last executing test programs: 4m59.295149213s ago: executing program 2 (id=1650): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0xffffffffffffffa6) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f00000038c0)="f9db6d4e6ca7d40c978d37d3ea23d92438e15c1b6ce255bbee36e2dd57ae11821c1af092de99be476596eb92bc722e1b34a6ef9d82e4d70fcf379419bfdb759f54", 0x41}], 0x2}}], 0x1, 0x8810) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4120, 0x1018}], 0x1}, 0x12060) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pS \x00'}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c00000007000041f500000000000008050000000200000000000001000000003200560010000000050000060400000007000000fbffffff0e000000050020001000000012c5000001000000810000000d000000000000ea05000000000000080100000000615f5f2e6100"], &(0x7f0000000340)=""/180, 0x7b, 0xb4, 0x0, 0x6}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000dc0100000080000000", @ANYRES32=r4, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000030000000500"/28], 0x50) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0xffffffffffffffa6) (async) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f00000038c0)="f9db6d4e6ca7d40c978d37d3ea23d92438e15c1b6ce255bbee36e2dd57ae11821c1af092de99be476596eb92bc722e1b34a6ef9d82e4d70fcf379419bfdb759f54", 0x41}], 0x2}}], 0x1, 0x8810) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4120, 0x1018}], 0x1}, 0x12060) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)='%pS \x00'}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c00000007000041f500000000000008050000000200000000000001000000003200560010000000050000060400000007000000fbffffff0e000000050020001000000012c5000001000000810000000d000000000000ea05000000000000080100000000615f5f2e6100"], &(0x7f0000000340)=""/180, 0x7b, 0xb4, 0x0, 0x6}, 0x28) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000dc0100000080000000", @ANYRES32=r4, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000030000000500"/28], 0x50) (async) 4m59.232790429s ago: executing program 2 (id=1651): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000002540), 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x9) (async) tee(r0, r3, 0x1476, 0x6) (async) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r7 = dup(r6) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040840) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f00)={0x20, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x2400c8d0) (async) write$P9_RLERRORu(r7, &(0x7f0000001480)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYBLOB="36db7a399266", @ANYRESDEC=r4], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 4m59.155637094s ago: executing program 2 (id=1653): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x102, 0x0) 4m58.059940966s ago: executing program 2 (id=1661): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffe) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000ac0)={0x44, r0, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "00070000000000000012000780"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xf0, r0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xca, 0x2a, [@ibss={0x6, 0x2, 0x5}, @mic={0x8c, 0x10, {0x510, "e364f0a2bfc4", @short="f0db71b0841a6bc3"}}, @tim={0x5, 0x89, {0xff, 0x4, 0x7, "f1c2a9934bf410040f1f09d4a8f9cebe100a1d85e3c2d0a5e28a23fc98cbc39d03449289f06dcb29033b99a489288e1ea7e3a238eb94043cb13315baf36094c00b67be32654d3e0372639e4fd47a4e2e9aaa93c2bdba54a0d60303eafdad2226600a3be2c90b54c8ff324010b63df27bcbf3c78f6cb61b3e5256160fe2c4a9d4e3aa320bf1b9"}}, @ibss={0x6, 0x2, 0x8}, @ibss={0x6, 0x2, 0xfb06}, @chsw_timing={0x68, 0x4, {0x5, 0x4}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x63, 0x4, @broadcast, 0x3, 0x7, 0x2}}]}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4801}, 0x40080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000300)={0xfffffff9, 0x1, 0x0, 0x6, 0xfffffbff}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x2c, 0x1c, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x80, 0x27}, [@NDA_LLADDR={0xa, 0x2, @dev}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}}, 0x8884) 4m57.9864128s ago: executing program 2 (id=1664): mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="02001f"], 0x0}, 0x0) 4m56.106744542s ago: executing program 2 (id=1678): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket$isdn(0x22, 0x3, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0x5, 0xe8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xfffffe01}) socket$inet6_udp(0xa, 0x2, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x10c}}, 0x0) 4m40.993918864s ago: executing program 32 (id=1678): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket$isdn(0x22, 0x3, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0x5, 0xe8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xfffffe01}) socket$inet6_udp(0xa, 0x2, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x10c}}, 0x0) 15.249236266s ago: executing program 0 (id=2913): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x1, @ANYBLOB="ff0000000000000086a4e4150000000000000000cc5dff766138742b2b99260eed7e758cca961faaf2f89051fc6a3c50bcb771809b98c4ea7454493e637e0806769efd42279eadf669d6285d82613f6aa1992419d9b43d72000001ed09bd635cef88a99a9c72232ca4061a89f2da06001615fee66208dbfbd253e83e71af5e7474c55446674a0f7001fc87f4525b7f7c55e7a9a763545cdd35b083f5173a091eb0b49da6c522e42dd444c02ab80dab01d606750100000000000000f103f0882647fb65e4c7e689ee2d4e42001ec30a26efce4c4aeecc992c5ce0cdca3ef095050f0276f4026ea3d76f", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB='\x00'/28], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x300}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x30}}, 0x20004800) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x1, @ANYBLOB="ff0000000000000086a4e4150000000000000000cc5dff766138742b2b99260eed7e758cca961faaf2f89051fc6a3c50bcb771809b98c4ea7454493e637e0806769efd42279eadf669d6285d82613f6aa1992419d9b43d72000001ed09bd635cef88a99a9c72232ca4061a89f2da06001615fee66208dbfbd253e83e71af5e7474c55446674a0f7001fc87f4525b7f7c55e7a9a763545cdd35b083f5173a091eb0b49da6c522e42dd444c02ab80dab01d606750100000000000000f103f0882647fb65e4c7e689ee2d4e42001ec30a26efce4c4aeecc992c5ce0cdca3ef095050f0276f4026ea3d76f", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x300}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x30}}, 0x20004800) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) 14.973744101s ago: executing program 0 (id=2917): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x9, {0x8, 0x5, 0x6, 0x2}}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x10000, 0x3, '\x00', &(0x7f0000000100)=0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x2, 0xffffffffffffffff, 0x2}) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x5, 0x9}}}}, 0x11) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x815, 0x200000) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_delrule={0x30, 0x21, 0x0, 0x70bd29, 0x25dfdbff, {0xa, 0x24, 0x0, 0x7f, 0xc5, 0x0, 0x0, 0x4, 0x10011}, [@FRA_SRC={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x90) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000380)={0x1}) syz_emit_ethernet(0x106, &(0x7f0000000440)={@empty, @local, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0x35}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x200, 0x0, 0x1}], @generic="e9ab5a8fedf4df428e1832b3943eff7c6c3d151ba784e74bf4bc813a3cb11a468cfe9133eba7f3e584c476250a0b75a1f51fcf739c9f5bdffb2d5d7698e7e853ea5184acb5850b61571af7092219c51c6ef490b958f2a44e7c524944a41def4d1bb573f2f1616ff69ff28e006f6ca74fb8cdca9b74e8095ccba5274c0d1041bf652027ec583f1d1e975dcc9a56adcd607815b4290c12950075c5740b6d4802856ed93dfce470aee7b46d54a1c2a9f600398ff79cbcabf3f5833e497f9731047a5ee49ea2c9fcede159bc00399ddcfdb46cbfe06fcaea5ec80c48f285b6e99e90"}}}}, &(0x7f0000000580)={0x1, 0x4, [0x7dd, 0xc3f, 0xd48, 0x6e3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x9b}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}, @NFT_MSG_DELTABLE={0xa8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xc, 0x6, "c40a4f966539413c"}, @NFTA_TABLE_USERDATA={0x74, 0x6, "b743f958ed54d4e40e1ddf5366436cf296d397e7a09bd51fa52ad76592ed0b698c15fe10d85fdbdb9d331295ee8fb21eb4745d10ef490cf4c7fe37d640dc850510c9f1a1a5b983e659ce3e443576322fb4b8f0c9505beb3a4b8aaa03baf07ff8cec2b6b45377b8951c82efa6d380aee9"}]}, @NFT_MSG_DELOBJ={0x120, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x5e, 0x8, "efce511f8b307994560033c80559d6060953167f7c798574c3781bc44cd6d7579b260ec6a1a7ccf24318c3e8ee810e5391a9a84f2eddfc692be5c5ef587a60eebb7889161d6e1db019850554110069b4685fa238848ff203e314"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x5a, 0x8, "cf37e9fb9262d0de978247135dceb5199a188344d643207256360707f0829bec63bae2c93660c44f8f6023a620186885fb973a3216cfee30ed56cdc605c8ab1abb55956183fdc7ea5379a052e4c474c85c2f9fd7a3f2"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x18c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_DESC={0xb8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdc50}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x240}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7715}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe5d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x98bf}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x290b}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xae, 0xd, 0x1, 0x0, "61a8daf21e2f89c1a759fc46f7db678dcb5f3babb7691a94e56f44e3a26b9658fafb48de4419ad1b1a81ae2e02a56ac3a8ee0c4cfc28d732ecd0be0fd2c0ae6f60107fe844cc8ae0cbee0d9ab59b8bfc55451249ec86f1f8fb4c9df756c632aab7bcb61b3b596456711c94c85ebbce171b656c08b2b700d2d79186df172d227bea026d8afa1b63d8c333d9321f26206ed07f2b1502987fb0556b41b881635edb33508ec0cdbbc951571a"}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x420}}, 0x20004044) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000ac0)=""/105, &(0x7f0000000b40)=0x69) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b80)={'filter\x00', 0x0, [0x0, 0x80, 0x6, 0x5, 0xe9ea]}, &(0x7f0000000c00)=0x54) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x2976, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xa, 0x2, &(0x7f0000000c40)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000c80)='syzkaller\x00', 0x7e, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0xc, r1, 0x8, &(0x7f0000000cc0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x2, 0xa, 0x7, 0x41}, 0x10, r3, 0xffffffffffffffff, 0x3, &(0x7f0000000d80)=[0xffffffffffffffff], &(0x7f0000000dc0)=[{0x0, 0x3, 0xd}, {0x1, 0x2, 0x8, 0x8}, {0x5, 0x1, 0x6, 0x5b4511f4be91e428}], 0x10, 0x4}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000ec0), 0x3, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000f00)={{0x4, @addr=0x10001}, 0x8, 0x92, 0x5}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/sysvipc/msg\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000f80), &(0x7f0000000fc0), 0x2, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getpeername$packet(r5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001300)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001400)=@deltfilter={0x478, 0x2d, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x0, 0xd}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2b}, @TCA_U32_HASH={0x8, 0x2, 0x40}]}}, @filter_kind_options=@f_route={{0xa}, {0x424, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x71f5, 0x40, 0x7, 0xef, 0x2, 0x1200000, 0x27c, 0x6dc45840, 0x4, 0x1000, 0x79, 0x6, 0x9, 0x9, 0x4993, 0xe, 0x6, 0x9, 0x401, 0x101, 0x9, 0x5, 0x40, 0x1, 0xd3c, 0x50000000, 0x5, 0xfffffff6, 0x9, 0x0, 0x80000001, 0x7, 0x4, 0x4000, 0x6, 0x6, 0x10001, 0x8, 0x8, 0x1, 0x2, 0x0, 0x100, 0x25dab6d7, 0x2ad, 0x7, 0x1, 0x8, 0xce, 0x10000, 0x10001, 0x7, 0xfffffff6, 0x101, 0x3, 0xffffffff, 0xa3b, 0x9, 0x0, 0x0, 0x6, 0x3, 0x5, 0x12000, 0x3, 0xffff, 0x200, 0x5, 0x8, 0x20, 0x1000, 0x10001, 0x1, 0x3, 0x6, 0x40, 0x24, 0x0, 0x1, 0x3, 0x3f, 0x6, 0xfffffff7, 0x2, 0x7ff, 0x2, 0x1, 0x3, 0x6, 0x8, 0xa280, 0x160000, 0x1, 0x7ff, 0xffffffff, 0x124, 0x80000001, 0x8, 0x2, 0x1, 0x7fffffff, 0x6, 0x16f, 0x60, 0x3f, 0x4, 0x1, 0x1, 0x8, 0x9, 0x70000000, 0x1, 0xf, 0x1, 0x5, 0xb, 0x400, 0x5, 0x5, 0x1ff, 0x7fff, 0xffffc554, 0x1, 0x8000, 0x9, 0x6, 0x5, 0xbd, 0xa1a, 0x400, 0x5, 0x24000, 0x882, 0x1, 0x3, 0x35d, 0x2, 0x0, 0x5, 0x6, 0x80000000, 0x3, 0x1ff, 0x3, 0x9, 0x400, 0xc92, 0xd, 0xdb36, 0x1, 0x7fffffff, 0x3ff, 0x9, 0x1, 0x9d, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0x1, 0x5, 0x278, 0x2, 0x0, 0x9, 0x9, 0x5, 0x10000, 0xf15, 0xfffffffa, 0xa000000, 0xd, 0x5, 0x3ff, 0x9, 0xffffffff, 0xb, 0x77, 0x9, 0x10000, 0x1ff, 0xffffffff, 0x0, 0x2, 0x1, 0xa8, 0x80, 0xd, 0x3ff, 0x0, 0xf2c5, 0x2, 0x30a6, 0x80, 0x2, 0x1, 0xf90, 0x81, 0xbf, 0x9, 0x8, 0xdd07, 0x3ff, 0x3, 0x4, 0x8, 0x40, 0x4ca1, 0x1, 0xfffffffb, 0x2, 0xfffffff9, 0x80, 0x83, 0x6, 0xffffffca, 0x8, 0x40000000, 0xa, 0x0, 0x9, 0x9, 0x7, 0x2, 0x2, 0xc, 0xdd67acf, 0x5, 0xc, 0x80000001, 0x7, 0x5b, 0xb0a1, 0x8, 0x1c, 0x4, 0x8964, 0x10000, 0x5, 0x8, 0xfffffff9, 0xfffffff7, 0xc6, 0x8, 0xfff, 0x8, 0x2, 0x1, 0x4, 0x2, 0x421, 0x8000, 0x1, 0x6]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf2}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x478}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 14.783396891s ago: executing program 0 (id=2918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 14.616267724s ago: executing program 0 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x8000, 0x7fff, 0x3, 0xfff, 0x93}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) 14.502965094s ago: executing program 0 (id=2920): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x0, 0x6, 0x0) r6 = getpid() r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r5) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="b6e65b0c4838790dab112a899723e620535638", @ANYRES16=r7, @ANYBLOB="00012bbd7000fddbdf250200000005000d00220000000c00030000000000000000000800020000000000080005007f000001"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) fcntl$lock(r3, 0x5, &(0x7f0000000080)={0x1, 0x0, 0x7fffffffffffffff, 0x0, r6}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000240)=""/176) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da72859c7c1e176134eff431253493482c723f8633d838bf127adff9f48a8854702b889321dfefd5644a03e0e41fb1cd1e442ac39d59aa0370071b34de016c447989a", 0x4d}], 0x1}, 0x20000044) close(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x2, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xfffff010}, {0x6}]}, 0x10) sendto$unix(r8, 0x0, 0x0, 0x20000044, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x20, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x6, {0x6, 0xd, "08410ece"}}, &(0x7f0000000080)={0x0, 0x3, 0x85, @string={0x85, 0x3, "6ddf0c364b6526743c5366e01effeb16391f9940c7319252a8a6c8d82c6c8a8f543eceec0ebc944d956f957d75ac05a578ed51bea47eaff0d77c59f50d75265a0d8af7f1200ad49c75f2a694d870d0b21ec64416d7f7332fd06e83c1d6e1e91fd08c02015b92b34a31ca2d6e0db75119d7856f1710911768e62772153db4e630c0dcd1"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x40, 0x8, 0x3, "dde23a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0x20, 0x0, 0xf9, {0xf7, "4dc6a5cd61a014e13bbe6f3d9e01bccd6e8a1217e81979a5b5cf116385f5f4f42bda9545cd9034261c3af7dee8dd786ec7aedb92c0d62484ba65cef9a3d8d12e49a68b9da924e29b383c6bc8d0ebbb9153cd3f5a8b208954673874e7490f131bc85f9bf600e8ebbfeb0253dc8c8aaf2b31e491b107d4db512df53d18b2e99cfba3dbb08b8b2395397d170985a75a0615e169e29498641035207cbcfc74621081ef8833d783ccc29ae1eef7087af6146494e2473cc7593dbfaec0e9226c778518badb14f422eee387cf0865d2193bc9153e0f4678cd11757a0fac5eb343383c2b195fab2469b237d9055b30296e526bfe93ce227289fbad"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x7}}) 12.818777785s ago: executing program 0 (id=2923): r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x30) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'bond_slave_1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xa34f, 0x3, 0x0, 0xffff7fff, 0x6, 0x4, 0x1, 0xcd9, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x10, 0x8001, 0xa, 0x7, 0x10, 0x6, 0x3}, &(0x7f0000000280)=0x9c) chdir(&(0x7f00000002c0)='./file0\x00') r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000300)=0x3, 0x2) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000340)=0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00000003c0)={0x4}) recvmsg(r3, &(0x7f0000000900)={&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000580)=""/56, 0x38}, {&(0x7f00000005c0)=""/72, 0x48}, {&(0x7f0000000640)=""/165, 0xa5}, {&(0x7f0000000700)=""/167, 0xa7}], 0x6, &(0x7f0000000840)=""/153, 0x99}, 0x10000) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000940)={{0x3, 0x3}, 0x100, './file0\x00'}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x10, r1, 0xf05a4000) write$sndseq(r0, &(0x7f0000000ac0)=[{0x0, 0x22, 0xc8, 0x0, @time={0x7, 0x5}, {0x5, 0x2}, {0x80, 0x3}, @result={0xfffffff9}}, {0x81, 0x8, 0xfd, 0x9, @time={0xffffff00, 0x5}, {0x1, 0x8}, {0x8, 0xa9}, @queue={0x7, {0x8, 0x3}}}, {0xc, 0x40, 0x7, 0x6, @tick, {0x6, 0xed}, {0xff, 0x6}, @result={0x101}}], 0x54) close_range(r5, r5, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000b40)=0x2) getresuid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)=0x0) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() mount$bpf(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x108012, &(0x7f0000000d80)={[{@uid={'uid', 0x3d, r6}}, {}, {@gid={'gid', 0x3d, r7}}, {@uid={'uid', 0x3d, r8}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@obj_user={'obj_user', 0x3d, '/sys/kernel/debug/binder/transaction_log\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@hash}]}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000e40), 0x100, 0x80) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000e80)={0x0, r3}, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r9 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, r9, 0x3, 0x9, 0x0) 8.936082744s ago: executing program 1 (id=2944): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/192, 0xc0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x8001, 0x6c002) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2, 0x800, 0xff) getpid() syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100"], 0x16) 8.141614913s ago: executing program 5 (id=2945): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x100000000000001, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20088}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) madvise(&(0x7f00006c9000/0x3000)=nil, 0x3000, 0x67) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$session_to_parent(0x12) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffd}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x34}}, 0x8002) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r6, 0xfff}, 0x50) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000440), 0x4, {0xa, 0x4e21, 0x7fff, @local, 0x8}}}, 0x38) lseek(r1, 0x10001, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x8000) 7.197759156s ago: executing program 1 (id=2947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r0, 0x0, 0x27) (async) write$selinux_user(r0, 0x0, 