325): avc: denied { create } for pid=6072 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.128016][ T5721] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 98.154902][ T5721] usb 3-1: Manufacturer: syz [ 98.169452][ T5721] usb 3-1: config 0 descriptor?? [ 98.183501][ T29] audit: type=1400 audit(1785055869.030:326): avc: denied { setopt } for pid=6072 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.233903][ T6075] tipc: Started in network mode [ 98.245776][ T29] audit: type=1400 audit(1785055869.140:327): avc: denied { getopt } for pid=6072 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.269038][ T29] audit: type=1400 audit(1785055869.170:328): avc: denied { bind } for pid=6072 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.330108][ T6075] tipc: Node identity ac14140f, cluster identity 4711 [ 98.480144][ T6075] tipc: New replicast peer: 172.30.0.1 [ 98.520557][ T6075] tipc: Enabled bearer , priority 10 [ 98.528342][ T5721] rc_core: IR keymap rc-hauppauge not found [ 98.534294][ T5721] Registered IR keymap rc-empty [ 98.540442][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.591277][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.619566][ T5721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 98.658792][ T5721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 98.756749][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.810673][ T29] audit: type=1400 audit(1785055869.710:329): avc: denied { ioctl } for pid=6081 comm="syz.1.81" path="socket:[10518]" dev="sockfs" ino=10518 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.841238][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.864743][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.885056][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.916133][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.964809][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.994879][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.016514][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.044742][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.064733][ T5721] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.091416][ T29] audit: type=1400 audit(1785055869.990:330): avc: denied { ioctl } for pid=6080 comm="syz.0.80" path="socket:[10523]" dev="sockfs" ino=10523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.118353][ T5721] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 99.129410][ T5721] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.162518][ T5721] usb 3-1: USB disconnect, device number 3 [ 99.659288][ T6089] Zero length message leads to an empty skb [ 99.764758][ T29] audit: type=1400 audit(1785055870.580:331): avc: denied { mmap_zero } for pid=6087 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 99.765579][ T5721] tipc: Node number set to 2886997007 [ 99.994264][ T6091] netlink: 224 bytes leftover after parsing attributes in process `syz.1.82'. [ 100.043329][ T29] audit: type=1400 audit(1785055870.940:332): avc: denied { getopt } for pid=6087 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.104502][ T6095] netlink: 224 bytes leftover after parsing attributes in process `syz.0.83'. [ 100.267107][ T29] audit: type=1400 audit(1785055871.170:333): avc: denied { name_connect } for pid=6097 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 100.358132][ T29] audit: type=1400 audit(1785055871.230:334): avc: denied { shutdown } for pid=6097 comm="syz.1.85" lport=50987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.553987][ T6110] tipc: Started in network mode [ 100.559351][ T6110] tipc: Node identity ac14140f, cluster identity 4711 [ 100.574285][ T6110] tipc: New replicast peer: 172.30.0.5 [ 100.582992][ T6110] tipc: Enabled bearer , priority 10 [ 101.468875][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 101.577674][ T6128] syzkaller0: entered promiscuous mode [ 101.638920][ T6128] syzkaller0: entered allmulticast mode [ 101.700252][ T5721] tipc: Node number set to 2886997007 [ 102.178175][ T6143] netlink: 'syz.4.99': attribute type 8 has an invalid length. [ 102.525170][ T6152] xfrm0: entered promiscuous mode [ 102.530552][ T6152] xfrm0: entered allmulticast mode [ 102.779310][ T6153] mmap: syz.4.100 (6153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.970391][ T6160] loop9: detected capacity change from 0 to 4095 [ 103.035240][ T5721] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.120137][ T6160] Buffer I/O error on dev loop9, logical block 511, async page read [ 103.133207][ T5625] Buffer I/O error on dev loop9, logical block 511, async page read [ 103.174724][ T189] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.197822][ T5721] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 471 [ 103.220620][ T5721] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.234721][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.255027][ T5713] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.264087][ T5721] usb 1-1: Product: ᐉ [ 103.269464][ T5721] usb 1-1: Manufacturer: せ␀熱伡췤揾ꔔﰩ锻ꜰ蟴꘺뎶䯣㛩袮뢙峥经ᇙ儸鼁ℜ⾳愤鎎ꅄ틓梉 [ 103.334889][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 103.345713][ T189] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.357173][ T189] usb 2-1: config 0 has no interface number 0 [ 103.367026][ T189] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.383054][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 103.383069][ T29] audit: type=1400 audit(1785055874.280:349): avc: denied { bind } for pid=6158 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.409923][ T189] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.423863][ T189] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 103.433137][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 103.433362][ T29] audit: type=1400 audit(1785055874.280:350): avc: denied { setopt } for pid=6158 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.442012][ T5713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.475003][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.493895][ T189] usb 2-1: config 0 descriptor?? [ 103.514075][ T29] audit: type=1400 audit(1785055874.410:351): avc: denied { write } for pid=6148 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.568054][ T5721] cdc_ncm 1-1:1.0: bind() failure [ 103.573207][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.595190][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.605285][ T5721] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 103.612192][ T5721] cdc_ncm 1-1:1.1: bind() failure [ 103.617495][ T5713] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.630488][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.644891][ T5721] usb 1-1: USB disconnect, device number 2 [ 103.658735][ T5713] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 103.669555][ T5713] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.683777][ T5713] usb 4-1: Manufacturer: syz [ 103.698192][ T5713] usb 4-1: config 0 descriptor?? [ 103.810351][ T29] audit: type=1400 audit(1785055874.710:352): avc: denied { create } for pid=6167 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.847087][ T29] audit: type=1400 audit(1785055874.710:353): avc: denied { ioctl } for pid=6167 comm="syz.4.106" path="socket:[9976]" dev="sockfs" ino=9976 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.007961][ T5713] rc_core: IR keymap rc-hauppauge not found [ 104.027818][ T5713] Registered IR keymap rc-empty [ 104.040981][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.061760][ T29] audit: type=1400 audit(1785055874.960:354): avc: denied { map } for pid=6171 comm="syz.2.107" path="socket:[10866]" dev="sockfs" ino=10866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 104.086161][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.107431][ T189] uclogic 0003:28BD:0094.0002: pen parameters not found [ 104.116775][ T5713] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 104.145149][ T189] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 104.171439][ T5713] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 104.219280][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.255186][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.274814][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.284841][ T5721] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.294811][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.311359][ T189] usb 2-1: USB disconnect, device number 6 [ 104.319678][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.355365][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.374830][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.488811][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.505168][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 