0x27) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x816000, 0x0) (async) mount(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x816000, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) (async) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@deltclass={0x5c, 0x29, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xfff1, 0xffe0}, {0x5, 0x4}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0x73}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffff2}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}]}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x28840) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@deltclass={0x5c, 0x29, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xfff1, 0xffe0}, {0x5, 0x4}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0x73}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffff2}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}]}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x28840) 6.725412673s ago: executing program 5 (id=2949): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 5.793330473s ago: executing program 5 (id=2953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r3, &(0x7f0000001280)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, &(0x7f0000000280)=""/4096, 0x1000}, 0x102) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x18, 0x41, 0x9, 0x0, 0x0, {0x3}, [@generic="ff"]}, 0x18}}, 0x0) fcntl$notify(r4, 0x402, 0x9) 4.771866275s ago: executing program 5 (id=2954): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0xd4402, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x10000, 0x3, '\x00', &(0x7f0000000100)=0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x2, r0, 0x2}) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x5, 0x9}}}}, 0x11) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x815, 0x200000) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_delrule={0x30, 0x21, 0x0, 0x70bd29, 0x25dfdbff, {0xa, 0x24, 0x0, 0x7f, 0xc5, 0x0, 0x0, 0x4, 0x10011}, [@FRA_SRC={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x90) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000380)={0x1}) syz_emit_ethernet(0x106, &(0x7f0000000440)={@empty, @local, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0x35}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x200, 0x0, 0x1}], @generic="e9ab5a8fedf4df428e1832b3943eff7c6c3d151ba784e74bf4bc813a3cb11a468cfe9133eba7f3e584c476250a0b75a1f51fcf739c9f5bdffb2d5d7698e7e853ea5184acb5850b61571af7092219c51c6ef490b958f2a44e7c524944a41def4d1bb573f2f1616ff69ff28e006f6ca74fb8cdca9b74e8095ccba5274c0d1041bf652027ec583f1d1e975dcc9a56adcd607815b4290c12950075c5740b6d4802856ed93dfce470aee7b46d54a1c2a9f600398ff79cbcabf3f5833e497f9731047a5ee49ea2c9fcede159bc00399ddcfdb46cbfe06fcaea5ec80c48f285b6e99e90"}}}}, &(0x7f0000000580)={0x1, 0x4, [0x7dd, 0xc3f, 0xd48, 0x6e3]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x9b}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}, @NFT_MSG_DELTABLE={0xa8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xc, 0x6, "c40a4f966539413c"}, @NFTA_TABLE_USERDATA={0x74, 0x6, "b743f958ed54d4e40e1ddf5366436cf296d397e7a09bd51fa52ad76592ed0b698c15fe10d85fdbdb9d331295ee8fb21eb4745d10ef490cf4c7fe37d640dc850510c9f1a1a5b983e659ce3e443576322fb4b8f0c9505beb3a4b8aaa03baf07ff8cec2b6b45377b8951c82efa6d380aee9"}]}, @NFT_MSG_DELOBJ={0x120, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x5e, 0x8, "efce511f8b307994560033c80559d6060953167f7c798574c3781bc44cd6d7579b260ec6a1a7ccf24318c3e8ee810e5391a9a84f2eddfc692be5c5ef587a60eebb7889161d6e1db019850554110069b4685fa238848ff203e314"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x5a, 0x8, "cf37e9fb9262d0de978247135dceb5199a188344d643207256360707f0829bec63bae2c93660c44f8f6023a620186885fb973a3216cfee30ed56cdc605c8ab1abb55956183fdc7ea5379a052e4c474c85c2f9fd7a3f2"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x18c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_DESC={0xb8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdc50}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x240}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7715}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe5d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x98bf}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x290b}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xae, 0xd, 0x1, 0x0, "61a8daf21e2f89c1a759fc46f7db678dcb5f3babb7691a94e56f44e3a26b9658fafb48de4419ad1b1a81ae2e02a56ac3a8ee0c4cfc28d732ecd0be0fd2c0ae6f60107fe844cc8ae0cbee0d9ab59b8bfc55451249ec86f1f8fb4c9df756c632aab7bcb61b3b596456711c94c85ebbce171b656c08b2b700d2d79186df172d227bea026d8afa1b63d8c333d9321f26206ed07f2b1502987fb0556b41b881635edb33508ec0cdbbc951571a"}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x420}}, 0x20004044) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000ac0)=""/105, &(0x7f0000000b40)=0x69) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000b80)={'filter\x00', 0x0, [0x0, 0x80, 0x6, 0x5, 0xe9ea]}, &(0x7f0000000c00)=0x54) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x2976, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xa, 0x2, &(0x7f0000000c40)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000c80)='syzkaller\x00', 0x7e, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0xc, r1, 0x8, &(0x7f0000000cc0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x2, 0xa, 0x7, 0x41}, 0x10, r3, r0, 0x3, &(0x7f0000000d80)=[r0], &(0x7f0000000dc0)=[{0x0, 0x3, 0xd}, {0x1, 0x2, 0x8, 0x8}, {0x5, 0x1, 0x6, 0x5b4511f4be91e428}], 0x10, 0x4}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000ec0), 0x3, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000f00)={{0x4, @addr=0x10001}, 0x8, 0x92, 0x5}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/sysvipc/msg\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000f80), &(0x7f0000000fc0), 0x2, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000001200)=0xc) getpeername$packet(r5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001300)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001400)=@deltfilter={0x478, 0x2d, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x0, 0xd}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2b}, @TCA_U32_HASH={0x8, 0x2, 0x40}]}}, @filter_kind_options=@f_route={{0xa}, {0x424, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x71f5, 0x40, 0x7, 0xef, 0x2, 0x1200000, 0x27c, 0x6dc45840, 0x4, 0x1000, 0x79, 0x6, 0x9, 0x9, 0x4993, 0xe, 0x6, 0x9, 0x401, 0x101, 0x9, 0x5, 0x40, 0x1, 0xd3c, 0x50000000, 0x5, 0xfffffff6, 0x9, 0x0, 0x80000001, 0x7, 0x4, 0x4000, 0x6, 0x6, 0x10001, 0x8, 0x8, 0x1, 0x2, 0x0, 0x100, 0x25dab6d7, 0x2ad, 0x7, 0x1, 0x8, 0xce, 0x10000, 0x10001, 0x7, 0xfffffff6, 0x101, 0x3, 0xffffffff, 0xa3b, 0x9, 0x0, 0x0, 0x6, 0x3, 0x5, 0x12000, 0x3, 0xffff, 0x200, 0x5, 0x8, 0x20, 0x1000, 0x10001, 0x1, 0x3, 0x6, 0x40, 0x24, 0x0, 0x1, 0x3, 0x3f, 0x6, 0xfffffff7, 0x2, 0x7ff, 0x2, 0x1, 0x3, 0x6, 0x8, 0xa280, 0x160000, 0x1, 0x7ff, 0xffffffff, 0x124, 0x80000001, 0x8, 0x2, 0x1, 0x7fffffff, 0x6, 0x16f, 0x60, 0x3f, 0x4, 0x1, 0x1, 0x8, 0x9, 0x70000000, 0x1, 0xf, 0x1, 0x5, 0xb, 0x400, 0x5, 0x5, 0x1ff, 0x7fff, 0xffffc554, 0x1, 0x8000, 0x9, 0x6, 0x5, 0xbd, 0xa1a, 0x400, 0x5, 0x24000, 0x882, 0x1, 0x3, 0x35d, 0x2, 0x0, 0x5, 0x6, 0x80000000, 0x3, 0x1ff, 0x3, 0x9, 0x400, 0xc92, 0xd, 0xdb36, 0x1, 0x7fffffff, 0x3ff, 0x9, 0x1, 0x9d, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0x1, 0x5, 0x278, 0x2, 0x0, 0x9, 0x9, 0x5, 0x10000, 0xf15, 0xfffffffa, 0xa000000, 0xd, 0x5, 0x3ff, 0x9, 0xffffffff, 0xb, 0x77, 0x9, 0x10000, 0x1ff, 0xffffffff, 0x0, 0x2, 0x1, 0xa8, 0x80, 0xd, 0x3ff, 0x0, 0xf2c5, 0x2, 0x30a6, 0x80, 0x2, 0x1, 0xf90, 0x81, 0xbf, 0x9, 0x8, 0xdd07, 0x3ff, 0x3, 0x4, 0x8, 0x40, 0x4ca1, 0x1, 0xfffffffb, 0x2, 0xfffffff9, 0x80, 0x83, 0x6, 0xffffffca, 0x8, 0x40000000, 0xa, 0x0, 0x9, 0x9, 0x7, 0x2, 0x2, 0xc, 0xdd67acf, 0x5, 0xc, 0x80000001, 0x7, 0x5b, 0xb0a1, 0x8, 0x1c, 0x4, 0x8964, 0x10000, 0x5, 0x8, 0xfffffff9, 0xfffffff7, 0xc6, 0x8, 0xfff, 0x8, 0x2, 0x1, 0x4, 0x2, 0x421, 0x8000, 0x1, 0x6]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf2}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x478}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 4.543817984s ago: executing program 5 (id=2955): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) getpid() (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x200000000000008, 0x9, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0xfffffffffffffc90) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@getqdisc={0x28, 0x26, 0x802, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xd}, {0xfff1, 0x4}}, [{0x4}]}, 0x28}}, 0x4004) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'ipvlan1\x00', 0x800}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=@newtaction={0x448, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x400, 0x1, [@m_xt={0x214, 0x1f, 0x0, 0x0, {{0x7}, {0x170, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x73}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3f, 0x6, {0x2, 'security\x00', 0x17, 0x1, "8e7530760c1aa68be9bbc07a5e0c9cf0857c2335be"}}, @TCA_IPT_TARG={0x45, 0x6, {0x6, 'mangle\x00', 0x1, 0xc, "a7d79129b6f0b57ad194b785229441cc607e8c0d2f6be342195a03"}}, @TCA_IPT_TARG={0x67, 0x6, {0x4b, 'filter\x00', 0xfe, 0x57, "14d8ac09b00296517faa58213f868bf81a19355ebf339848dac59062a62bedcf45542e3c74d194f73782b39ae678afabb5e58cc217ba258dba7f87dc6c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x7d, 0x6, "4e077ee443803c52f59798fd239bd40d0864daf1d7d03460aabbd9dd2992a6913740f2c642ef8b554dd15cf4641ba36e372f1ec0424eaea613b447bf82d36e18882e06201a3cc665961b393f1aa139aa598991bbb0990f169507154e1e384240fda6e3af2528c768fbb14d5f9975ad1ab8089c59cb8e4f6b48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x1e8, 0x9, 0x0, 0x0, {{0x7}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4d, 0x6, {0x6, 'security\x00', 0x7, 0x6, "3c27f707f774923bf37b1ac662c1bc1152ccf25ccf52a1f2ae8748c0722cea4c56217c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xc3, 0x6, {0x1a60, 'raw\x00', 0x0, 0xfc1, "1780f0acec84d8dbb96a2d39ac6449f08af8b4b15420a85c6164534fe4ee4db5f8cb37a31387cbff37b9abc61c52a240e7176e7eaf1bacc16fc7919f1f16a07ec7831f3596cfa30f9788b84153bb2b4d5b62ee42bee9b106141b4aba2797dd1d1992bb4f97186bf33161e0f8a7d84ea5b2e836e34a36b90601ca786b6362e93894e51482b1649971d776c2b4bdb0b41507edb71720782eccac"}}]}, {0x80, 0x6, "23f8eed1be7715b79f097fee765336e53e34e46e8e9be947ab3af0d00b1b2c40e1d2b11a0a282894069ed97a6f6e4c9af11a8bf0b0099a51e615dcf9bb14c5043cfb90f1d89c2638ffff7800dfbf5fb917c87d9106b1dd6da10b396e5d7fc13938c7f37dfd95b28713493098f51551c0b196119d9963f8e231e3e46b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = getpid() (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x1, 0x7, 0xbb, 0xb7}, {0x1, 0x5, 0x1, 0x4}, {0x1, 0x90, 0xbf, 0x3}, {0x2, 0x3, 0x4, 0x5}]}, 0x10) (async) read(r5, &(0x7f0000000080)=""/1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000023c0)=ANY=[@ANYBLOB="ec110000220000042dbd7000fcdbdf250000000007525f8d5bb1a3a33c2a63e8562a9e764dd4123461749e03136787dcf5967e314a03329702740426d426bccc355b9200ce4a0a5b38897b58e4f183ed00f491613a6f896f1c3783d08a73d0ba0800290041ef78956d3d0d95f045612aa6212feee055", @ANYRES32=0x0, @ANYBLOB="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"], 0x11ec}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r2, @ANYBLOB="000000000600050000000000"], 0x24}}, 0x0) (async) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) (async) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2c000, 0x95) 3.888169963s ago: executing program 4 (id=2957): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000180)) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r5) (async) syz_open_dev$dri(0x0, 0x1ff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) (async) ioctl$TCXONC(r8, 0x4b3a, 0x2) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1f4, 0x54}, 0x9c) 3.883703861s ago: executing program 1 (id=2958): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x100000000000001, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20088}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) madvise(&(0x7f00006c9000/0x3000)=nil, 0x3000, 0x67) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$session_to_parent(0x12) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffd}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x34}}, 0x8002) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r6, 0xfff}, 0x50) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000440), 0x4, {0xa, 0x4e21, 0x7fff, @local, 0x8}}}, 0x38) lseek(r1, 0x10001, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x8000) 3.535791418s ago: executing program 4 (id=2959): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='efs\x00', 0x0) unshare(0x80) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) tkill(0x0, 0xb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, 0x0) mount(0x0, 0x0, 0x0, 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000e500c30400ff00004000000000016c3b3ad3000000"]) 3.39225859s ago: executing program 3 (id=2960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) 3.289487254s ago: executing program 3 (id=2961): r0 = syz_usb_connect(0x2, 0x40d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xa1, 0xe2, 0x63, 0x8, 0x257a, 0x1605, 0xe5ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3fb, 0x2, 0x2, 0x50, 0x10, 0x3, [{{0x9, 0x4, 0x14, 0x5, 0x3, 0x16, 0xef, 0xd5, 0x5, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "96f1ee55ce81"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfc8, 0x8bea, 0x8, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x90}]}], [{{0x9, 0x5, 0x0, 0x10, 0x0, 0x1, 0x6, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x93, 0x4, 0x5d, [@generic={0xe1, 0x3, "daa77fd3ed0639bc8893ca6727bcd8240f7143654bcb16096644b6ee5f17ea6cfa784c78517ae591a756e7978bd025bb09832e2a8f8a4d6d0983437c1ea7ba601dd63b52e9c635e31efd1d5791e62b45365cc0893c175d6650a7db32d1c95b7bf68fe4380e87fb5619e9d1b990356388485278146235f36a5034e13062b16226284da9d471148862999a974e851b6c553ee222efa40aa7eaf787e6ff21c3ebc192a0522c9a22e8454d3c5d4b6f2b5769831e09c7c24f2aa8949caffbd9b6f4a086b746b8c079ad5618ed3ba635961437540363c357e8dcb489f6af866103b4"}, @generic={0xe, 0x0, "95ea33446a722c449d2bfd3a"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x4f, 0xa, 0x0, [@generic={0x32, 0x4, "5a8008b40829ff3c6352a57529d328796da71de9be69bdad99fde103cb5d7ba926b43cfe10a1c3bebdef43688a712c73"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xe9}]}}]}}, {{0x9, 0x4, 0x8b, 0x5a, 0x7, 0xe6, 0x7, 0x4b, 0x7, [@generic={0xc1, 0x22, "311975b3c0e712904da0e0397883424c83ae052458272cff7474bc944d96f8b7999d05492b9df3ee8f26d03107462a8170dceb11e14c763a970d4822281a3ffa6dd7dc0beab2f0dbdef51111aee5abed30ef6779dabd284f78fdbc4593ed4e83cdf5b4456694dd614e0c492a085e4dccdc766ad6de4d25cb2e1e73a9e81069164cbd6b6b94557e8ffdda5c17e21e2e65c0be32542fcbbe0abbd74fe543c02c5f0659a349f3b499b7f3755929970bd5ea9e63c076727411b8ff1fca8363c962"}, @hid_hid={0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x5c3}}], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0x9, 0xb, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xfe, 0x4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x100}]}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x69, 0x1, 0xb8}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x2, 0xab, 0xff}}, {{0x9, 0x5, 0x2, 0x0, 0x7b7, 0x11, 0xfa, 0xa}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x4, 0x2a, [@generic={0x21, 0x10, "bf3bc72e74f3c229d5235fccadc08929d872d2454a836b1917492b003bae13"}, @generic={0xd6, 0x1d, "e477f28cbca0b497e4e456cb495e6754de9b9730eef5f4cc3af4b68ddd646e51d98df0573dc621159399dccad058c9b346aca61dfb40b42a6be0f83112f869ce032d18b67a8d385e2cd7dbd86606ae214941b45714c8820c630f6d0df92ebe73a588ab811bb39b60a6852302e16e827235e80a7bb29b1362daa369df6293418150ace6e60909954068f9765cb79ea800925f47d2f7cc706eb58dad9213a6f51eab6213e81b1d70b38c22fbfd046f44b4de632e98df303681a1e578493c9d83db4c6cb4aba434e3064a35abf6e667e6d6539defa4"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x18, 0xd7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}, @generic={0x66, 0x1, "2f7b7b2d2e3e9609b5801373b49e8bb1d12c18d426080ff2ce834c50b107df723dab371f06822db4667efa3d248e9bc4968a60fc8486fe5dea0028c81a6f89ddc45e667f6fd8907cca784c3cca9754833cf95685a2681dd8f6fb54e15a211c9835b6de12"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.513215339s ago: executing program 4 (id=2962): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000003280)='#', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001080)={r3, 0x0, r3}, &(0x7f00000010c0)=""/48, 0x30, &(0x7f0000001180)={&(0x7f0000001100)={'streebog256\x00'}, &(0x7f00000005c0)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r7, 0x0) mount$afs(&(0x7f0000000080)=@cell={0x23, 'syz0:', 'syz0', '.backup'}, &(0x7f0000000180)='./control\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000400)={[{@flock_openafs}, {}], [{@fowner_lt={'fowner<', r6}}, {@flag='async'}, {@subj_type={'subj_type', 0x3d, '+-+!\\/{]%/:*'}}, {@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xee01}}, {@hash}, {@audit}, {@appraise_type}, {@uid_lt={'uid<', r7}}]}) unlinkat(r5, &(0x7f0000000280)='./file0\x00', 0x200) rmdir(&(0x7f0000000100)='./control\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000019200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x110, r4, 0x2437d000) 2.273017817s ago: executing program 1 (id=2963): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 2.22795663s ago: executing program 5 (id=2964): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 1.554095525s ago: executing program 4 (id=2965): openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x30040, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = epoll_create(0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x40000000}) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0xfffffe7d) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101043, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x1272, 0x1, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x1, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r7, 0xae80, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="de99", 0x2) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffef0, 0x102, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 1.166039115s ago: executing program 3 (id=2966): r0 = socket(0x2b, 0x80801, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) fcntl$notify(r1, 0x402, 0x26) fcntl$notify(r1, 0x402, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'wg1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2}}, &(0x7f00000014c0)=""/218, 0x1a, 0xda, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) listen(r0, 0x9) 316.466836ms ago: executing program 4 (id=2967): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) ioctl$int_out(r0, 0x5460, &(0x7f0000000400)) madvise(&(0x7f0000503000/0x4000)=nil, 0x4000, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 255.787315ms ago: executing program 3 (id=2968): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) (async) sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000005c0)=""/4096) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) getpeername$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f0000000000)=0x42, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x84, &(0x7f0000000040)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) 252.374598ms ago: executing program 1 (id=2969): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x90541, 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x20802, 0x0) dup2(r0, r1) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) sendmsg$sock(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)="60f7f9149a0b31df75b7220ab582fded161dc0ed4740346db74ae4fd2c388a4da8c4f26dd5caf7844a85da47158e54eed8f33667818034cf95168334049cbfa888e24d68956176d9d808e5bc", 0x4c}, {0x0}], 0x2}, 0x40880) 112.957035ms ago: executing program 3 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) 64.213515ms ago: executing program 4 (id=2971): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @private1, 0x85bad93}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0xf, @empty, 0x4}}, 0x9, 0x6, 0x0, 0x2, 0xce0206, 0xffffffe, 0x25}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000015ba000000000000000000000000000000000000000000000000001974e40ecc5a2cd54f65d5b5d453000b5687391f7982d7397cdd50473ce4d96b33855c555c71da00963354bb1fe9aa9312918a3157e93cd6b51bd3a91b5c26f6fef613a2ecdc263ceb2c5e0a41da9a1260b6"], 0x50) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000200)=""/12, 0xc}], 0x1, 0x3, 0x81) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={r4}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e22, 0xca, @mcast2, 0x8}}, [0x5, 0x2d0, 0x7, 0xd, 0xe, 0xd, 0x2, 0x5, 0x7, 0x8, 0x8000000000000, 0x2, 0x80000000, 0x100, 0xfffffffffffffff6]}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfe], 0x0, [0x4, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0xffff, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0xb, 0x0, 0x0, 0x101]}}}}]}, 0x88}}, 0x10) 61.954582ms ago: executing program 1 (id=2972): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x100000000000001, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20088}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) madvise(&(0x7f00006c9000/0x3000)=nil, 0x3000, 0x67) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$session_to_parent(0x12) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffd}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x34}}, 0x8002) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r6, 0xfff}, 0x50) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000440), 0x4, {0xa, 0x4e21, 0x7fff, @local, 0x8}}}, 0x38) lseek(r1, 0x10001, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x8000) 0s ago: executing program 3 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0x1d, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x28}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) (async, rerun: 64) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c4e200490da817b6350ce6908624ea9c30ae54d1c8279ea8eefbb769ab174dd38e3462ea4566f01cc34814bba0fd9c889d21518eae479c10e1eb851c3dd4d1efdfdf48bbbbd04413ee43feca7f149a5a45967072a1c120a98427b07ce", @ANYRES16=r3, @ANYBLOB="000226bd7000fddbdf256d0000000c0099000400000077000000"], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x800) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x2, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r7, &(0x7f0000000680)={0x1a, 0x1, 0x7, 0xd, 0x23, 0x6, @broadcast}, 0x10) r8 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xf, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}]}}]}, 0x40}}, 0x4000) (async) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd"}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x119, 0x75, 0x0, 0x1, [@nested={0xc, 0x105, 0x0, 0x1, [@typed={0x4, 0x22}, @typed={0x4, 0x98}]}, @nested={0x4, 0x8}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r12}, @generic="897a22072687e1d29eb84b27bd", @nested={0xf0, 0x425, 0x0, 0x1, [@nested={0xe9, 0xc7, 0x0, 0x1, [@generic="0e8a1ba9d0d1c3c46f11f097dd31b5ac0d84d4d2b2f914e4192e9f5e09954309143035825e421199ef3742a5289e741571d2ac7ef6550f8c0454460c177a12d8c5", @typed={0x41, 0xe4, 0x0, 0x0, @binary="6423d7fbd06565c156e976ea2705ead6f599a9ab0d0f0b42f23c719ad59cbf301b5dfa5c580b1cc4643e60b078837a9e0bbd915ec517e815e3d158c99e"}, @nested={0x60, 0xc6, 0x0, 0x1, [@nested={0x59, 0x122, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @u32=0x401}, @generic="e96c0df381a14a3c0b3ccaef33d226349e43f34829aab5a8b5ce756312", @nested={0x4, 0x17}, @nested={0x4, 0xc9}, @nested={0x4, 0xcd}, @typed={0x8, 0xd3, 0x0, 0x0, @str='gtp\x00'}, @typed={0x19, 0x131, 0x0, 0x0, @binary="293c4369bb7ebb6bbb43402813d21d2b8c714092da"}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r13 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r14 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r13) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x38, r16, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x38}}, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000040ff6900000000000100000018009b3900000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r14) (async) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) kernel console output (not intermixed with test programs): socket permissive=1 [ 653.162560][ T5939] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 653.346380][ T30] audit: type=1400 audit(1751988192.254:2895): avc: denied { sqpoll } for pid=15556 comm="syz.1.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 653.419364][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2546'. [ 653.484196][ T5939] usb 4-1: too many configurations: 42, using maximum allowed: 8 [ 653.497396][ T30] audit: type=1400 audit(1751988192.404:2896): avc: denied { create } for pid=15562 comm="syz.5.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 653.528365][ T5939] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 653.537799][ T5939] usb 4-1: can't read configurations, error -61 [ 653.549243][T15559] bridge0 (unregistering): left promiscuous mode [ 653.556389][ T30] audit: type=1400 audit(1751988192.404:2897): avc: denied { ioctl } for pid=15562 comm="syz.5.2547" path="socket:[53200]" dev="sockfs" ino=53200 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 653.592756][ T30] audit: type=1400 audit(1751988192.454:2898): avc: denied { create } for pid=15562 comm="syz.5.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 653.616258][ T30] audit: type=1400 audit(1751988192.454:2899): avc: denied { setopt } for pid=15562 comm="syz.5.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 653.659049][ T30] audit: type=1400 audit(1751988192.454:2900): avc: denied { write } for pid=15562 comm="syz.5.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 653.671013][T15571] pim6reg9: entered allmulticast mode [ 653.688536][T15571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.698188][T15571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.706892][ T5939] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 653.717389][ T30] audit: type=1400 audit(1751988192.624:2901): avc: denied { getopt } for pid=15570 comm="syz.0.2549" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 653.863008][ T5939] usb 4-1: too many configurations: 42, using maximum allowed: 8 [ 653.872065][ T5939] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 653.881932][ T5939] usb 4-1: can't read configurations, error -61 [ 653.888541][ T5939] usb usb4-port1: attempt power cycle [ 653.992464][ T43] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 654.123267][ T43] usb 2-1: device descriptor read/64, error -71 [ 654.254295][ T5939] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 654.269184][T15575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.277938][T15575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.288241][T15575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.294873][ T5939] usb 4-1: too many configurations: 42, using maximum allowed: 8 [ 654.314009][ T5939] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 654.320280][T15563] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 654.362819][ T43] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 654.618485][ T5939] usb 4-1: can't read configurations, error -61 [ 654.742514][ T43] usb 2-1: device descriptor read/64, error -71 [ 654.752435][ T5939] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 654.785628][ T5939] usb 4-1: too many configurations: 42, using maximum allowed: 8 [ 654.804290][ T5939] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 654.817687][ T5939] usb 4-1: can't read configurations, error -61 [ 654.824874][ T5939] usb usb4-port1: unable to enumerate USB device [ 654.897861][ T43] usb usb2-port1: attempt power cycle [ 655.582393][ T43] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 655.602745][ T43] usb 2-1: device descriptor read/8, error -71 [ 655.669594][T15590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.678404][T15590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.782847][T15591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2555'. [ 655.786962][T15591] kAFS: unparsable volume name [ 655.928295][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2559'. [ 655.942365][ T43] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 655.974333][ T43] usb 2-1: device descriptor read/8, error -71 [ 656.039925][T15606] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 656.046464][T15608] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 656.050112][T15606] macsec1: entered allmulticast mode [ 656.061313][T15609] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 656.069751][T15606] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 656.079715][T15606] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 656.083849][ T43] usb usb2-port1: unable to enumerate USB device [ 656.087351][T15606] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 656.116584][T15608] bond0: (slave wlan1): Releasing backup interface [ 656.127164][T15608] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 656.136511][T15608] team0: Port device wlan1 added [ 656.230125][T15616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.332436][ T43] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 656.483825][ T43] usb 4-1: config 127 has an invalid interface number: 218 but max is 0 [ 656.492662][ T43] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 656.503208][ T43] usb 4-1: config 127 has no interface number 0 [ 656.509512][ T43] usb 4-1: config 127 interface 218 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 656.519597][ T43] usb 4-1: config 127 interface 218 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.532942][ T43] usb 4-1: config 127 interface 218 has no altsetting 0 [ 656.541889][ T43] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 3.5c [ 656.557239][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.565644][ T43] usb 4-1: Product: syz [ 656.569794][ T43] usb 4-1: Manufacturer: syz [ 656.574539][ T43] usb 4-1: SerialNumber: syz [ 656.799196][ T43] etas_es58x 4-1:127.218: Starting syz syz (Serial Number syz) [ 656.810113][ T43] etas_es58x 4-1:127.218: could not retrieve the product info string [ 656.909183][ T43] usb 4-1: USB disconnect, device number 100 [ 656.919018][ T43] etas_es58x 4-1:127.218: Disconnecting syz syz [ 656.922267][ T5939] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 656.955320][T15635] overlayfs: missing 'workdir' [ 657.165709][ T5939] usb 6-1: config 0 has no interfaces? [ 657.171263][ T5939] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 657.177089][T15648] 9pnet_fd: Insufficient options for proto=fd [ 657.181561][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.197601][ T5939] usb 6-1: config 0 descriptor?? [ 657.341990][T15651] xfrm0: entered allmulticast mode [ 657.367492][T15650] lo speed is unknown, defaulting to 1000 [ 657.380891][T15650] lo speed is unknown, defaulting to 1000 [ 657.731416][ T5939] usb 6-1: USB disconnect, device number 27 [ 657.820136][T15658] fuse: Bad value for 'user_id' [ 657.828104][T15658] fuse: Bad value for 'user_id' [ 657.961292][T15663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.974901][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 657.974919][ T30] audit: type=1400 audit(1751988196.885:2940): avc: denied { ioctl } for pid=15655 comm="syz.3.2576" path="socket:[54410]" dev="sockfs" ino=54410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 658.004129][T15663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.015218][ T30] audit: type=1400 audit(1751988196.915:2941): avc: denied { getopt } for pid=15655 comm="syz.3.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 658.041966][T15659] overlay: filesystem on ./bus not supported as upperdir [ 658.054544][T15663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.510295][ T30] audit: type=1400 audit(1751988196.955:2942): avc: denied { mount } for pid=15656 comm="syz.5.2577" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 658.722495][ T30] audit: type=1400 audit(1751988197.495:2943): avc: denied { unmount } for pid=12524 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 658.725605][T15671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2582'. [ 658.743036][ T30] audit: type=1400 audit(1751988197.515:2944): avc: denied { write } for pid=15668 comm="syz.1.2580" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 658.835784][T15672] ALSA: mixer_oss: invalid OSS volume '' [ 659.255947][ T30] audit: type=1400 audit(1751988198.165:2945): avc: denied { accept } for pid=15667 comm="syz.4.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 659.326664][ T30] audit: type=1400 audit(1751988198.235:2946): avc: denied { mount } for pid=15676 comm="syz.4.2583" name="/" dev="ramfs" ino=54501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 659.490156][ T30] audit: type=1400 audit(1751988198.395:2947): avc: denied { create } for pid=15681 comm="syz.3.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 659.573605][T15684] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 659.580700][T15684] overlayfs: failed to set xattr on upper [ 659.586502][T15684] overlayfs: ...falling back to redirect_dir=nofollow. [ 659.593394][T15684] overlayfs: ...falling back to index=off. [ 659.599222][T15684] overlayfs: ...falling back to uuid=null. [ 659.605079][T15684] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 659.946228][ T30] audit: type=1400 audit(1751988198.475:2948): avc: denied { mounton } for pid=15676 comm="syz.4.2583" path="/bus" dev="ramfs" ino=54513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 659.994482][ T30] audit: type=1400 audit(1751988198.895:2949): avc: denied { read } for pid=15681 comm="syz.3.2585" path="socket:[54168]" dev="sockfs" ino=54168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 660.088616][T15690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.110573][T15690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.282924][T15690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.291587][T15690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.314338][T15690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.415155][ T24] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 660.437577][T15690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.582292][ T24] usb 2-1: device descriptor read/64, error -71 [ 660.593036][T15690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.601813][T15690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.681918][T15711] fuse: Bad value for 'fd' [ 660.812085][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 660.822091][ T24] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 660.884890][T15720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.962739][ T24] usb 2-1: device descriptor read/64, error -71 [ 660.985979][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 660.995973][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 661.009170][ T10] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 661.018080][ T10] usb 6-1: config 0 has no interface number 0 [ 661.083373][ T24] usb usb2-port1: attempt power cycle [ 661.089726][ T10] usb 6-1: config 0 interface 143 has no altsetting 0 [ 661.206915][ T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 661.375774][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.392142][ T10] usb 6-1: Product: syz [ 661.396533][ T10] usb 6-1: Manufacturer: syz [ 661.472026][ T24] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 661.479872][ T10] usb 6-1: SerialNumber: syz [ 661.486624][T15724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2599'. [ 661.502470][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 661.509967][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 661.518174][ T10] r8152 6-1:0.143: Expected endpoints are not found [ 661.525293][T15729] netlink: 'syz.0.2600': attribute type 1 has an invalid length. [ 661.642089][ T24] usb 2-1: device descriptor read/8, error -71 [ 661.738436][ T43] r8152-cfgselector 6-1: USB disconnect, device number 28 [ 662.020256][T15743] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 662.027455][T15743] overlayfs: failed to set xattr on upper [ 662.033283][T15743] overlayfs: ...falling back to redirect_dir=nofollow. [ 662.040209][T15743] overlayfs: ...falling back to index=off. [ 662.046144][T15743] overlayfs: ...falling back to uuid=null. [ 662.052382][T15743] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 662.341663][ T24] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 662.981944][ T24] usb 2-1: device descriptor read/8, error -71 [ 662.990272][T15747] lo speed is unknown, defaulting to 1000 [ 662.998550][T15747] lo speed is unknown, defaulting to 1000 [ 663.092153][ T24] usb usb2-port1: unable to enumerate USB device [ 663.143172][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 663.143187][ T30] audit: type=1400 audit(1751988202.055:2972): avc: denied { read write } for pid=15760 comm="syz.1.2609" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 663.175882][ T30] audit: type=1400 audit(1751988202.095:2973): avc: denied { open } for pid=15760 comm="syz.1.2609" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 663.205431][ T30] audit: type=1400 audit(1751988202.095:2974): avc: denied { create } for pid=15760 comm="syz.1.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 663.246696][T15763] tipc: Enabling of bearer rejected, failed to enable media [ 663.255524][ T30] audit: type=1400 audit(1751988202.155:2975): avc: denied { write } for pid=15761 comm="syz.4.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 663.275455][ T43] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 663.359503][T15771] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2613'. [ 663.409866][ T30] audit: type=1400 audit(1751988202.315:2976): avc: denied { create } for pid=15775 comm="syz.1.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 663.438158][T15747] ip6gre1: entered allmulticast mode [ 663.452095][ T30] audit: type=1400 audit(1751988202.315:2977): avc: denied { getopt } for pid=15775 comm="syz.1.