104.511807][ T5721] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 104.520142][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.528557][ T5721] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.541496][ T5721] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.733473][ T5713] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.748195][ T5721] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.765625][ T5721] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.781182][ T5713] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 104.800312][ T5713] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.815466][ T5721] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.855178][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.870072][ T5713] usb 4-1: USB disconnect, device number 5 [ 105.143865][ T5721] usb 5-1: usb_control_msg returned -32 [ 105.182264][ T5721] usbtmc 5-1:16.0: can't read capabilities [ 105.497074][ T29] audit: type=1400 audit(1785055876.400:355): avc: denied { write } for pid=6170 comm="syz.4.108" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.611789][ T29] audit: type=1400 audit(1785055876.510:356): avc: denied { create } for pid=6170 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.687754][ T29] audit: type=1400 audit(1785055876.570:357): avc: denied { write } for pid=6170 comm="syz.4.108" path="socket:[10102]" dev="sockfs" ino=10102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 107.032310][ T29] audit: type=1400 audit(1785055877.930:358): avc: denied { compute_member } for pid=6221 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 107.964875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 108.498506][ T6233] macsec1: entered promiscuous mode [ 108.513803][ T6233] macsec1: entered allmulticast mode [ 108.774692][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.814717][ T992] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.955180][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 108.963548][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.981346][ T24] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.004198][ T24] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.014326][ T992] usb 3-1: Using ep0 maxpacket: 32 [ 109.032980][ T992] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.044345][ T24] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.059929][ T992] usb 3-1: config 0 has no interface number 0 [ 109.068812][ T992] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.080297][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.092316][ T24] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 109.101939][ T992] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.112343][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.122566][ T992] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 109.142444][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.166795][ T24] usb 2-1: config 0 descriptor?? [ 109.176781][ T992] usb 3-1: config 0 descriptor?? [ 109.415731][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 109.415746][ T29] audit: type=1400 audit(1785055880.320:360): avc: denied { mounton } for pid=6243 comm="syz.0.124" path="/23/file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.452737][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 109.470167][ T29] audit: type=1400 audit(1785055880.350:361): avc: denied { read } for pid=6243 comm="syz.0.124" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 109.508864][ T29] audit: type=1400 audit(1785055880.350:362): avc: denied { open } for pid=6243 comm="syz.0.124" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 109.551119][ T29] audit: type=1400 audit(1785055880.350:363): avc: denied { write } for pid=6243 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.592677][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 109.629849][ T29] audit: type=1400 audit(1785055880.370:364): avc: denied { ioctl } for pid=6243 comm="syz.0.124" path="socket:[10175]" dev="sockfs" ino=10175 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.630428][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 110.040176][ T992] uclogic 0003:28BD:0094.0003: pen parameters not found [ 110.083002][ T24] usb 2-1: USB disconnect, device number 7 [ 110.089841][ T992] uclogic 0003:28BD:0094.0003: interface is invalid, ignoring [ 110.246340][ T5713] usb 3-1: USB disconnect, device number 4 [ 110.407989][ T29] audit: type=1400 audit(1785055881.310:365): avc: denied { lock } for pid=6254 comm="syz.3.129" path="socket:[11068]" dev="sockfs" ino=11068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.524842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 110.534961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.465982][ T6205] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 111.803703][ T10] usb 5-1: USB disconnect, device number 2 [ 112.209333][ T29] audit: type=1400 audit(1785055883.110:366): avc: denied { ioctl } for pid=6269 comm="syz.0.133" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.352468][ T29] audit: type=1400 audit(1785055884.250:367): avc: denied { accept } for pid=6288 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.899782][ T29] audit: type=1400 audit(1785055884.800:368): avc: denied { read write } for pid=6297 comm="syz.4.139" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.047990][ T29] audit: type=1400 audit(1785055884.800:369): avc: denied { open } for pid=6297 comm="syz.4.139" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.717583][ T29] audit: type=1400 audit(1785055885.624:370): avc: denied { create } for pid=6307 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.286461][ T5802] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.488203][ T5802] usb 5-1: Using ep0 maxpacket: 8 [ 115.503115][ T5802] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.608220][ T5802] usb 5-1: config 127 has an invalid interface number: 1 but max is 0 [ 115.630882][ T5802] usb 5-1: config 127 has no interface number 0 [ 115.642488][ T5802] usb 5-1: config 127 interface 1 has no altsetting 0 [ 116.107677][ T29] audit: type=1400 audit(1785055886.649:371): avc: denied { create } for pid=6320 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.138607][ T5802] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.8b [ 116.155392][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 116.175898][ T29] audit: type=1400 audit(1785055886.669:372): avc: denied { getopt } for pid=6320 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.197963][ T5802] usb 5-1: Product: syz [ 116.210007][ T5802] usb 5-1: Manufacturer: syz [ 116.237981][ T5802] usb 5-1: SerialNumber: syz [ 116.513259][ T5802] redrat3 5-1:127.1: Couldn't find all endpoints [ 116.545788][ T5802] usb 5-1: USB disconnect, device number 3 [ 116.918895][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.974761][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 117.113451][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 117.184875][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.325373][ T10] usb 4-1: config 0 has no interface number 0 [ 117.335279][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.634287][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.656237][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 117.709063][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.761030][ T10] usb 4-1: config 0 descriptor?? [ 118.669025][ T10] uclogic 0003:28BD:0094.0004: pen parameters not found [ 118.676255][ T10] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 118.722284][ T29] audit: type=1400 audit(1785055889.596:373): avc: denied { read write } for pid=6352 comm="syz.4.156" name="sg0" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.794509][ T29] audit: type=1400 audit(1785055889.606:374): avc: denied { open } for pid=6352 comm="syz.4.156" path="/dev/sg0" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.856595][ T29] audit: type=1400 audit(1785055889.606:375): avc: denied { ioctl } for pid=6352 comm="syz.4.156" path="/dev/sg0" dev="devtmpfs" ino=772 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.883991][ T5713] usb 4-1: USB disconnect, device number 6 [ 118.937730][ T29] audit: type=1400 audit(1785055889.646:376): avc: denied { create } for pid=6350 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.004368][ T29] audit: type=1400 audit(1785055889.656:377): avc: denied { ioctl } for pid=6350 comm="syz.1.155" path="socket:[11248]" dev="sockfs" ino=11248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.081040][ T29] audit: type=1400 audit(1785055889.725:378): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.155291][ T29] audit: type=1400 audit(1785055890.023:379): avc: denied { name_bind } for pid=6358 comm="syz.0.158" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 119.388805][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.566185][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.635140][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 119.820564][ T6371] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 120.064375][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 120.064421][ T29] audit: type=1400 audit(1785055890.907:381): avc: denied { listen } for pid=6364 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.113580][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.116429][ T29] audit: type=1400 audit(1785055890.916:382): avc: denied { connect } for pid=6364 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.142026][ T6376] SELinux: Context system_u:object_r:tmpfs_t:s0 is not valid (left unmapped). [ 120.152069][ T29] audit: type=1400 audit(1785055891.006:383): avc: denied { relabelfrom } for pid=6364 comm="syz.0.161" name="NETLINK" dev="sockfs" ino=12313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.158379][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.193960][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.209831][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.217550][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.248838][ T29] audit: type=1400 audit(1785055891.055:384): avc: denied { ioctl } for pid=6374 comm="syz-executor" path="socket:[11507]" dev="sockfs" ino=11507 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.288219][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.301920][ T29] audit: type=1400 audit(1785055891.165:385): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 120.397654][ T29] audit: type=1400 audit(1785055891.165:386): avc: denied { relabelto } for pid=6364 comm="syz.0.161" name="NETLINK" dev="sockfs" ino=12313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:tmpfs_t:s0" [ 120.551000][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.582143][ T29] audit: type=1400 audit(1785055892.425:387): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.672327][ T29] audit: type=1400 audit(1785055892.435:388): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.757309][ T13] bridge_slave_1: left allmulticast mode [ 121.789206][ T29] audit: type=1400 audit(1785055892.435:389): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.811657][ T13] bridge_slave_1: left promiscuous mode [ 121.821360][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.856652][ T13] bridge_slave_0: left allmulticast mode [ 121.863949][ T29] audit: type=1400 audit(1785055892.435:390): avc: denied { read } for pid=5273 comm="dhcpcd" name="n30" dev="tmpfs" ino=2653 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.886948][ T13] bridge_slave_0: left promiscuous mode [ 121.898316][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.342549][ T5618] Bluetooth: hci1: command tx timeout [ 123.090250][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.121180][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.149016][ T13] bond0 (unregistering): Released all slaves [ 123.324292][ T6447] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 123.396027][ T13] tipc: Disabling bearer [ 123.573013][ T13] tipc: Left network mode [ 123.585034][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 123.665181][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 124.094589][ T6447] 9pnet_fd: Insufficient options for proto=fd [ 124.141382][ T5721] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.384835][ T5721] usb 4-1: Using ep0 maxpacket: 32 [ 124.415142][ T5618] Bluetooth: hci1: command tx timeout [ 124.424410][ T5721] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 124.500807][ T5721] usb 4-1: config 2 has no interface number 0 [ 124.590298][ T6467] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 124.850482][ T5721] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 124.927268][ T5721] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.041136][ T6470] ======================================================= [ 125.041136][ T6470] WARNING: The mand mount option has been deprecated and [ 125.041136][ T6470] and is ignored by this kernel. Remove the mand [ 125.041136][ T6470] option from the mount to silence this warning. [ 125.041136][ T6470] ======================================================= [ 125.078512][ T6470] Device name cannot be null; rc = [-22] [ 125.114492][ T5721] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 125.145384][ T6470] overlayfs: overlapping lowerdir path [ 125.192869][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.204469][ T6471] overlayfs: overlapping lowerdir path [ 125.260802][ T5721] usb 4-1: Product: syz [ 125.282012][ T5721] usb 4-1: Manufacturer: syz [ 125.314729][ T5721] usb 4-1: SerialNumber: syz [ 125.973745][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 126.516676][ T5618] Bluetooth: hci1: command tx timeout [ 126.655078][ T5721] kobil_sct 4-1:2.45: KOBIL USB smart card terminal converter detected [ 126.936744][ T6476] xt_CONNSECMARK: invalid mode: 66 [ 127.616809][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.940145][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.132216][ T5721] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 128.376935][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 128.376952][ T29] audit: type=1400 audit(1785055899.180:416): avc: denied { sqpoll } for pid=6474 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.380601][ T5721] usb 4-1: USB disconnect, device number 7 [ 128.409901][ T6479] Unsupported ieee802154 address type: 0 [ 128.440467][ T29] audit: type=1400 audit(1785055899.219:417): avc: denied { bind } for pid=6474 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.682131][ T5618] Bluetooth: hci1: command tx timeout [ 128.733680][ T5721] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 128.822830][ T5721] kobil_sct 4-1:2.45: device disconnected [ 129.145840][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 129.214593][ T9] usb 1-1: can't read configurations, error -71 [ 129.680725][ T29] audit: type=1400 audit(1785055900.461:418): avc: denied { write } for pid=6460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.758522][ T13] hsr_slave_0: left promiscuous mode [ 129.869540][ T13] hsr_slave_1: left promiscuous mode [ 129.918976][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.008359][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.151262][ T6502] misc userio: Invalid payload size [ 130.297834][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.311294][ T29] audit: type=1400 audit(1785055901.097:419): avc: denied { write } for pid=6503 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.336123][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.471722][ T13] veth1_macvtap: left promiscuous mode [ 130.498998][ T13] veth0_macvtap: left promiscuous mode [ 130.527487][ T13] veth0_vlan: left promiscuous mode [ 130.649699][ T6505] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 130.712244][ T29] audit: type=1400 audit(1785055901.505:420): avc: denied { relabelto } for pid=6504 comm="syz.0.186" name="35" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 130.754442][ T29] audit: type=1400 audit(1785055901.505:421): avc: denied { associate } for pid=6504 comm="syz.0.186" name="35" dev="tmpfs" ino=198 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 130.969976][ T6511] SQUASHFS error: Failed to read block 0x0: -5 [ 130.977073][ T6511] unable to read squashfs_super_block [ 131.104532][ T29] audit: type=1400 audit(1785055901.753:422): avc: denied { mounton } for pid=6507 comm="syz.1.187" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 132.047587][ T29] audit: type=1400 audit(1785055902.827:423): avc: denied { write } for pid=5608 comm="syz-executor" name="35" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 132.222699][ T29] audit: type=1400 audit(1785055902.827:424): avc: denied { remove_name } for pid=5608 comm="syz-executor" name="binderfs" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 132.285264][ T13] team0 (unregistering): Port device team_slave_1 removed [ 132.321751][ T29] audit: type=1400 audit(1785055902.827:425): avc: denied { write } for pid=5608 comm="syz-executor" name="35" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 132.452627][ T13] team0 (unregistering): Port device team_slave_0 removed [ 132.544699][ T6519] syz.0.189 