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 663.455809][T15776] netlink: 'syz.1.2614': attribute type 10 has an invalid length. [ 663.479771][ T5885] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 663.507048][ T30] audit: type=1400 audit(1751988202.315:2978): avc: denied { name_bind } for pid=15775 comm="syz.1.2614" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 663.507098][ T30] audit: type=1400 audit(1751988202.315:2979): avc: denied { node_bind } for pid=15775 comm="syz.1.2614" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 663.507851][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.507894][ T43] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 663.507916][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.510841][ T43] usb 4-1: config 0 descriptor?? [ 663.513558][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 663.607063][T15776] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 663.752278][T15782] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 663.759494][T15782] overlayfs: failed to set xattr on upper [ 663.765526][T15782] overlayfs: ...falling back to redirect_dir=nofollow. [ 663.772438][T15782] overlayfs: ...falling back to index=off. [ 663.778283][T15782] overlayfs: ...falling back to uuid=null. [ 663.784161][T15782] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 664.020422][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 664.043161][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 664.049850][ T5885] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 664.058237][ T5885] usb 6-1: config 1 has no interface number 0 [ 664.070125][ T5885] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 664.080152][ T5885] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 664.094481][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 664.111852][ T5885] usb 6-1: config 1 interface 105 has no altsetting 0 [ 664.119206][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 664.127127][ T5885] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 664.136432][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.136590][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 664.145693][ T5885] usb 6-1: Product: syz [ 664.156184][ T5885] usb 6-1: Manufacturer: syz [ 664.160799][ T5885] usb 6-1: SerialNumber: syz [ 664.169009][T15765] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 664.179480][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 664.179532][T15765] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 664.193738][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 664.226634][T15789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.240961][T15789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.446401][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'. [ 664.483109][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 664.504732][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 664.511575][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 664.537984][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 664.545020][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 664.556201][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 664.567157][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 664.590038][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 664.600530][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 664.620135][ T43] pwc: Registered as video103. [ 664.626146][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 664.644453][T15765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.660192][ T43] usb 4-1: USB disconnect, device number 101 [ 664.845888][T15765] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 664.853119][T15765] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 664.982574][ T30] audit: type=1400 audit(1751988203.895:2980): avc: denied { ioctl } for pid=15813 comm="syz.0.2626" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 665.231793][ T30] audit: type=1400 audit(1751988203.895:2981): avc: denied { set_context_mgr } for pid=15813 comm="syz.0.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 665.496414][T15824] binder: 15813:15824 unknown command 0 [ 665.502299][T15824] binder: 15813:15824 ioctl c0306201 2000000001c0 returned -22 [ 666.412658][ T5885] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 666.434176][ T5885] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fe:cd:af:d2:f4:70 [ 666.496356][ T5885] usb 6-1: USB disconnect, device number 29 [ 666.507183][ T5885] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 666.527400][T15839] bond2: entered promiscuous mode [ 666.539521][T15839] bond2: entered allmulticast mode [ 666.555571][T15839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 666.972128][ T5885] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 666.985326][ T5885] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 666.994942][ T5885] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 667.198592][T15860] fuse: Bad value for 'fd' [ 667.211001][T15860] syz.4.2639 (15860): attempted to duplicate a private mapping with mremap. This is not supported. [ 669.647866][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 669.836784][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 669.836802][ T30] audit: type=1400 audit(1751988208.745:2991): avc: denied { create } for pid=15873 comm="syz.0.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 669.961646][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 670.193376][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 670.310748][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.327022][ T10] usb 2-1: config 0 descriptor?? [ 670.358614][ T30] audit: type=1400 audit(1751988209.265:2992): avc: denied { read } for pid=15892 comm="syz.0.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 671.319090][ T10] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 671.337266][ T30] audit: type=1400 audit(1751988210.245:2993): avc: denied { setopt } for pid=15919 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 671.369668][ T30] audit: type=1400 audit(1751988210.265:2994): avc: denied { write } for pid=15919 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 671.382567][ T10] usb 2-1: USB disconnect, device number 112 [ 672.384716][T15928] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[15928] [ 672.395198][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 672.443405][ T30] audit: type=1400 audit(1751988211.355:2995): avc: denied { getopt } for pid=15930 comm="syz.1.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 672.473847][T15928] overlayfs: failed to resolve './file1': -2 [ 672.564400][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 672.732203][T15940] tipc: Enabled bearer , priority 10 [ 672.770062][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.781581][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.794655][ T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 672.803903][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.816571][ T10] usb 6-1: config 0 descriptor?? [ 672.912591][ T43] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 672.950711][ T30] audit: type=1400 audit(1751988211.855:2996): avc: denied { ioctl } for pid=15942 comm="syz.0.2660" path="socket:[55168]" dev="sockfs" ino=55168 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 672.979536][T15943] lo: entered promiscuous mode [ 672.991054][T15943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2660'. [ 673.013757][T15943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.036397][ T5940] lo speed is unknown, defaulting to 1000 [ 673.121764][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 673.128705][ T43] usb 2-1: config 204 has 1 interface, different from the descriptor's value: 31 [ 673.140834][ T43] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 673.150269][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.158950][ T43] usb 2-1: Product: syz [ 673.163395][ T43] usb 2-1: Manufacturer: syz [ 673.167995][ T43] usb 2-1: SerialNumber: syz [ 673.239022][ T10] corsair 0003:1B1C:1B02.002C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 673.452889][ T10] corsair 0003:1B1C:1B02.002C: Read invalid backlight brightness: f7. [ 673.995800][ T10] usb 6-1: USB disconnect, device number 30 [ 674.026163][ T43] airspy 2-1:204.0: usb_control_msg() failed -71 request 09 [ 674.036091][ T43] airspy 2-1:204.0: Could not detect board [ 674.042506][ T43] airspy 2-1:204.0: probe with driver airspy failed with error -71 [ 674.054793][ T43] usb 2-1: USB disconnect, device number 113 [ 674.391722][ T5939] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 674.451826][T15975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.461470][T15975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.486664][ T30] audit: type=1400 audit(1751988213.356:2997): avc: denied { create } for pid=15968 comm="syz.0.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 674.769125][ T30] audit: type=1400 audit(1751988213.356:2998): avc: denied { ioctl } for pid=15968 comm="syz.0.2666" path="socket:[55760]" dev="sockfs" ino=55760 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 674.790907][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 674.801900][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.813700][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.824477][ T5939] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 674.833640][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.844764][ T5939] usb 4-1: config 0 descriptor?? [ 674.851302][ T5939] hub 4-1:0.0: USB hub found [ 675.061134][ T5939] hub 4-1:0.0: 1 port detected [ 675.251282][ T43] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 675.801252][ T43] usb 6-1: device descriptor read/64, error -71 [ 676.005833][T15993] netlink: 'syz.4.2671': attribute type 1 has an invalid length. [ 676.081261][ T43] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 676.097268][ T30] audit: type=1400 audit(1751988215.006:2999): avc: denied { name_bind } for pid=15958 comm="syz.3.2663" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 676.121489][ T5939] hub 4-1:0.0: activate --> -90 [ 676.221322][ T43] usb 6-1: device descriptor read/64, error -71 [ 676.332960][ T43] usb usb6-port1: attempt power cycle [ 676.529609][ T10] usb 4-1: USB disconnect, device number 102 [ 676.671252][ T43] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 676.691787][ T43] usb 6-1: device descriptor read/8, error -71 [ 676.751237][ T5939] usb 4-1-port1: config error [ 676.788163][ T30] audit: type=1400 audit(1751988215.696:3000): avc: denied { read } for pid=15997 comm="syz.4.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 676.941264][ T43] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 676.961737][ T43] usb 6-1: device descriptor read/8, error -71 [ 677.065321][ T30] audit: type=1400 audit(1751988215.976:3001): avc: denied { ioctl } for pid=16000 comm="syz.3.2674" path="socket:[55793]" dev="sockfs" ino=55793 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 677.092019][ T43] usb usb6-port1: unable to enumerate USB device [ 677.562468][ T30] audit: type=1400 audit(1751988216.376:3002): avc: denied { mount } for pid=16004 comm="syz.0.2676" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 677.893603][ T30] audit: type=1326 audit(1751988216.806:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.1.2677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f49b8e929 code=0x0 [ 677.997403][ T30] audit: type=1400 audit(1751988216.906:3004): avc: denied { mounton } for pid=16008 comm="syz.1.2677" path="/proc/1958/task/1959/net/netfilter" dev="proc" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 678.030033][ T30] audit: type=1400 audit(1751988216.906:3005): avc: denied { mount } for pid=16008 comm="syz.1.2677" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 678.406750][ T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 678.582851][ T30] audit: type=1400 audit(1751988217.036:3006): avc: denied { block_suspend } for pid=16018 comm="syz.5.2679" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.604789][ T30] audit: type=1400 audit(1751988217.196:3007): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 678.611146][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 678.625601][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'. [ 678.652696][ T24] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 678.664765][ T24] usb 4-1: config 1 has no interface number 0 [ 678.670944][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 678.686645][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 678.697199][ T24] usb 4-1: config 1 interface 105 has no altsetting 0 [ 678.708652][ T24] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 678.718012][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.728523][ T24] usb 4-1: Product: syz [ 678.736622][ T24] usb 4-1: Manufacturer: syz [ 678.742964][ T24] usb 4-1: SerialNumber: syz [ 678.889902][T16017] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 678.898660][T16017] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 679.045681][T16030] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 679.052828][T16030] overlayfs: failed to set xattr on upper [ 679.058616][T16030] overlayfs: ...falling back to redirect_dir=nofollow. [ 679.065507][T16030] overlayfs: ...falling back to index=off. [ 679.071396][T16030] overlayfs: ...falling back to uuid=null. [ 679.077239][T16030] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 679.424636][T16027] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2683'. [ 679.602731][ T30] audit: type=1400 audit(1751988218.466:3008): avc: denied { bind } for pid=16033 comm="syz.1.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 679.623351][T16017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.842471][T16036] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 679.852548][T16036] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 680.244817][T16045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.276806][T16047] netlink: 'syz.1.2690': attribute type 4 has an invalid length. [ 680.590121][T16049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.621290][T16049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.716164][T16055] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 680.931286][ T5939] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 681.048838][ T24] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 681.366273][ T24] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 66:7d:e4:b7:7f:7e [ 681.539369][ T24] usb 4-1: USB disconnect, device number 103 [ 681.794995][ T24] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 681.903109][ T24] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 681.921701][ T24] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 682.024317][ T24] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 682.035497][ T5939] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 682.048294][ T5939] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.062516][ T5939] usb 2-1: config 1 interface 0 has no altsetting 0 [ 682.477600][T16078] binder: 16074:16078 unknown command 0 [ 682.483238][T16078] binder: 16074:16078 ioctl c0306201 2000000001c0 returned -22 [ 682.947769][ T5939] usb 2-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.40 [ 682.993827][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.076781][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 683.080353][ T30] audit: type=1400 audit(1751988221.976:3010): avc: denied { bind } for pid=16080 comm="syz.0.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 683.119222][ T5939] usb 2-1: Product: ш [ 683.140819][ T5939] usb 2-1: Manufacturer: 㬊漟冮䠩㷗쇹㋨櫣ꉚ釺圷隹渣洟ᩌ≚䟞귴טּâšâŸ…͊겶䢧ꖾ⼦㶽訪噑컰겻飡딬ëŠè­ªâ¶£ì‡ [ 683.325779][ T30] audit: type=1400 audit(1751988221.986:3011): avc: denied { name_bind } for pid=16080 comm="syz.0.2699" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 683.367254][ T5939] usb 2-1: SerialNumber: à¡  [ 683.399481][T16053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 683.409555][ T30] audit: type=1400 audit(1751988221.986:3012): avc: denied { node_bind } for pid=16080 comm="syz.0.2699" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 683.433925][ T30] audit: type=1400 audit(1751988221.986:3013): avc: denied { write } for pid=16084 comm="syz.3.2700" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 683.457947][ T30] audit: type=1400 audit(1751988221.996:3014): avc: denied { open } for pid=16084 comm="syz.3.2700" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 683.757914][ T5939] usbhid 2-1:1.0: can't add hid device: -71 [ 683.764097][ T5939] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 683.773742][ T30] audit: type=1400 audit(1751988222.026:3015): avc: denied { ioctl } for pid=16082 comm="syz.4.2701" path="socket:[56530]" dev="sockfs" ino=56530 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 683.806019][ T5939] usb 2-1: USB disconnect, device number 114 [ 683.931831][ T30] audit: type=1400 audit(1751988222.232:3016): avc: denied { create } for pid=16084 comm="syz.3.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 683.960691][ T30] audit: type=1400 audit(1751988222.232:3017): avc: denied { bind } for pid=16084 comm="syz.3.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 683.961172][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 683.992568][ T30] audit: type=1400 audit(1751988222.242:3018): avc: denied { ioctl } for pid=16082 comm="syz.4.2701" path="socket:[56538]" dev="sockfs" ino=56538 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 684.018125][ T30] audit: type=1400 audit(1751988222.322:3019): avc: denied { ioctl } for pid=16084 comm="syz.3.2700" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 684.042728][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.118382][T16101] libceph: resolve '0.' (ret=-3): failed [ 684.191155][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 684.198672][T16101] CUSE: unknown device info "ÿ" [ 684.203873][T16101] CUSE: zero length info key specified [ 684.209803][ T24] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 684.218148][ T24] usb 6-1: config 1 has no interface number 0 [ 684.233718][ T24] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 684.243831][ T24] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 684.405881][ T24] usb 6-1: config 1 interface 105 has no altsetting 0 [ 684.542135][ T24] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 684.551427][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.559442][ T24] usb 6-1: Product: syz [ 684.564894][ T24] usb 6-1: Manufacturer: syz [ 685.026013][ T24] usb 6-1: SerialNumber: syz [ 685.049723][T16095] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 685.057343][T16095] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 685.339458][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 685.364046][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.370377][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.507151][T16095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.588974][T16119] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 685.597026][T16119] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 686.563741][ T24] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 686.591893][ T5939] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 686.690106][ T24] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9e:ee:80:4f:a4:e8 [ 686.706907][ T24] usb 6-1: USB disconnect, device number 35 [ 686.714704][ T24] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 686.952373][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 686.976951][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.004155][ T24] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 687.013784][ T24] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 687.014809][ T5939] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 687.026308][ T24] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 687.062506][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.092129][ T5939] usb 2-1: config 0 descriptor?? [ 687.880001][ T5939] usbhid 2-1:0.0: can't add hid device: -22 [ 687.890514][ T5939] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 688.250817][ T5939] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 689.250814][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 689.259673][ T5939] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 689.271392][ T5939] usb 6-1: config 1 has no interface number 0 [ 689.277561][ T5939] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 689.296920][ T5939] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 689.308923][ T5939] usb 6-1: config 1 interface 105 has no altsetting 0 [ 689.321198][ T5939] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 689.330990][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.339026][ T5939] usb 6-1: Product: syz [ 689.353760][ T5939] usb 6-1: Manufacturer: syz [ 689.358396][ T5939] usb 6-1: SerialNumber: syz [ 689.373607][T16168] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 689.450975][T16168] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 689.893200][T16168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.154692][T16199] binder: 16195:16199 unknown command 0 [ 690.160354][T16199] binder: 16195:16199 ioctl c0306201 2000000001c0 returned -22 [ 690.934397][T16197] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 690.943715][T16197] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 691.013295][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 691.013312][ T30] audit: type=1400 audit(1751988229.932:3029): avc: denied { bind } for pid=16201 comm="syz.0.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 691.336856][ T10] usb 2-1: USB disconnect, device number 115 [ 691.371441][T16207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2736'. [ 691.680866][ T5957] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 691.789644][ T30] audit: type=1400 audit(1751988230.702:3030): avc: denied { read } for pid=16216 comm="syz.1.2740" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 692.155919][ T30] audit: type=1400 audit(1751988230.742:3031): avc: denied { append } for pid=16216 comm="syz.1.2740" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 692.170448][T16219] loop6: detected capacity change from 0 to 2560 [ 692.188000][T16219] buffer_io_error: 4 callbacks suppressed [ 692.188016][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.204227][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.212283][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.220379][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.230978][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.240629][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.265154][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.273387][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 692.278585][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.439481][ T5939] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 692.449302][ T5957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 692.461051][ T5957] usb 4-1: too many configurations: 122, using maximum allowed: 8 [ 692.480205][ T5939] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8e:1d:2a:31:65:40 [ 692.496530][ T5957] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 692.508267][ T5957] usb 4-1: can't read configurations, error -61 [ 692.509361][T16219] ldm_validate_partition_table(): Disk read failed. [ 692.541596][ T30] audit: type=1400 audit(1751988231.442:3032): avc: denied { create } for pid=16221 comm="syz.0.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 692.590501][ T5939] usb 6-1: USB disconnect, device number 36 [ 692.598123][ T5939] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 692.601006][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.629886][T16219] Buffer I/O error on dev loop6, logical block 0, async page read [ 692.643003][T16219] Dev loop6: unable to read RDB block 0 [ 692.660431][T16219] loop6: unable to read partition table [ 692.662621][ T5939] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 692.670826][ T5957] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 692.680208][ T5939] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 692.701148][T16219] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 692.716276][ T30] audit: type=1404 audit(1751988231.622:3033): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 692.732322][ T30] audit: type=1400 audit(1751988231.642:3034): avc: denied { bpf } for pid=16229 comm="syz.0.2743" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 692.753293][ T5939] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 692.791053][ T30] audit: type=1400 audit(1751988231.642:3035): avc: denied { prog_run } for pid=16229 comm="syz.0.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 692.814632][ T30] audit: type=1400 audit(1751988231.692:3036): avc: denied { ioctl } for pid=16206 comm="syz.3.2736" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 692.880180][ T30] audit: type=1404 audit(1751988231.692:3037): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 692.896365][ T30] audit: type=1400 audit(1751988231.692:3038): avc: denied { map_create } for pid=16229 comm="syz.0.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.906133][T16237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.924972][T16237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.983282][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2746'. [ 693.050814][ T5957] usb 4-1: device not accepting address 105, error -71 [ 693.058017][ T5957] usb usb4-port1: attempt power cycle [ 693.890596][T16267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.940647][T16269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.966746][T16269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.993170][T16271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.038132][T16271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.530868][ T5939] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 694.852201][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 694.879373][ T5939] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 694.897393][ T5939] usb 6-1: config 1 has no interface number 0 [ 694.910810][ T5939] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 694.947975][ T5939] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 694.968177][ T5939] usb 6-1: config 1 interface 105 has no altsetting 0 [ 695.053715][ T5939] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 695.069746][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.080055][ T5939] usb 6-1: Product: syz [ 695.087661][ T5939] usb 6-1: Manufacturer: syz [ 695.095085][T16294] netlink: 456 bytes leftover after parsing attributes in process `syz.1.2763'. [ 695.109483][ T5939] usb 6-1: SerialNumber: syz [ 695.166100][T16278] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 695.183806][T16278] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 695.450965][T11420] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 695.640668][T16278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.828033][T16310] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 695.836964][T16310] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 696.133266][ T5939] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 1 [ 696.163423][ T5939] aqc111 6-1:1.105: probe with driver aqc111 failed with error -61 [ 696.603652][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 696.603668][ T30] audit: type=1400 audit(1751988235.522:3097): avc: denied { create } for pid=16301 comm="syz.4.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 696.654174][T16309] pim6reg: entered allmulticast mode [ 696.710591][T16309] pim6reg: left allmulticast mode [ 696.874056][ T30] audit: type=1400 audit(1751988235.792:3098): avc: denied { shutdown } for pid=16319 comm="syz.0.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 696.917747][ T30] audit: type=1400 audit(1751988235.812:3099): avc: denied { getopt } for pid=16319 comm="syz.0.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 696.955199][ T30] audit: type=1400 audit(1751988235.812:3100): avc: denied { connect } for pid=16319 comm="syz.0.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.048550][T11420] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 697.310804][ T30] audit: type=1400 audit(1751988235.812:3101): avc: denied { name_connect } for pid=16319 comm="syz.0.2770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 697.337139][ T30] audit: type=1400 audit(1751988235.812:3102): avc: denied { setopt } for pid=16319 comm="syz.0.2770" lport=57950 faddr=::ffff:172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.384568][ T5939] usb 6-1: USB disconnect, device number 37 [ 697.413691][ T30] audit: type=1400 audit(1751988236.332:3103): avc: denied { write } for pid=16326 comm="syz.5.2773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 697.466524][ T30] audit: type=1400 audit(1751988236.332:3104): avc: denied { create } for pid=16326 comm="syz.5.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 697.534087][T16330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2772'. [ 697.544108][ T30] audit: type=1400 audit(1751988236.422:3105): avc: denied { create } for pid=16331 comm="syz.1.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 697.624276][ T30] audit: type=1400 audit(1751988236.542:3106): avc: denied { create } for pid=16338 comm="syz.4.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 697.694400][T16343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2777'. [ 697.704018][T16343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2777'. [ 697.939003][T16356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.997500][T16358] dummy0: entered promiscuous mode [ 698.095098][ T5957] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 698.825263][ T5957] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 698.839250][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.852439][ T5957] usb 6-1: config 0 descriptor?? [ 699.151367][T16366] syz.3.2784: attempt to access beyond end of device [ 699.151367][T16366] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 699.549489][T16373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.903675][T16382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.163239][ T5957] usb 6-1: Cannot set autoneg [ 700.169766][ T5957] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 700.174478][T16373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.235924][ T5957] usb 6-1: USB disconnect, device number 38 [ 700.338944][T11420] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 700.433214][T16392] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2791'. [ 701.103522][T11420] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 701.114246][T11420] Bluetooth: hci3: Injecting HCI hardware error event [ 701.124092][T11420] Bluetooth: hci3: hardware error 0x00 [ 701.320786][T16409] binder: 16403:16409 unknown command 0 [ 701.326400][T16409] binder: 16403:16409 ioctl c0306201 2000000001c0 returned -22 [ 701.437158][T16411] binder: 16406:16411 unknown command 0 [ 701.443176][T16411] binder: 16406:16411 ioctl c0306201 2000000001c0 returned -22 [ 701.855271][ T5939] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 702.134210][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 702.144090][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 702.144107][ T30] audit: type=1400 audit(1751988241.062:3136): avc: denied { create } for pid=16414 comm="syz.1.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 702.145109][ T5939] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 702.150225][ T30] audit: type=1400 audit(1751988241.062:3137): avc: denied { write } for pid=16414 comm="syz.1.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 702.170142][ T5939] usb 6-1: config 1 has no interface number 0 [ 702.409300][ T5939] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 702.447223][ T5939] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 702.487019][ T5939] usb 6-1: config 1 interface 105 has no altsetting 0 [ 702.516900][ T5939] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 702.526862][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.563590][ T5939] usb 6-1: Product: syz [ 702.574383][ T30] audit: type=1400 audit(1751988241.492:3138): avc: denied { read } for pid=16427 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 702.578837][ T5939] usb 6-1: Manufacturer: syz [ 702.641632][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 702.653300][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 702.656440][ T5939] usb 6-1: SerialNumber: syz [ 702.756593][ T30] audit: type=1400 audit(1751988241.532:3139): avc: denied { open } for pid=16427 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 702.781391][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 702.788572][ T30] audit: type=1400 audit(1751988241.552:3140): avc: denied { ioctl } for pid=16427 comm="syz-executor" path="socket:[57141]" dev="sockfs" ino=57141 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 702.821664][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 702.831046][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 702.831182][ T5828] bond0: (slave syz_tun): Releasing backup interface [ 702.858007][T16405] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 702.882986][T16405] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 702.899311][ T30] audit: type=1400 audit(1751988241.812:3141): avc: denied { mounton } for pid=16427 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 703.181452][T11420] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 703.239272][T16427] lo speed is unknown, defaulting to 1000 [ 703.331914][T16427] lo speed is unknown, defaulting to 1000 [ 703.346177][T16405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.426087][T16443] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 703.434115][T16443] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 703.782799][T16445] tmpfs: Bad value for 'mpol' [ 703.787049][ T30] audit: type=1400 audit(1751988242.702:3142): avc: denied { mounton } for pid=16444 comm="syz.3.2802" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 704.282046][T16427] chnl_net:caif_netlink_parms(): no params data found [ 704.381651][ T5939] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 704.396258][T16461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.422716][T16461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.443202][ T5939] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 12:24:23:b7:1c:f6 [ 704.480072][ T5939] usb 6-1: USB disconnect, device number 39 [ 704.498558][ T30] audit: type=1400 audit(1751988243.402:3143): avc: denied { map } for pid=16460 comm="syz.0.2804" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 704.498962][ T5939] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 704.591624][ T30] audit: type=1400 audit(1751988243.412:3144): avc: denied { execute } for pid=16460 comm="syz.0.2804" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 704.631063][T16427] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.651829][T16427] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.651826][ T5939] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 704.651912][ T5939] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 704.690067][T16427] bridge_slave_0: entered allmulticast mode [ 704.704934][T16427] bridge_slave_0: entered promiscuous mode [ 704.722150][ T5939] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 704.723799][T16427] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.755749][T16427] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.773562][T16427] bridge_slave_1: entered allmulticast mode [ 704.790247][T16427] bridge_slave_1: entered promiscuous mode [ 704.852281][T16427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.881956][T16427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.941227][T11420] Bluetooth: hci2: command tx timeout [ 705.124594][ T30] audit: type=1400 audit(1751988244.032:3145): avc: denied { create } for pid=16478 comm="syz.5.