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 133.228515][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 133.258075][ T6519] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.755879][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.779644][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.823087][ T6374] bridge_slave_0: entered allmulticast mode [ 133.838884][ T6374] bridge_slave_0: entered promiscuous mode [ 133.878449][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.889975][ T6495] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.911198][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.922761][ T6495] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 133.949259][ T6374] bridge_slave_1: entered allmulticast mode [ 133.974946][ T6374] bridge_slave_1: entered promiscuous mode [ 134.087039][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 134.087056][ T29] audit: type=1400 audit(1785055904.855:429): avc: denied { setopt } for pid=6529 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.153885][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.174835][ T6495] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.208594][ T6495] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 134.248603][ T29] audit: type=1400 audit(1785055905.014:430): avc: denied { setopt } for pid=6532 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.290234][ T6536] warning: `syz.0.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.330980][ T6495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.338574][ T6495] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 134.389396][ T6495] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.419263][ T6495] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 134.459746][ T6537] bond1: (slave ip6erspan0): making interface the new active one [ 134.491145][ T6537] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 134.548635][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 134.671724][ T29] audit: type=1400 audit(1785055905.441:431): avc: denied { write } for pid=6534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.998081][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.020371][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.108000][ T29] audit: type=1400 audit(1785055905.859:432): avc: denied { write } for pid=6560 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.205309][ T6374] team0: Port device team_slave_0 added [ 135.355803][ T6374] team0: Port device team_slave_1 added [ 135.383975][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 135.448092][ T6568] netlink: 64 bytes leftover after parsing attributes in process `syz.3.198'. [ 135.892028][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.909294][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.973345][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.124747][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.149536][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.215215][ T6575] input: syz1 as /devices/virtual/input/input9 [ 136.221698][ T6575] input: failed to attach handler leds to device input9, error: -6 [ 136.237448][ T29] audit: type=1400 audit(1785055906.972:433): avc: denied { read } for pid=6574 comm="syz.3.201" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.312071][ T29] audit: type=1400 audit(1785055906.972:434): avc: denied { open } for pid=6574 comm="syz.3.201" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.343363][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.436554][ T29] audit: type=1400 audit(1785055906.972:435): avc: denied { write } for pid=6574 comm="syz.3.201" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.591303][ T29] audit: type=1400 audit(1785055906.972:436): avc: denied { ioctl } for pid=6574 comm="syz.3.201" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.634621][ T29] audit: type=1400 audit(1785055907.171:437): avc: denied { ioctl } for pid=6574 comm="syz.3.201" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.898849][ T6495] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.920906][ T6495] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 137.008454][ T6374] hsr_slave_0: entered promiscuous mode [ 137.028363][ T6374] hsr_slave_1: entered promiscuous mode [ 137.050098][ T6374] debugfs: 'hsr0' already exists in 'hsr' [ 137.073196][ T29] audit: type=1400 audit(1785055907.818:438): avc: denied { write } for pid=6572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.096482][ T6374] Cannot create hsr debugfs directory [ 137.639731][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 138.112518][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 138.305626][ T6615] tipc: Enabling not permitted [ 138.324110][ T6615] tipc: Enabling of bearer rejected, failed to enable media [ 138.398456][ T189] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.469593][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 138.710231][ T189] usb 2-1: Using ep0 maxpacket: 8 [ 138.804593][ T5721] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.815172][ T6374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.841594][ T189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.857262][ T6374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.868338][ T189] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 138.896462][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.928524][ T189] usb 2-1: config 0 descriptor?? [ 138.940988][ T6374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.951130][ T189] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 138.964093][ T189] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 138.985744][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 138.997826][ T189] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 139.000744][ T6374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.012433][ T5721] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.030182][ T189] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 139.045581][ T5721] usb 3-1: config 0 has no interface number 0 [ 139.051436][ T6374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.070034][ T5721] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.154064][ T5721] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.178877][ T6635] SQUASHFS error: Failed to read block 0x0: -5 [ 139.186168][ T6635] unable to read squashfs_super_block [ 139.414837][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.430220][ T189] usb 2-1: USB disconnect, device number 8 [ 139.465860][ T6374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.473531][ T5721] usb 3-1: config 0 descriptor?? [ 139.483921][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 139.483938][ T29] audit: type=1400 audit(1785055910.224:442): avc: denied { bind } for pid=6636 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.546910][ T5721] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 139.577717][ T29] audit: type=1400 audit(1785055910.274:443): avc: denied { listen } for pid=6636 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.606488][ T6374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.610857][ T29] audit: type=1400 audit(1785055910.274:444): avc: denied { accept } for pid=6636 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.668261][ T6374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.733023][ T29] audit: type=1400 audit(1785055910.473:445): avc: denied { write } for pid=6643 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.955481][ T6654] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 139.956757][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.986721][ T6656] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 139.997381][ T6660] syz.3.214 uses obsolete (PF_INET,SOCK_PACKET) [ 140.004198][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.073141][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.168993][ T5802] usb 3-1: USB disconnect, device number 5 [ 140.182067][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.256224][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.263351][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.636621][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.643801][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.801116][ T6374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.064585][ T29] audit: type=1400 audit(1785055911.796:446): avc: denied { write } for pid=6657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.298639][ T29] audit: type=1400 audit(1785055912.025:447): avc: denied { write } for pid=6684 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.556392][ T5802] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.728228][ T5802] usb 1-1: Using ep0 maxpacket: 32 [ 141.741625][ T5802] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.766860][ T5802] usb 1-1: config 0 has no interface number 0 [ 141.795070][ T5802] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.905387][ T5802] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.946168][ T5802] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 141.980434][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.993163][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 142.272233][ T5802] usb 1-1: config 0 descriptor?? [ 142.345543][ T29] audit: type=1400 audit(1785055913.069:448): avc: denied { write } for pid=6688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.614374][ T29] audit: type=1400 audit(1785055913.338:449): avc: denied { write } for pid=6715 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.747228][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 142.915510][ T5802] uclogic 0003:28BD:0094.0005: pen parameters not found [ 143.101396][ T5802] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 143.171829][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.178941][ T5802] usb 1-1: USB disconnect, device number 5 [ 143.873566][ T6740] netlink: 56 bytes leftover after parsing attributes in process `syz.1.225'. [ 143.897663][ T6374] veth0_vlan: entered promiscuous mode [ 143.940185][ T6374] veth1_vlan: entered promiscuous mode [ 143.993894][ T6740] netlink: 48 bytes leftover after parsing attributes in process `syz.1.225'. [ 144.046372][ T6374] veth0_macvtap: entered promiscuous mode [ 144.097360][ T6374] veth1_macvtap: entered promiscuous mode [ 144.505228][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.585287][ T6749] loop9: detected capacity change from 0 to 2640 [ 144.606164][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.639263][ T1123] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.649814][ T6749] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.669103][ T1123] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.701368][ T6750] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 144.712276][ T6749] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 144.728679][ T144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.750008][ T6749] loop9: partition table partially beyond EOD, truncated [ 144.769549][ T1123] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.869065][ T6749] loop9: p1 size 1237888941 extends beyond EOD, truncated [ 144.873751][ T6753] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 144.918955][ T29] audit: type=1400 audit(1785055915.626:450): avc: denied { write } for pid=6730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.963392][ T6753] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 145.062423][ T6753] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 145.130740][ T29] audit: type=1400 audit(1785055915.845:451): avc: denied { create } for pid=6758 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 145.159509][ T6753] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 145.202358][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.205882][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 145.232936][ T6753] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 145.249786][ T29] audit: type=1400 audit(1785055915.965:452): avc: denied { write } for pid=6765 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.291326][ T6753] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 145.318107][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.360697][ T6753] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 145.412956][ T6753] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 145.493666][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.531938][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.608421][ T29] audit: type=1400 audit(1785055916.323:453): avc: denied { mounton } for pid=6374 comm="syz-executor" path="/root/syzkaller.a6hs4E/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 145.647627][ T6770] Bluetooth: hci0: unsupported parameter 255 [ 145.658209][ T6770] Bluetooth: hci0: unsupported parameter 255 [ 145.803413][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 146.337363][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 146.798589][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'. [ 147.237823][ T6792] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 147.247676][ T6792] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 147.258085][ T6792] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 147.269082][ T6792] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 147.279473][ T6792] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 147.289126][ T6792] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 147.300199][ T6792] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 147.309917][ T6792] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 147.319510][ T6792] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 147.566981][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 147.718831][ T6808] netlink: 104 bytes leftover after parsing attributes in process `syz.3.235'. [ 147.899997][ T29] audit: type=1400 audit(1785055918.492:454): avc: denied { write } for pid=6767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.945581][ T6808] process 'syz.3.235' launched './file0' with NULL argv: empty string added [ 148.495761][ T6813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.237'. [ 148.920201][ T29] audit: type=1400 audit(1785055918.642:455): avc: denied { execute } for pid=6802 comm="syz.3.235" name="file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.942654][ T29] audit: type=1400 audit(1785055918.652:456): avc: denied { execute_no_trans } for pid=6802 comm="syz.3.235" path="/53/file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.001696][ T29] audit: type=1400 audit(1785055918.662:457): avc: denied { listen } for pid=6802 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.093257][ T29] audit: type=1400 audit(1785055918.662:458): avc: denied { mount } for pid=6802 comm="syz.3.235" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.177600][ T29] audit: type=1400 audit(1785055919.846:459): avc: denied { write } for pid=6815 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.555034][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 150.104999][ T6835] SQUASHFS error: Failed to read block 0x0: -5 [ 150.111965][ T6835] unable to read squashfs_super_block [ 150.371740][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 150.886938][ T29] audit: type=1400 audit(1785055921.568:460): avc: denied { write } for pid=6817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.386384][ T6851] overlay: Bad value for 'metacopy' [ 151.457090][ T6853] comedi comedi2: board detection failed [ 151.477364][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 151.786965][ T6853] gre0: entered promiscuous mode [ 151.791920][ T6853] gre0: entered allmulticast mode [ 151.825281][ T29] audit: type=1400 audit(1785055922.066:461): avc: denied { mount } for pid=6845 comm="syz.3.248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 151.938011][ T6856] ipvlan2: entered promiscuous mode [ 151.943593][ T29] audit: type=1400 audit(1785055922.076:462): avc: denied { mounton } for pid=6845 comm="syz.3.248" path="/56/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 151.984283][ T6856] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.074769][ T6856] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 152.085942][ T29] audit: type=1400 audit(1785055922.126:463): avc: denied { read } for pid=6845 comm="syz.3.248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.151063][ T29] audit: type=1400 audit(1785055922.126:464): avc: denied { open } for pid=6845 comm="syz.3.248" path="/56/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.155659][ T6856] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 152.328737][ T29] audit: type=1400 audit(1785055922.584:465): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 152.357547][ T29] audit: type=1400 audit(1785055922.813:466): avc: denied { write } for pid=6857 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.548600][ T6867] FAULT_INJECTION: forcing a failure. [ 152.548600][ T6867] name failslab, interval 1, probability 0, space 0, times 1 [ 152.561282][ T6867] CPU: 1 UID: 0 PID: 6867 Comm: syz.0.250 Not tainted syzkaller #0 PREEMPT(full) [ 152.561305][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.561315][ T6867] Call Trace: [ 152.561322][ T6867] [ 