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 705.154018][T16427] team0: Port device team_slave_0 added [ 705.247407][T16427] team0: Port device team_slave_1 added [ 705.379503][T16488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2809'. [ 705.394848][T16427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.409791][T16427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.461271][T16427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.482647][T16427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.489619][T16427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.578033][T16427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.693257][T16495] binder: 16485:16495 unknown command 0 [ 705.698907][T16495] binder: 16485:16495 ioctl c0306201 2000000001c0 returned -22 [ 706.144249][T16427] hsr_slave_0: entered promiscuous mode [ 706.155169][T16427] hsr_slave_1: entered promiscuous mode [ 706.288767][T16500] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 706.296150][T16500] overlayfs: failed to set xattr on upper [ 706.302076][T16500] overlayfs: ...falling back to redirect_dir=nofollow. [ 706.308936][T16500] overlayfs: ...falling back to index=off. [ 706.314849][T16500] overlayfs: ...falling back to uuid=null. [ 706.320660][T16500] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 706.758546][T16427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.780020][T16427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.976484][T16427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.010835][T16427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.024373][T11420] Bluetooth: hci2: command tx timeout [ 707.111630][ T5939] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 707.224138][T16427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.243893][T16427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.270769][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 707.282321][ T5939] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 707.290529][ T5939] usb 2-1: config 1 has no interface number 0 [ 707.323388][ T5939] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 707.343010][ T5939] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 707.370803][ T5939] usb 2-1: config 1 interface 105 has no altsetting 0 [ 707.416064][ T5939] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 707.417614][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 707.417627][ T30] audit: type=1400 audit(1751988246.332:3150): avc: denied { name_connect } for pid=16509 comm="syz.0.2815" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 707.446246][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.472531][T16510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.487329][ T5939] usb 2-1: Product: syz [ 707.501922][T16427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.515187][T16510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.523176][ T5939] usb 2-1: Manufacturer: syz [ 707.527782][ T5939] usb 2-1: SerialNumber: syz [ 707.543709][T16427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.562047][T16508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 707.574316][T16508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 707.858744][T16427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 707.874262][T16427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 707.911788][T16427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 707.922559][T16427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 708.031713][T16508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.266643][ T5892] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 708.286222][T16519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 708.296751][T16519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 708.431399][T16427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.505519][T16427] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.536475][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.543655][ T9336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.549655][T16525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.559477][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 708.584104][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.591305][ T9336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.601383][ T5892] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 708.609529][ T30] audit: type=1400 audit(1751988247.512:3151): avc: denied { egress } for pid=5957 comm="kworker/1:7" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 708.609576][ T30] audit: type=1400 audit(1751988247.522:3152): avc: denied { sendto } for pid=5957 comm="kworker/1:7" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 708.649224][T16427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 708.661006][T16525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.672638][T16427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.738796][ T30] audit: type=1400 audit(1751988247.652:3153): avc: denied { sys_module } for pid=16427 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 708.745187][ T5892] usb 6-1: config 0 has no interface number 0 [ 708.803307][ T5892] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 708.816105][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.825496][ T5892] usb 6-1: Product: syz [ 708.829742][ T5892] usb 6-1: Manufacturer: syz [ 708.834507][ T5892] usb 6-1: SerialNumber: syz [ 708.841615][ T5892] usb 6-1: config 0 descriptor?? [ 708.849138][ T5892] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 708.919014][T16427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.942704][ T5912] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 709.063025][ T5892] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 709.086341][ T5892] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 709.102445][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 709.107774][T11420] Bluetooth: hci2: command tx timeout [ 709.114858][ T5912] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 709.124334][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.142966][ T5939] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 709.156453][ T5912] usb 4-1: config 0 descriptor?? [ 709.178217][ T5912] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 709.186241][ T5939] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f2:96:2c:d3:09:48 [ 709.202764][ T5939] usb 2-1: USB disconnect, device number 116 [ 709.210671][ T5939] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 709.264367][T16427] veth0_vlan: entered promiscuous mode [ 709.265765][ T5939] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 709.287063][ T5939] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 709.296646][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 709.302784][T16427] veth1_vlan: entered promiscuous mode [ 709.311802][ T5939] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 709.357301][T16427] veth0_macvtap: entered promiscuous mode [ 709.368178][T16427] veth1_macvtap: entered promiscuous mode [ 709.389496][T16427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.408020][T16427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.429337][T16427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.438653][T16427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.530206][T16427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.539210][T16427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.611683][ T30] audit: type=1400 audit(1751988248.522:3154): avc: denied { view } for pid=16526 comm="syz.3.2819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 710.199040][ T9336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.295864][ T9336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.325913][ T30] audit: type=1400 audit(1751988249.242:3155): avc: denied { setopt } for pid=16553 comm="syz.1.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 710.473942][ T30] audit: type=1400 audit(1751988249.312:3156): avc: denied { bind } for pid=16553 comm="syz.1.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 710.643714][ T30] audit: type=1400 audit(1751988249.342:3157): avc: denied { ioctl } for pid=16553 comm="syz.1.2822" path="socket:[58623]" dev="sockfs" ino=58623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 710.871036][ T5940] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 710.908867][T16556] bond2: entered promiscuous mode [ 710.910988][ T30] audit: type=1400 audit(1751988249.432:3158): avc: denied { setopt } for pid=16553 comm="syz.1.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 710.921736][T16556] bond2: entered allmulticast mode [ 710.972462][T16556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 710.982451][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 710.990160][ T5939] usb 6-1: USB disconnect, device number 40 [ 710.999616][ T5939] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 711.014668][ T5939] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 711.029188][ T5939] quatech2 6-1:0.51: device disconnected [ 711.056161][ T30] audit: type=1400 audit(1751988249.972:3159): avc: denied { mounton } for pid=16526 comm="syz.3.2819" path="/552/bus" dev="tmpfs" ino=3009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 711.067239][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.100795][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 711.123679][ T5940] usb 2-1: no configurations [ 711.132795][ T5940] usb 2-1: can't read configurations, error -22 [ 711.147392][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.181370][T11420] Bluetooth: hci2: command tx timeout [ 711.287747][ T5912] gspca_sonixj: reg_r err -32 [ 711.297371][ T5912] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 711.301835][ T5940] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 711.410085][T16621] fuse: Unknown parameter '' [ 711.506629][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 711.524769][ T5940] usb 2-1: no configurations [ 711.529418][ T5940] usb 2-1: can't read configurations, error -22 [ 711.543233][ T5940] usb usb2-port1: attempt power cycle [ 711.595798][T16637] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2826'. [ 711.624328][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'. [ 711.636073][T16637] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2826'. [ 711.880922][ T5940] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 711.904177][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 711.913424][ T5940] usb 2-1: no configurations [ 711.918047][ T5940] usb 2-1: can't read configurations, error -22 [ 712.076180][ T5940] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 712.116404][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 712.128492][ T5940] usb 2-1: no configurations [ 712.137229][ T5940] usb 2-1: can't read configurations, error -22 [ 712.155914][ T5940] usb usb2-port1: unable to enumerate USB device [ 712.376281][ T5940] usb 4-1: USB disconnect, device number 107 [ 712.575664][T16657] netlink: 'syz.3.2829': attribute type 46 has an invalid length. [ 712.741336][T16661] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 712.774656][T16661] 8021q: adding VLAN 0 to HW filter on device bond3 [ 712.807719][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 712.807738][ T30] audit: type=1400 audit(1751988251.722:3183): avc: denied { setattr } for pid=16660 comm="syz.3.2831" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 712.836585][ T30] audit: type=1400 audit(1751988251.742:3184): avc: denied { create } for pid=16660 comm="syz.3.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 712.857403][ T30] audit: type=1400 audit(1751988251.742:3185): avc: denied { write } for pid=16660 comm="syz.3.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 712.878374][ T30] audit: type=1400 audit(1751988251.742:3186): avc: denied { append } for pid=16660 comm="syz.3.2831" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 712.921016][ T30] audit: type=1400 audit(1751988251.832:3187): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 713.080926][ T30] audit: type=1400 audit(1751988252.002:3188): avc: denied { write } for pid=16700 comm="syz.0.2834" name="unix" dev="proc" ino=4026532834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 713.332791][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2832'. [ 713.342194][T16706] nbd: socks must be embedded in a SOCK_ITEM attr [ 713.348702][T16706] block nbd0: shutting down sockets [ 713.547876][ T30] audit: type=1400 audit(1751988252.172:3189): avc: denied { name_bind } for pid=16696 comm="syz.5.2832" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 713.569766][ T30] audit: type=1400 audit(1751988252.172:3190): avc: denied { node_bind } for pid=16696 comm="syz.5.2832" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 713.591559][ T30] audit: type=1400 audit(1751988252.192:3191): avc: denied { setopt } for pid=16696 comm="syz.5.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 713.596804][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 714.045110][T16720] loop8: detected capacity change from 0 to 8 [ 714.050599][ T30] audit: type=1400 audit(1751988252.712:3192): avc: denied { create } for pid=16705 comm="syz.3.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 714.170673][T16723] random: crng reseeded on system resumption [ 714.276522][T16715] lo speed is unknown, defaulting to 1000 [ 714.283348][T16715] lo speed is unknown, defaulting to 1000 [ 714.542496][T16753] can0: slcan on ptm0. [ 715.611040][T16751] can0 (unregistered): slcan off ptm0. [ 715.891756][ T5939] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 716.003954][T16798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=16798 comm=syz.5.2849 [ 716.046103][T16798] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 716.067111][ T5939] usb 4-1: device descriptor read/64, error -71 [ 716.332553][ T5912] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 716.571154][ T5939] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 716.734433][ T5912] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 716.751062][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.769392][ T5912] usb 2-1: Product: syz [ 716.775333][ T5912] usb 2-1: Manufacturer: syz [ 716.780803][ T5939] usb 4-1: device descriptor read/64, error -71 [ 716.790134][ T5912] usb 2-1: SerialNumber: syz [ 716.811818][ T5912] usb 2-1: config 0 descriptor?? [ 716.823218][ T5912] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 121 [ 716.891152][ T5939] usb usb4-port1: attempt power cycle [ 717.131848][T16813] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 717.300973][ T5939] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 717.507576][ T5939] usb 4-1: device descriptor read/8, error -71 [ 718.860831][ T5892] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 719.051423][ T5939] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 719.111058][ T5912] (null): failure reading functionality [ 719.301580][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 719.301603][ T30] audit: type=1400 audit(1751988258.092:3279): avc: denied { map } for pid=16821 comm="syz.0.2855" path="socket:[58962]" dev="sockfs" ino=58962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 719.331816][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.472007][ T5912] i2c i2c-1: failure reading functionality [ 719.480838][ T5912] i2c i2c-1: connected i2c-tiny-usb device [ 719.572951][ T5912] usb 2-1: USB disconnect, device number 121 [ 719.610928][ T5892] usb 6-1: device descriptor read/64, error -71 [ 719.670002][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2857'. [ 719.682563][ T5939] usb 4-1: device not accepting address 111, error -71 [ 719.700445][ T5939] usb usb4-port1: unable to enumerate USB device [ 719.744609][T16853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.930761][ T5892] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 720.171310][ T30] audit: type=1400 audit(1751988259.062:3280): avc: denied { bind } for pid=16836 comm="syz.3.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 720.435752][ T30] audit: type=1400 audit(1751988259.142:3281): avc: denied { create } for pid=16838 comm="syz.0.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 720.760882][ T30] audit: type=1400 audit(1751988259.172:3282): avc: denied { write } for pid=16838 comm="syz.0.2858" path="socket:[59727]" dev="sockfs" ino=59727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 720.787663][ T30] audit: type=1400 audit(1751988259.332:3283): avc: denied { create } for pid=16838 comm="syz.0.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 720.790934][ T5939] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 721.038447][ T30] audit: type=1400 audit(1751988259.952:3284): avc: denied { read write } for pid=16881 comm="syz.1.2862" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 721.064417][ T30] audit: type=1400 audit(1751988259.952:3285): avc: denied { open } for pid=16881 comm="syz.1.2862" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 721.185923][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.201400][ T5939] usb 4-1: config 0 has no interfaces? [ 721.235488][ T5939] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 721.252764][T16889] syz.4.2864: attempt to access beyond end of device [ 721.252764][T16889] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 721.267703][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.281445][ T5939] usb 4-1: config 0 descriptor?? [ 721.402000][T16889] gfs2: error -5 reading superblock [ 721.421747][ T30] audit: type=1400 audit(1751988260.312:3286): avc: denied { write } for pid=16881 comm="syz.1.2862" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 721.503113][ T30] audit: type=1400 audit(1751988260.312:3287): avc: denied { write } for pid=16881 comm="syz.1.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 721.699823][ T30] audit: type=1400 audit(1751988260.612:3288): avc: denied { create } for pid=16901 comm="syz.1.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 722.925620][T16922] fuse: Unknown parameter '0x00000000000000030x0000000000000005' [ 722.937825][ T5939] usb 4-1: string descriptor 0 read error: -71 [ 723.007284][ T5939] usb 4-1: USB disconnect, device number 112 [ 723.701799][T16943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.748780][T16943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.805467][T16943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.246132][T16954] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 724.258871][T16955] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 725.122664][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.133397][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.141716][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.152084][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.159620][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.208414][T16961] lo speed is unknown, defaulting to 1000 [ 725.216276][T16961] lo speed is unknown, defaulting to 1000 [ 725.341258][ T5957] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 725.375401][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 725.375418][ T30] audit: type=1400 audit(1751988264.292:3292): avc: denied { unmount } for pid=16427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 725.508234][ T5957] usb 4-1: device descriptor read/64, error -71 [ 725.617366][T17085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.621861][T16961] chnl_net:caif_netlink_parms(): no params data found [ 725.627307][T17085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.656101][T17085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.045101][T16961] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.055426][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.061175][ T5957] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 726.063275][T16961] bridge_slave_0: entered allmulticast mode [ 726.070180][ T43] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 726.078762][T16961] bridge_slave_0: entered promiscuous mode [ 726.092091][T16961] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.099323][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.106598][T16961] bridge_slave_1: entered allmulticast mode [ 726.114555][T16961] bridge_slave_1: entered promiscuous mode [ 726.148403][T16961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.160238][T16961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.199046][T16961] team0: Port device team_slave_0 added [ 726.207695][T16961] team0: Port device team_slave_1 added [ 726.213742][ T5957] usb 4-1: device descriptor read/64, error -71 [ 726.241992][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 726.253936][T16961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.261589][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.288749][ T43] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 726.297551][ T43] usb 6-1: config 1 has no interface number 0 [ 726.306533][T16961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.317308][ T43] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 726.329064][T16961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.336312][ T5957] usb usb4-port1: attempt power cycle [ 726.342273][ T43] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 726.352150][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.353495][ T43] usb 6-1: config 1 interface 105 has no altsetting 0 [ 726.386021][T16961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.399140][ T43] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 726.408862][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.417609][ T43] usb 6-1: Product: syz [ 726.423430][ T43] usb 6-1: Manufacturer: syz [ 726.428052][ T43] usb 6-1: SerialNumber: syz [ 726.438870][T17077] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 726.447382][T17077] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 726.465579][T16961] hsr_slave_0: entered promiscuous mode [ 726.472649][T16961] hsr_slave_1: entered promiscuous mode [ 726.478608][T16961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.487332][T16961] Cannot create hsr debugfs directory [ 726.634049][ T9338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.646405][ T9338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.700901][ T5957] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 726.722904][ T5957] usb 4-1: device descriptor read/8, error -71 [ 726.827376][ T30] audit: type=1400 audit(1751988265.742:3293): avc: denied { sqpoll } for pid=17309 comm="syz.0.