152.561329][ T6867] dump_stack_lvl+0x100/0x190 [ 152.561357][ T6867] should_fail_ex.cold+0x5/0xa [ 152.561380][ T6867] should_failslab+0xc2/0x120 [ 152.561411][ T6867] kmem_cache_alloc_noprof+0x91/0x6a0 [ 152.561432][ T6867] ? trace_kmem_cache_alloc+0xdd/0x100 [ 152.561454][ T6867] ? security_file_alloc+0x34/0x2c0 [ 152.561487][ T6867] security_file_alloc+0x34/0x2c0 [ 152.561514][ T6867] init_file+0x95/0x480 [ 152.561536][ T6867] alloc_empty_file+0x79/0x1c0 [ 152.561559][ T6867] path_openat+0xe7/0x4280 [ 152.561576][ T6867] ? __kasan_slab_alloc+0x89/0x90 [ 152.561597][ T6867] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 152.561615][ T6867] ? do_getname+0x35/0x390 [ 152.561636][ T6867] ? do_sys_openat2+0xc7/0x1e0 [ 152.561665][ T6867] ? __pfx_path_openat+0x10/0x10 [ 152.561690][ T6867] do_file_open+0x20e/0x430 [ 152.561710][ T6867] ? __pfx_do_file_open+0x10/0x10 [ 152.561746][ T6867] ? alloc_fd+0x471/0x7a0 [ 152.561767][ T6867] ? do_getname+0x191/0x390 [ 152.561791][ T6867] do_sys_openat2+0x10f/0x1e0 [ 152.561813][ T6867] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.561833][ T6867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.561858][ T6867] ? __pfx___schedule+0x10/0x10 [ 152.561877][ T6867] __x64_sys_creat+0xcc/0x120 [ 152.561899][ T6867] ? __pfx___x64_sys_creat+0x10/0x10 [ 152.561920][ T6867] ? rcu_is_watching+0x12/0xc0 [ 152.561950][ T6867] ? do_syscall_64+0x90/0x870 [ 152.561970][ T6867] do_syscall_64+0x115/0x870 [ 152.561988][ T6867] ? clear_bhb_loop+0x40/0x90 [ 152.562009][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.562027][ T6867] RIP: 0033:0x7f0beeb9de99 [ 152.562042][ T6867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.562058][ T6867] RSP: 002b:00007f0befa93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 152.562076][ T6867] RAX: ffffffffffffffda RBX: 00007f0beee26180 RCX: 00007f0beeb9de99 [ 152.562088][ T6867] RDX: 0000000000000000 RSI: ecf86c37d53049cc RDI: 0000200000000280 [ 152.562098][ T6867] RBP: 00007f0befa93090 R08: 0000000000000000 R09: 0000000000000000 [ 152.562109][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.562120][ T6867] R13: 00007f0beee26218 R14: 00007f0beee26180 R15: 00007ffe09d25048 [ 152.562144][ T6867] [ 153.570447][ T189] IPVS: starting estimator thread 0... [ 153.630321][ T6856] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 153.683009][ T6880] IPVS: using max 44 ests per chain, 105600 per kthread [ 153.935555][ T6856] bond1 (unregistering): Released all slaves [ 154.539156][ T29] audit: type=1400 audit(1785055925.212:467): avc: denied { map } for pid=6888 comm="syz.3.249" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.693212][ T29] audit: type=1400 audit(1785055926.278:468): avc: denied { ioctl } for pid=6888 comm="syz.3.249" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.830074][ T29] audit: type=1400 audit(1785055926.487:469): avc: denied { write } for pid=6898 comm="syz.5.257" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.952878][ T29] audit: type=1400 audit(1785055926.517:470): avc: denied { mount } for pid=6898 comm="syz.5.257" name="/" dev="autofs" ino=14944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 156.494242][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 157.187727][ T29] audit: type=1400 audit(1785055927.841:471): avc: denied { unmount } for pid=6374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 157.597793][ T6930] xt_hashlimit: size too large, truncated to 1048576 [ 157.973076][ T29] audit: type=1400 audit(1785055928.240:472): avc: denied { read } for pid=6922 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.099572][ T29] audit: type=1400 audit(1785055928.369:473): avc: denied { name_bind } for pid=6922 comm="syz.0.263" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 158.283132][ T6938] Bluetooth: hci0: unsupported parameter 255 [ 158.289783][ T29] audit: type=1400 audit(1785055928.658:474): avc: denied { create } for pid=6917 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.347371][ T6938] Bluetooth: hci0: unsupported parameter 255 [ 158.859550][ T6947] SQUASHFS error: Failed to read block 0x0: -5 [ 158.866332][ T6947] unable to read squashfs_super_block [ 159.763017][ T29] audit: type=1326 audit(1785055930.401:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.5.268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b30d9de99 code=0x7ffc0000 [ 159.791867][ T6956] netlink: 'syz.5.268': attribute type 15 has an invalid length. [ 159.833963][ T6956] netlink: 666 bytes leftover after parsing attributes in process `syz.5.268'. [ 159.880337][ T29] audit: type=1326 audit(1785055930.401:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.5.268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b30d9de99 code=0x7ffc0000 [ 160.023833][ T29] audit: type=1326 audit(1785055930.441:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.5.268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3b30d9de99 code=0x7ffc0000 [ 160.110266][ T29] audit: type=1326 audit(1785055930.441:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.5.268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b30d9de99 code=0x7ffc0000 [ 160.232942][ T29] audit: type=1326 audit(1785055930.441:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6955 comm="syz.5.268" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b30d9de99 code=0x7ffc0000 [ 160.746424][ T6970] tipc: Enabling of bearer rejected, failed to enable media [ 160.776731][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 160.978430][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 160.978441][ T29] audit: type=1400 audit(160.691:502): avc: denied { write } for pid=6969 comm="syz.0.270" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.434595][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 162.727976][ T5706] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.912946][ T5706] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.941404][ T5706] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 162.992905][ T5706] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 163.018671][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.160080][ T6995] SQUASHFS error: Failed to read block 0x0: -5 [ 163.166682][ T6995] unable to read squashfs_super_block [ 163.342192][ T5706] usb 1-1: Product: syz [ 163.358198][ T5706] usb 1-1: Manufacturer: syz [ 163.381036][ T5706] usb 1-1: SerialNumber: syz [ 163.482730][ T29] audit: type=1400 audit(163.191:503): avc: denied { read append } for pid=6998 comm="syz.2.277" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 163.572611][ T29] audit: type=1400 audit(163.221:504): avc: denied { open } for pid=6998 comm="syz.2.277" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 163.711541][ T5706] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 164.088607][ T5706] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 164.126408][ T5706] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 164.520910][ T5706] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 165.161574][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.315202][ T5706] usb 1-1: USB disconnect, device number 6 [ 165.351240][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 165.362771][ T29] audit: type=1400 audit(165.071:505): avc: denied { write } for pid=7009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.385223][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 165.385251][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.468733][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 165.926242][ T7005] udevd[7005]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.296348][ T29] audit: type=1400 audit(165.981:506): avc: denied { write } for pid=7032 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.606881][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 167.666847][ T9] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 167.720791][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 167.776309][ T9] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 167.830361][ T9] usb 4-1: USB disconnect, device number 8 [ 167.860212][ T7062] netlink: 172 bytes leftover after parsing attributes in process `syz.5.288'. [ 168.176308][ T7073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.292'. [ 168.830390][ T29] audit: type=1400 audit(167.921:507): avc: denied { create } for pid=7072 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 169.153756][ T29] audit: type=1400 audit(167.921:508): avc: denied { ioctl } for pid=7072 comm="syz.3.292" path="socket:[15262]" dev="sockfs" ino=15262 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 169.318557][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 169.645191][ T29] audit: type=1400 audit(168.961:509): avc: denied { write } for pid=7049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.033846][ T29] audit: type=1400 audit(169.381:510): avc: denied { write } for pid=7089 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.394070][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 173.516095][ T29] audit: type=1400 audit(173.221:511): avc: denied { write } for pid=7100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.714185][ T29] audit: type=1400 audit(173.421:512): avc: denied { write } for pid=7131 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.086550][ T7139] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 174.098518][ T29] audit: type=1400 audit(173.781:513): avc: denied { write } for pid=7133 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 176.179333][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 176.444619][ T189] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 176.560901][ T7177] SQUASHFS error: Failed to read block 0x0: -5 [ 176.567455][ T7177] unable to read squashfs_super_block [ 176.807948][ T189] usb 6-1: Using ep0 maxpacket: 16 [ 176.822834][ T189] usb 6-1: unable to get BOS descriptor or descriptor too short [ 176.843972][ T189] usb 6-1: config 16 has an invalid interface number: 44 but max is 0 [ 176.896275][ T189] usb 6-1: config 16 has no interface number 0 [ 177.080074][ T7180] SQUASHFS error: Failed to read block 0x0: -5 [ 177.086925][ T7180] unable to read squashfs_super_block [ 177.185386][ T189] usb 6-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 177.243106][ T189] usb 6-1: config 16 interface 44 has no altsetting 0 [ 177.271280][ T29] audit: type=1400 audit(176.971:514): avc: denied { create } for pid=7181 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 177.306211][ T189] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 177.367989][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.377001][ T189] usb 6-1: Product: syz [ 177.397964][ T189] usb 6-1: Manufacturer: syz [ 177.402885][ T189] usb 6-1: SerialNumber: syz [ 177.501219][ T7162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 177.786843][ T189] cypress_cy7c63 6-1:16.44: Cypress CY7C63xxx device now attached [ 177.830821][ T189] usb 6-1: USB disconnect, device number 2 [ 177.864853][ T189] cypress_cy7c63 6-1:16.44: Cypress CY7C63xxx device now disconnected [ 179.387911][ T5713] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.519236][ T5713] usb 4-1: device descriptor read/64, error -71 [ 179.608404][ T29] audit: type=1400 audit(179.311:515): avc: denied { relabelfrom } for pid=7205 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 179.648576][ T29] audit: type=1400 audit(179.341:516): avc: denied { relabelto } for pid=7205 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 179.704382][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 179.737285][ T7206] file system registered [ 179.743174][ T29] audit: type=1400 audit(179.441:517): avc: denied { search } for pid=7205 comm="syz.1.323" name="/" dev="configfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.789908][ T29] audit: type=1400 audit(179.441:518): avc: denied { search } for pid=7205 comm="syz.1.323" name="usb_gadget" dev="configfs" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.829823][ T5713] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.899124][ T7186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.911446][ T29] audit: type=1400 audit(179.441:519): avc: denied { search } for pid=7205 comm="syz.1.323" name="/" dev="configfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.959238][ T29] audit: type=1400 audit(179.441:520): avc: denied { search } for pid=7205 comm="syz.1.323" name="usb_gadget" dev="configfs" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.020949][ T5713] usb 4-1: device descriptor read/64, error -71 [ 180.033712][ T7200] capability: warning: `syz.2.316' uses deprecated v2 capabilities in a way that may be insecure [ 180.047934][ T29] audit: type=1400 audit(179.441:521): avc: denied { search } for pid=7205 comm="syz.1.323" name="g1" dev="configfs" ino=7811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.081517][ T29] audit: type=1400 audit(179.441:522): avc: denied { search } for pid=7205 comm="syz.1.323" name="functions" dev="configfs" ino=7812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.105657][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 180.237661][ T5713] usb usb4-port1: attempt power cycle [ 180.477902][ T29] audit: type=1400 audit(179.441:523): avc: denied { write search } for pid=7205 comm="syz.1.323" name="functions" dev="configfs" ino=7812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.521600][ T29] audit: type=1400 audit(179.441:524): avc: denied { add_name } for pid=7205 comm="syz.1.323" name="ffs.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.787951][ T5713] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 180.808611][ T5713] usb 4-1: device descriptor read/8, error -71 [ 181.065251][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.328'. [ 181.374317][ T5713] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.426150][ T5713] usb 4-1: device descriptor read/8, error -71 [ 181.548161][ T5713] usb usb4-port1: unable to enumerate USB device [ 181.599282][ T7229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.329'. [ 181.669265][ T7231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.329'. [ 183.392200][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 183.472784][ T5706] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.641040][ T5706] usb 1-1: Dual-Role OTG device on HNP port [ 183.702135][ T5706] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 183.810715][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.902269][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.335'. [ 184.708949][ T5706] gspca_main: spca501-2.14.0 probing 0000:0000 [ 184.730414][ T5706] gspca_spca501: reg write: error -32 [ 184.745742][ T5706] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 184.765977][ T5706] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 185.077309][ T5706] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.515556][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 185.515591][ T29] audit: type=1400 audit(185.221:534): avc: denied { read } for pid=7266 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.155185][ T29] audit: type=1400 audit(185.321:535): avc: denied { create } for pid=7266 comm="syz.0.339" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.178854][ T29] audit: type=1400 audit(185.321:536): avc: denied { write } for pid=7266 comm="syz.0.339" name="file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.210735][ T7272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.219410][ T7272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.267715][ T29] audit: type=1400 audit(185.321:537): avc: denied { open } for pid=7266 comm="syz.0.339" path="/68/file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.355594][ T29] audit: type=1400 audit(185.321:538): avc: denied { ioctl } for pid=7266 comm="syz.0.339" path="/68/file0" dev="tmpfs" ino=383 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.507956][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 186.638023][ T189] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.951655][ T29] audit: type=1400 audit(186.651:539): avc: denied { unlink } for pid=5608 comm="syz-executor" name="file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.976944][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 187.006277][ T189] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.028185][ T189] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 187.058754][ T189] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 187.067122][ T189] usb 4-1: config 14 has no interface number 0 [ 187.088999][ T189] usb 4-1: config 14 has no interface number 1 [ 187.102525][ T189] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 187.130342][ T5713] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.235555][ T189] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 187.261238][ T7292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7292 comm=syz.1.347 [ 187.274081][ T189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 187.370786][ T7293] xt_hashlimit: size too large, truncated to 1048576 [ 187.803787][ T189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 187.815346][ T189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 187.826979][ T189] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.840366][ T189] usb 4-1: config 14 interface 57 has no altsetting 0 [ 187.857912][ T5713] usb 3-1: Using ep0 maxpacket: 8 [ 187.951214][ T189] usb 4-1: config 14 interface 228 has no altsetting 0 [ 187.965555][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.976228][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 187.991827][ T189] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 188.000936][ T5713] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 188.010029][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.023310][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.031344][ T189] usb 4-1: Product: syz [ 188.035708][ T189] usb 4-1: Manufacturer: syz [ 188.041121][ T189] usb 4-1: SerialNumber: syz [ 188.046241][ T5713] usb 3-1: config 0 descriptor?? [ 188.058994][ T5713] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 188.490619][ T29] audit: type=1400 audit(188.191:540): avc: denied { ioctl } for pid=7281 comm="syz.2.344" path="socket:[15697]" dev="sockfs" ino=15697 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.675685][ T29] audit: type=1400 audit(188.351:541): avc: denied { map } for pid=7299 comm="syz.5.349" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 188.911165][ T189] legousbtower 4-1:14.57: interrupt endpoints not found [ 189.015714][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 189.128926][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.137656][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.577788][ T189] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 189.884279][ T189] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 190.100202][ T7327] SQUASHFS error: Failed to read block 0x0: -5 [ 190.106728][ T7327] unable to read squashfs_super_block [ 190.288957][ T5714] usb 3-1: USB disconnect, device number 6 [ 190.417088][ T189] [ 190.419454][ T189] ============================================ [ 190.425593][ T189] WARNING: possible recursive locking detected [ 190.431731][ T189] syzkaller #0 Not tainted [ 190.436132][ T189] -------------------------------------------- [ 190.442267][ T189] kworker/0:2/189 is trying to acquire lock: [ 190.448233][ T189] ffff88803335b128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 190.457986][ T189] [ 190.457986][ T189] but task is already holding lock: [ 190.465342][ T189] ffff88802a3d4928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 190.475090][ T189] [ 190.475090][ T189] other info that might help us debug this: [ 190.483156][ T189] Possible unsafe locking scenario: [ 190.483156][ T189] [ 190.490613][ T189] CPU0 [ 190.493876][ T189] ---- [ 190.497130][ T189] lock(&grp->list_lock); [ 190.501525][ T189] lock(&grp->list_lock); [ 190.505927][ T189] [ 190.505927][ T189] *** DEADLOCK *** [ 190.505927][ T189] [ 190.514051][ T189] May be due to missing lock nesting notation [ 190.514051][ T189] [ 190.522359][ T189] 3 locks held by kworker/0:2/189: [ 190.527461][ T189] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 190.537899][ T189] #1: ffffc9000303fd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 190.549809][ T189] #2: ffff88802a3d4928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 190.559982][ T189] [ 190.559982][ T189] stack backtrace: [ 190.565858][ T189] CPU: 0 UID: 0 PID: 189 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 190.565877][ T189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.565888][ T189] Workqueue: events snd_rawmidi_input_event_work [ 190.565911][ T189] Call Trace: [ 190.565915][ T189] [ 190.565920][ T189] dump_stack_lvl+0x100/0x190 [ 190.565933][ T189] print_deadlock_bug.cold+0xbd/0xca [ 190.565950][ T189] __lock_acquire+0x1256/0x1a40 [ 190.565964][ T189] lock_acquire+0x1b9/0x370 [ 190.565981][ T189] ? snd_seq_deliver_event+0x230/0x860 [ 190.566006][ T189] ? do_raw_read_unlock+0x3f/0x70 [ 190.566028][ T189] _raw_read_lock+0x5f/0x70 [ 190.566051][ T189] ? snd_seq_deliver_event+0x230/0x860 [ 190.566069][ T189] snd_seq_deliver_event+0x230/0x860 [ 190.566084][ T189] ? do_raw_spin_lock+0x128/0x260 [ 190.566099][ T189] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 190.566113][ T189] ? mark_held_locks+0x40/0x70 [ 190.566127][ T189] ? lockdep_hardirqs_on+0x78/0x100 [ 190.566143][ T189] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.566168][ T189] ? client_use_ptr+0x107/0x4b0 [ 190.566188][ T189] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 190.566212][ T189] queue_broadcast_event.isra.0+0x143/0x1b0 [ 190.566232][ T189] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 190.566254][ T189] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.566270][ T189] ? snd_seq_timer_start+0x1f0/0x2a0 [ 190.566284][ T189] snd_seq_control_queue+0x709/0xb70 [ 190.566301][ T189] ? __pfx_event_input_timer+0x10/0x10 [ 190.566321][ T189] __snd_seq_deliver_single_event+0x127/0x1c0 [ 190.566345][ T189] snd_seq_deliver_single_event+0x31f/0x8c0 [ 190.566368][ T189] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 190.566386][ T189] ? __lock_acquire+0x49f/0x1a40 [ 190.566400][ T189] snd_seq_deliver_event+0x44b/0x860 [ 190.566414][ T189] ? do_raw_spin_lock+0x128/0x260 [ 190.566429][ T189] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 190.566446][ T189] ? mark_held_locks+0x40/0x70 [ 190.566464][ T189] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 190.566488][ T189] ? lockdep_hardirqs_on+0x78/0x100 [ 190.566503][ T189] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.566527][ T189] ? client_use_ptr+0x107/0x4b0 [ 190.566542][ T189] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 190.566558][ T189] send_timer_event.isra.0+0x130/0x190 [ 190.566573][ T189] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 190.566588][ T189] ? lockdep_hardirqs_on+0x78/0x100 [ 190.566602][ T189] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 190.566622][ T189] snd_seq_oss_timer_start+0x1db/0x320 [ 190.566645][ T189] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 190.566668][ T189] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 190.566687][ T189] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.566704][ T189] ? find_slot+0x166/0x1b0 [ 190.566713][ T189] snd_seq_oss_midi_input+0x467/0xa30 [ 190.566724][ T189] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 190.566736][ T189] ? find_held_lock+0x2b/0x80 [ 190.566754][ T189] ? snd_seq_port_use_ptr+0x128/0x190 [ 190.566775][ T189] snd_seq_oss_event_input+0x194/0x250 [ 190.566799][ T189] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 190.566823][ T189] __snd_seq_deliver_single_event+0x127/0x1c0 [ 190.566846][ T189] snd_seq_deliver_single_event+0x31f/0x8c0 [ 190.566862][ T189] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 190.566877][ T189] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 190.566893][ T189] ? lockdep_hardirqs_on+0x78/0x100 [ 190.566903][ T189] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.566925][ T189] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 190.566947][ T189] snd_seq_deliver_event+0x2c1/0x860 [ 190.566970][ T189] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 190.566992][ T189] ? mark_held_locks+0x40/0x70 [ 190.567006][ T189] ? lockdep_hardirqs_on+0x78/0x100 [ 190.567016][ T189] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.567033][ T189] ? client_use_ptr+0x107/0x4b0 [ 190.567046][ T189] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 190.567062][ T189] snd_midi_input_event+0x32f/0x470 [ 190.567083][ T189] ? __pfx_snd_midi_input_event+0x10/0x10 [ 190.567104][ T189] ? lock_acquire+0x5e/0x370 [ 190.567123][ T189] ? __pfx_snd_midi_input_event+0x10/0x10 [ 190.567142][ T189] snd_rawmidi_input_event_work+0x61/0x80 [ 190.567163][ T189] process_one_work+0xa23/0x1940 [ 190.567176][ T189] ? __pfx_process_one_work+0x10/0x10 [ 190.567188][ T189] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 190.567204][ T189] worker_thread+0x5ef/0xe50 [ 190.567216][ T189] ? __pfx_worker_thread+0x10/0x10 [ 190.567231][ T189] ? kthread+0x13a/0x450 [ 190.567246][ T189] ? __pfx_worker_thread+0x10/0x10 [ 190.567266][ T189] kthread+0x370/0x450 [ 190.567280][ T189] ? __pfx_kthread+0x10/0x10 [ 190.567294][ T189] ret_from_fork+0x72b/0xd50 [ 190.567315][ T189] ? __pfx_ret_from_fork+0x10/0x10 [ 190.567329][ T189] ? __switch_to+0x800/0x10f0 [ 190.567339][ T189] ? __pfx_kthread+0x10/0x10 [ 190.567348][ T189] ret_from_fork_asm+0x1a/0x30 [ 190.567365][ T189] [ 191.139492][ T24] usb 4-1: USB disconnect, device number 13 [ 191.150408][ T24] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 191.172459][ T29] audit: type=1400 audit(190.881:542): avc: denied { connect } for pid=7320 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1