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 726.829160][ T9338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.892591][ T9338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.920870][T17077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.930830][ T30] audit: type=1400 audit(1751988265.792:3294): avc: denied { create } for pid=17309 comm="syz.0.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 727.015877][ T5957] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 727.241264][T17313] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 727.249595][T17313] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 727.322112][T11420] Bluetooth: hci1: command tx timeout [ 727.615716][ T9338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.630611][ T9338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.663754][ T30] audit: type=1400 audit(1751988266.582:3295): avc: denied { ioctl } for pid=17322 comm="syz.0.2888" path="socket:[60033]" dev="sockfs" ino=60033 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 727.673953][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'. [ 727.699456][T17323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2888'. [ 727.721932][ T9338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.750594][ T9338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.781093][ T5957] usb 4-1: device not accepting address 116, error -71 [ 727.793729][ T5957] usb usb4-port1: unable to enumerate USB device [ 727.820600][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 727.870856][ T30] audit: type=1400 audit(1751988266.782:3296): avc: denied { read write } for pid=17326 comm="syz.0.2889" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 727.907525][ T30] audit: type=1400 audit(1751988266.782:3297): avc: denied { open } for pid=17326 comm="syz.0.2889" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 728.081947][ T9338] xfrm0 (unregistering): left allmulticast mode [ 728.127612][ T9338] gretap0 (unregistering): left promiscuous mode [ 728.164212][ T43] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 728.210643][ T9338] team0: Port device geneve0 removed [ 728.447023][ T9338] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 728.474147][ T9338] bond0 (unregistering): Released all slaves [ 728.526134][T17350] netlink: 'syz.3.2890': attribute type 4 has an invalid length. [ 728.539260][ T30] audit: type=1400 audit(1751988267.452:3298): avc: denied { read } for pid=17351 comm="syz.0.2891" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 728.784003][ T30] audit: type=1400 audit(1751988267.452:3299): avc: denied { open } for pid=17351 comm="syz.0.2891" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 728.823110][T17357] netlink: 'syz.3.2890': attribute type 4 has an invalid length. [ 728.941612][ T9338] bond1 (unregistering): Released all slaves [ 728.980896][ T30] audit: type=1400 audit(1751988267.882:3300): avc: denied { bind } for pid=17364 comm="syz.5.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 729.004134][ T30] audit: type=1400 audit(1751988267.882:3301): avc: denied { name_bind } for pid=17364 comm="syz.5.2893" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 729.142373][T17369] 9pnet_virtio: no channels available for device syz [ 729.254520][T17370] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 729.266098][T17370] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 729.458446][ T9338] bond2 (unregistering): Released all slaves [ 729.501443][T11420] Bluetooth: hci1: command tx timeout [ 729.554517][ T43] aqc111 6-1:1.105 eth8: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ca:06:7b:da:cb:8e [ 729.585836][ T5957] lo speed is unknown, defaulting to 1000 [ 729.595887][ T5957] syz2: Port: 1 Link ACTIVE [ 729.629565][ T43] usb 6-1: USB disconnect, device number 43 [ 729.649254][ T43] aqc111 6-1:1.105 eth8: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 729.702234][ T43] aqc111 6-1:1.105 eth8 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 729.714866][ T43] aqc111 6-1:1.105 eth8 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 729.728694][ T43] aqc111 6-1:1.105 eth8 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 730.057268][T16961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 730.075435][T16961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 730.096669][T16961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 730.119342][T16961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 730.144130][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2899'. [ 730.274940][T16961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.326692][T16961] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.395617][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.402816][ T7165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.550868][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.558021][ T7165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.926951][T17437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.937027][T17437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.951094][T17437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.479371][T16961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.581162][T11420] Bluetooth: hci1: command tx timeout [ 731.587477][T16961] veth0_vlan: entered promiscuous mode [ 731.680489][T16961] veth1_vlan: entered promiscuous mode [ 731.703980][T11420] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 731.731156][ T5912] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 731.741584][T16961] veth0_macvtap: entered promiscuous mode [ 731.787880][T16961] veth1_macvtap: entered promiscuous mode [ 731.820988][ T9338] batadv_slave_1: left promiscuous mode [ 731.863383][ T9338] veth1_macvtap: left promiscuous mode [ 731.879163][ T9338] veth0_macvtap: left promiscuous mode [ 731.901090][ T9338] veth1_vlan: left promiscuous mode [ 731.906597][ T9338] veth0_vlan: left promiscuous mode [ 731.925401][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 731.943300][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 731.963321][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 731.981799][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.008084][ T5912] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 732.020737][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.038971][ T5912] usb 6-1: Product: syz [ 732.043668][ T5912] usb 6-1: Manufacturer: syz [ 732.048353][ T5912] usb 6-1: SerialNumber: syz [ 732.196022][ T5912] usb 6-1: config 0 descriptor?? [ 732.201756][T17447] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 732.725609][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 732.725625][ T30] audit: type=1400 audit(1751988271.642:3308): avc: denied { map } for pid=17472 comm="syz.3.2909" path="socket:[60601]" dev="sockfs" ino=60601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 732.766057][ T30] audit: type=1400 audit(1751988271.672:3309): avc: denied { read write } for pid=17472 comm="syz.3.2909" path="socket:[60601]" dev="sockfs" ino=60601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 732.766638][ T5912] rc_core: IR keymap rc-imon-rsc not found [ 732.840734][ T5912] Registered IR keymap rc-empty [ 732.846325][ T5912] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 732.929041][ T5912] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input49 [ 732.974711][ T5912] usb 6-1: USB disconnect, device number 44 [ 732.986210][ T30] audit: type=1400 audit(1751988271.902:3310): avc: denied { read } for pid=17501 comm="syz.3.2914" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 733.069394][ T30] audit: type=1400 audit(1751988271.902:3311): avc: denied { open } for pid=17501 comm="syz.3.2914" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 733.255756][ T30] audit: type=1400 audit(1751988271.932:3312): avc: denied { ioctl } for pid=17501 comm="syz.3.2914" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 733.679492][T11420] Bluetooth: hci1: command tx timeout [ 733.795951][T17531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.843345][T17531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.894178][T17531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.608750][T16961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.625777][T16961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.654727][ T5957] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 734.656545][T16961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.674003][T16961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.686802][T16961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.698752][T16961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.847058][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.847437][ T7165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.879245][ T7165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.316595][ T5957] usb 6-1: Using ep0 maxpacket: 16 [ 735.323351][ T5957] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 735.333327][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.340652][ T5957] usb 6-1: config 0 has no interface number 0 [ 735.348806][ T5957] usb 6-1: config 0 interface 161 has no altsetting 0 [ 735.377084][ T5957] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 735.387876][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.434934][ T5957] usb 6-1: Product: syz [ 735.450807][ T5957] usb 6-1: Manufacturer: syz [ 735.455811][ T5957] usb 6-1: SerialNumber: syz [ 735.467828][ T5957] usb 6-1: config 0 descriptor?? [ 735.475195][ T5957] ums-jumpshot 6-1:0.161: USB Mass Storage device detected [ 735.485976][ T5957] ums-jumpshot 6-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 735.496893][ T30] audit: type=1400 audit(1751988274.402:3313): avc: denied { setopt } for pid=17558 comm="syz.0.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 735.521555][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2924'. [ 735.567928][ T30] audit: type=1400 audit(1751988274.402:3314): avc: denied { read } for pid=17558 comm="syz.0.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 735.658113][T17568] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2924'. [ 735.680779][ T30] audit: type=1400 audit(1751988274.402:3315): avc: denied { map } for pid=17558 comm="syz.0.2923" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 735.707331][ T5939] usb 6-1: USB disconnect, device number 45 [ 735.728225][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2924'. [ 735.747913][ T30] audit: type=1400 audit(1751988274.402:3316): avc: denied { execute } for pid=17558 comm="syz.0.2923" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 735.754274][ T9338] IPVS: stop unused estimator thread 0... [ 735.810779][ T30] audit: type=1400 audit(1751988274.432:3317): avc: denied { bind } for pid=17559 comm="syz.4.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 735.970798][ T5892] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 736.122591][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 736.154215][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.181240][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.205205][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 736.297041][T17605] input: syz1 as /devices/virtual/input/input50 [ 736.312659][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 736.325739][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 736.337404][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 736.346880][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 736.356172][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 736.364496][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 736.486988][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.786421][ T5892] usb 4-1: config 0 descriptor?? [ 736.851392][T17603] lo speed is unknown, defaulting to 1000 [ 736.863890][T17603] lo speed is unknown, defaulting to 1000 [ 737.043533][ T5957] usb 1-1: USB disconnect, device number 67 [ 737.157441][ T9336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.232669][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 737.238693][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 737.250745][T12760] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 737.262388][ T5892] usb 4-1: USB disconnect, device number 117 [ 737.295263][ T9336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.399740][ T9336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.423642][T17603] chnl_net:caif_netlink_parms(): no params data found [ 737.430835][T12760] usb 6-1: Using ep0 maxpacket: 16 [ 737.440087][T12760] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 737.450467][T12760] usb 6-1: config 1 has no interface number 0 [ 737.466803][T12760] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 737.479155][T12760] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 737.491839][T12760] usb 6-1: config 1 interface 105 has no altsetting 0 [ 737.506987][T12760] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 737.514874][ T9336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.517258][T12760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.545528][T12760] usb 6-1: Product: syz [ 737.555640][T12760] usb 6-1: Manufacturer: syz [ 737.564148][T12760] usb 6-1: SerialNumber: syz [ 737.575225][T17637] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 737.590986][ T5939] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 737.611260][T17637] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 737.694918][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.703209][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.710885][T17603] bridge_slave_0: entered allmulticast mode [ 737.718889][T17603] bridge_slave_0: entered promiscuous mode [ 737.727454][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.734806][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.745294][T17603] bridge_slave_1: entered allmulticast mode [ 737.753322][T17603] bridge_slave_1: entered promiscuous mode [ 737.770074][ T5939] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 737.783674][ T5939] usb 2-1: config 0 has no interface number 0 [ 737.790440][ T5939] usb 2-1: config 0 interface 104 has no altsetting 0 [ 737.807091][T17824] input: syz1 as /devices/virtual/input/input51 [ 737.811011][ T5939] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 737.830000][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.840880][ T5939] usb 2-1: Product: syz [ 737.845005][T17824] input: failed to attach handler leds to device input51, error: -6 [ 737.845139][ T5939] usb 2-1: Manufacturer: syz [ 737.869264][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.875622][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2937'. [ 737.881518][ T5939] usb 2-1: SerialNumber: syz [ 737.899145][ T5939] usb 2-1: config 0 descriptor?? [ 737.907690][ T5939] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 737.918904][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.010614][T17603] team0: Port device team_slave_0 added [ 738.027904][T17603] team0: Port device team_slave_1 added [ 738.063921][T17637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.125767][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 738.312086][T17889] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 738.320871][T17889] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 738.412177][T17890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.441426][ T5939] gspca_vc032x: reg_r err -110 [ 738.446287][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.454255][T17890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.464416][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.469758][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.475186][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 738.480775][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.487092][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.493653][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.499276][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.504775][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 738.514101][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.524853][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.530514][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.536033][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.547121][ T5832] Bluetooth: hci3: command tx timeout [ 738.560107][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 738.560121][ T30] audit: type=1400 audit(1751988277.472:3323): avc: denied { read write } for pid=17898 comm="syz.4.2941" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 738.603628][T12760] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 1 [ 738.614643][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.619938][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.627496][T12760] aqc111 6-1:1.105: probe with driver aqc111 failed with error -61 [ 738.637333][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.643301][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.648836][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.652190][ T30] audit: type=1400 audit(1751988277.472:3324): avc: denied { open } for pid=17898 comm="syz.4.2941" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 738.659885][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.696331][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.702219][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.707634][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.713603][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.719185][ T5939] gspca_vc032x: I2c Bus Busy Wait 00 [ 738.728156][ T10] usb 4-1: Product: syz [ 738.732474][ T5939] gspca_vc032x: Unknown sensor... [ 738.737968][ T5939] vc032x 2-1:0.104: probe with driver vc032x failed with error -22 [ 738.746525][ T10] usb 4-1: Manufacturer: syz [ 738.751209][ T10] usb 4-1: SerialNumber: syz [ 738.773620][ T5939] usb 2-1: USB disconnect, device number 122 [ 738.841797][ T9336] gretap0 (unregistering): left promiscuous mode [ 739.179482][ T10] usb 4-1: 0:2 : does not exist [ 739.321865][ T9336] bond0 (unregistering): left promiscuous mode [ 739.328330][ T9336] bond_slave_0: left promiscuous mode [ 739.334302][ T9336] bond_slave_1: left promiscuous mode [ 739.341280][ T9336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.353087][ T9336] bond_slave_0: left allmulticast mode [ 739.360362][ T9336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.369393][ T9336] bond_slave_1: left allmulticast mode [ 739.376985][ T9336] bond0 (unregistering): Released all slaves [ 739.539074][ T5832] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 739.546243][ T5940] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 739.554743][ T5832] Bluetooth: hci4: unexpected event for opcode 0x203e [ 739.580542][ T9336] bond1 (unregistering): Released all slaves [ 739.701385][ T9336] bond2 (unregistering): Released all slaves [ 739.710746][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 739.719564][ T5940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 739.732183][ T5940] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 739.756685][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 739.766464][ T5940] usb 2-1: Product: syz [ 739.775436][ T5940] usb 2-1: Manufacturer: syz [ 739.782298][ T5940] usb 2-1: SerialNumber: syz [ 739.794408][ T5940] usb 2-1: config 0 descriptor?? [ 739.800626][T17918] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 739.844355][ T9336] tipc: Disabling bearer [ 739.850617][ T9336] tipc: Disabling bearer [ 739.858101][ T9336] tipc: Disabling bearer [ 739.864684][ T9336] tipc: Left network mode [ 739.869581][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.876621][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.906323][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.923586][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.933403][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.969772][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.986296][ T9336] IPVS: stopping master sync thread 14865 ... [ 740.045608][ T5939] usb 6-1: USB disconnect, device number 46 [ 740.106010][T17603] hsr_slave_0: entered promiscuous mode [ 740.114820][T17603] hsr_slave_1: entered promiscuous mode [ 740.122137][T17603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.129824][T17603] Cannot create hsr debugfs directory [ 740.335161][ T10] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 740.404404][ T10] usb 4-1: USB disconnect, device number 118 [ 740.414505][ T9336] batadv_slave_1: left promiscuous mode [ 740.424638][ T9336] dummy0: left promiscuous mode [ 740.464469][ T5892] usb 2-1: USB disconnect, device number 123 [ 740.481615][ T9336] hsr_slave_0: left promiscuous mode [ 740.490631][ T9336] hsr_slave_1: left promiscuous mode [ 740.524026][ T9336] veth1_macvtap: left promiscuous mode [ 740.530313][ T9336] veth0_macvtap: left promiscuous mode [ 740.539999][ T9336] veth1_vlan: left promiscuous mode [ 740.545791][ T9336] veth0_vlan: left promiscuous mode [ 740.620881][T11420] Bluetooth: hci3: command tx timeout [ 740.714796][ T9336] pim6reg9 (unregistering): left allmulticast mode [ 741.495756][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 741.505316][ T30] audit: type=1400 audit(1751988280.412:3325): avc: denied { read write } for pid=18074 comm="syz.3.2948" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 741.625365][ T30] audit: type=1400 audit(1751988280.412:3326): avc: denied { open } for pid=18074 comm="syz.3.2948" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 742.143063][ T30] audit: type=1400 audit(1751988280.412:3327): avc: denied { ioctl } for pid=18074 comm="syz.3.2948" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 742.168147][ C1] vkms_vblank_simulate: vblank timer overrun [ 742.395956][T11420] Bluetooth: hci1: command tx timeout [ 743.136525][T11420] Bluetooth: hci3: command tx timeout [ 743.403058][ T9336] team0 (unregistering): Port device team_slave_1 removed [ 743.469910][T11420] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 743.719471][T18108] SET target dimension over the limit! [ 743.864953][ T9336] team0 (unregistering): Port device team_slave_0 removed [ 744.638522][ T30] audit: type=1400 audit(1751988283.252:3328): avc: denied { getopt } for pid=18119 comm="syz.4.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 745.232344][T11420] Bluetooth: hci3: command tx timeout [ 745.674287][ T5940] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 745.824918][ T5892] lo speed is unknown, defaulting to 1000 [ 745.849251][ T5892] infiniband syz1: ib_query_port failed (-19) [ 746.492867][ T5940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 746.503167][ T5940] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 746.510824][ T5940] usb 4-1: can't read configurations, error -71 [ 746.600163][T18184] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 746.607390][T18184] overlayfs: failed to set xattr on upper [ 746.613273][T18184] overlayfs: ...falling back to redirect_dir=nofollow. [ 746.620350][T18184] overlayfs: ...falling back to index=off. [ 746.626338][T18184] overlayfs: ...falling back to uuid=null. [ 746.632324][T18184] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 746.702556][ T9336] IPVS: stop unused estimator thread 0... [ 746.725915][T18188] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 746.733013][T18188] overlayfs: failed to set xattr on upper [ 746.740160][T18188] overlayfs: ...falling back to redirect_dir=nofollow. [ 746.747157][T18188] overlayfs: ...falling back to index=off. [ 746.753122][T18188] overlayfs: ...falling back to uuid=null. [ 746.758936][T18188] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 746.786542][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.793090][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.794238][ T30] audit: type=1400 audit(1751988285.702:3329): avc: denied { ioctl } for pid=18189 comm="syz.4.2965" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=61979 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 747.102763][ T30] audit: type=1400 audit(1751988286.022:3330): avc: denied { write } for pid=18201 comm="syz.3.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 747.140786][T18202] syz.3.2966: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 747.199663][T18202] CPU: 1 UID: 0 PID: 18202 Comm: syz.3.2966 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 747.199694][T18202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 747.199707][T18202] Call Trace: [ 747.199715][T18202] [ 747.199723][T18202] dump_stack_lvl+0x16c/0x1f0 [ 747.199756][T18202] warn_alloc+0x248/0x3a0 [ 747.199784][T18202] ? __pfx_warn_alloc+0x10/0x10 [ 747.199807][T18202] ? __pfx_stack_trace_save+0x10/0x10 [ 747.199835][T18202] ? stack_depot_save_flags+0x28/0xa40 [ 747.199868][T18202] ? kasan_save_stack+0x42/0x60 [ 747.199890][T18202] ? kasan_save_stack+0x33/0x60 [ 747.199912][T18202] ? kasan_save_track+0x14/0x30 [ 747.199934][T18202] ? xskq_create+0x52/0x1d0 [ 747.199955][T18202] ? xsk_setsockopt+0x640/0x840 [ 747.199974][T18202] ? do_sock_setsockopt+0x221/0x470 [ 747.200005][T18202] ? xskq_create+0xfb/0x1d0 [ 747.200034][T18202] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 747.200065][T18202] ? xskq_create+0xfb/0x1d0 [ 747.200093][T18202] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 747.200123][T18202] ? xskq_create+0xfb/0x1d0 [ 747.200145][T18202] vmalloc_user_noprof+0x9e/0xe0 [ 747.200169][T18202] ? xskq_create+0xfb/0x1d0 [ 747.200191][T18202] xskq_create+0xfb/0x1d0 [ 747.200215][T18202] xsk_setsockopt+0x640/0x840 [ 747.200237][T18202] ? __pfx_xsk_setsockopt+0x10/0x10 [ 747.200253][T17603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 747.200256][T18202] ? __lock_acquire+0x622/0x1c90 [ 747.200279][T18202] ? selinux_socket_setsockopt+0x6a/0x80 [ 747.200302][T18202] ? __pfx_xsk_setsockopt+0x10/0x10 [ 747.200318][T18202] do_sock_setsockopt+0x221/0x470 [ 747.200341][T18202] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 747.200379][T18202] __sys_setsockopt+0x1a0/0x230 [ 747.200403][T18202] __x64_sys_setsockopt+0xbd/0x160 [ 747.200422][T18202] ? do_syscall_64+0x91/0x4c0 [ 747.200443][T18202] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.200465][T18202] do_syscall_64+0xcd/0x4c0 [ 747.200488][T18202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.200504][T18202] RIP: 0033:0x7f6e3f38e929 [ 747.200518][T18202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.200534][T18202] RSP: 002b:00007f6e40180038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 747.200552][T18202] RAX: ffffffffffffffda RBX: 00007f6e3f5b5fa0 RCX: 00007f6e3f38e929 [ 747.200562][T18202] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 747.200572][T18202] RBP: 00007f6e3f410b39 R08: 0000000000000004 R09: 0000000000000000 [ 747.200582][T18202] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.200592][T18202] R13: 0000000000000000 R14: 00007f6e3f5b5fa0 R15: 00007fff36c99308 [ 747.200614][T18202] [ 747.204632][T18202] Mem-Info: [ 747.484137][T18202] active_anon:17051 inactive_anon:0 isolated_anon:0 [ 747.484137][T18202] active_file:6734 inactive_file:13804 isolated_file:0 [ 747.484137][T18202] unevictable:770 dirty:103 writeback:0 [ 747.484137][T18202] slab_reclaimable:7514 slab_unreclaimable:101763 [ 747.484137][T18202] mapped:38775 shmem:13879 pagetables:1163 [ 747.484137][T18202] sec_pagetables:0 bounce:0 [ 747.484137][T18202] kernel_misc_reclaimable:0 [ 747.484137][T18202] free:1313237 free_pcp:22154 free_cma:0 [ 747.490992][T17603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 747.529952][T18202] Node 0 active_anon:68204kB inactive_anon:0kB active_file:26920kB inactive_file:55084kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:155084kB dirty:412kB writeback:0kB shmem:53980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12528kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 747.530007][T18202] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 747.530051][T18202] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.530101][T18202] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 747.530140][T18202] Node 0 DMA32 free:1340208kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68064kB inactive_anon:0kB active_file:26884kB inactive_file:53892kB unevictable:1544kB writepending:412kB present:3129332kB managed:2540088kB mlocked:0kB bounce:0kB free_pcp:64992kB local_pcp:35728kB free_cma:0kB [ 747.530191][T18202] lowmem_reserve[]: 0 0 1 1 1 [ 747.530233][T18202] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:140kB inactive_anon:0kB active_file:36kB inactive_file:1192kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:4kB free_cma:0kB [ 747.530283][T18202] lowmem_reserve[]: 0 0 0 0 0 [ 747.530320][T18202] Node 1 Normal free:3897380kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23840kB local_pcp:15328kB free_cma:0kB [ 747.530371][T18202] lowmem_reserve[]: 0 0 0 0 0 [ 747.530406][T18202] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) [ 747.757050][T17603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 747.757167][T18202] 3*4096kB (M) = 15360kB [ 747.778744][T18202] Node 0 DMA32: 331*4kB (UME) 115*8kB (UE) 307*16kB (UME) 174*32kB (UME) 96*64kB (UME) 136*128kB (UME) 105*256kB (UME) 83*512kB (UME) 53*1024kB (UME) 12*2048kB (UM) 283*4096kB (UM) = 1343668kB [ 747.798348][T18202] Node 0 Normal: 6*4kB (M) 3*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48kB [ 747.810856][T18202] Node 1 Normal: 223*4kB (UME) 67*8kB (UME) 49*16kB (UE) 116*32kB (UME) 40*64kB (UME) 8*128kB (UME) 3*256kB (ME) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 948*4096kB (M) = 3897380kB [ 747.833097][T18202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.839440][T17603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 747.842691][T18202] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 747.842711][T18202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.842725][T18202] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 747.842740][T18202] 30363 total pagecache pages [ 747.842748][T18202] 0 pages in swap cache [ 747.842755][T18202] Free swap = 124996kB [ 747.842763][T18202] Total swap = 124996kB [ 747.842772][T18202] 2097051 pages RAM [ 747.842779][T18202] 0 pages HighMem/MovableOnly [ 747.842785][T18202] 430051 pages reserved [ 747.842792][T18202] 0 pages cma reserved [ 747.995078][ T30] audit: type=1400 audit(1751988286.912:3331): avc: denied { bind } for pid=18220 comm="syz.3.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 748.105512][T17603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.149287][T17603] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.180068][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.187250][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.302130][T18234] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 748.314238][T18234] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 748.322659][T18234] CPU: 1 UID: 0 PID: 18234 Comm: syz.3.2973 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 748.330729][ T30] audit: type=1400 audit(1751988287.202:3332): avc: denied { watch } for pid=18233 comm="syz.3.2973" path="/588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 748.332974][T18234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 748.387657][T18234] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 748.394595][T18234] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 748.414191][T18234] RSP: 0018:ffffc900043ef2b0 EFLAGS: 00010202 [ 748.420251][T18234] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: 1ffff110051fdd5c [ 748.428206][T18234] RDX: 000000000000000b RSI: ffffffff89931e9c RDI: 0000000000000058 [ 748.430981][ T30] audit: type=1400 audit(1751988287.212:3333): avc: denied { connect } for pid=18233 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 748.436155][T18234] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 748.463614][T18234] R10: 00000000000a000f R11: 0000000000000001 R12: ffffffff8ce8ce60 [ 748.471575][T18234] R13: 0000000000000058 R14: ffffffff8ce8ce40 R15: ffff888028fee800 [ 748.479531][T18234] FS: 00007f6e401806c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 748.488446][T18234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.495020][T18234] CR2: 00007f6e4013df98 CR3: 000000005dbd6000 CR4: 00000000003526f0 [ 748.502993][T18234] Call Trace: [ 748.506280][T18234] [ 748.509204][T18234] drr_qlen_notify+0x24/0x150 [ 748.513873][T18234] qdisc_tree_reduce_backlog+0x221/0x500 [ 748.519508][T18234] fq_codel_change+0xb1a/0x11b0 [ 748.524350][T18234] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 748.529799][T18234] ? __pfx_fq_codel_change+0x10/0x10 [ 748.535068][T18234] ? tc_modify_qdisc+0x12bb/0x2130 [ 748.540166][T18234] ? lockdep_init_map_type+0x5c/0x280 [ 748.545536][T18234] fq_codel_init+0x4ce/0xa60 [ 748.550122][T18234] ? lockdep_rtnl_is_held+0x26/0x40 [ 748.555307][T18234] ? __pfx_fq_codel_init+0x10/0x10 [ 748.560420][T18234] qdisc_create+0x457/0xfc0 [ 748.564942][T18234] tc_modify_qdisc+0x12bb/0x2130 [ 748.569893][T18234] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 748.575201][T18234] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 748.580490][T18234] rtnetlink_rcv_msg+0x3c9/0xe90 [ 748.585428][T18234] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 748.590890][T18234] ? ref_tracker_free+0x37c/0x830 [ 748.595924][T18234] netlink_rcv_skb+0x155/0x420 [ 748.600684][T18234] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 748.606148][T18234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.611440][T18234] ? netlink_deliver_tap+0x1ae/0xd30 [ 748.616743][T18234] netlink_unicast+0x53a/0x7f0 [ 748.621512][T18234] ? __pfx_netlink_unicast+0x10/0x10 [ 748.626800][T18234] netlink_sendmsg+0x8d1/0xdd0 [ 748.631564][T18234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.636850][T18234] ____sys_sendmsg+0xa95/0xc70 [ 748.641612][T18234] ? copy_msghdr_from_user+0x10a/0x160 [ 748.647072][T18234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.652355][T18234] ? __pfx_futex_wake_mark+0x10/0x10 [ 748.657640][T18234] ___sys_sendmsg+0x134/0x1d0 [ 748.662320][T18234] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.667517][T18234] ? __lock_acquire+0x622/0x1c90 [ 748.672464][T18234] __sys_sendmsg+0x16d/0x220 [ 748.677056][T18234] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.682171][T18234] ? __x64_sys_futex+0x1e0/0x4c0 [ 748.687124][T18234] do_syscall_64+0xcd/0x4c0 [ 748.691634][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.697524][T18234] RIP: 0033:0x7f6e3f38e929 [ 748.701937][T18234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.721545][T18234] RSP: 002b:00007f6e40180038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.729958][T18234] RAX: ffffffffffffffda RBX: 00007f6e3f5b5fa0 RCX: 00007f6e3f38e929 [ 748.737926][T18234] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000009 [ 748.745895][T18234] RBP: 00007f6e3f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 748.753863][T18234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.761831][T18234] R13: 0000000000000000 R14: 00007f6e3f5b5fa0 R15: 00007fff36c99308 [ 748.769805][T18234] [ 748.772818][T18234] Modules linked in: [ 748.776790][T18234] ---[ end trace 0000000000000000 ]--- [ 748.782252][T18234] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 748.789202][T18234] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 748.808863][T18234] RSP: 0018:ffffc900043ef2b0 EFLAGS: 00010202 [ 748.814944][T18234] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: 1ffff110051fdd5c [ 748.822928][T18234] RDX: 000000000000000b RSI: ffffffff89931e9c RDI: 0000000000000058 [ 748.830916][T18234] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 748.838884][T18234] R10: 00000000000a000f R11: 0000000000000001 R12: ffffffff8ce8ce60 [ 748.846859][T18234] R13: 0000000000000058 R14: ffffffff8ce8ce40 R15: ffff888028fee800 [ 748.854836][T18234] FS: 00007f6e401806c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 748.863768][T18234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.870343][T18234] CR2: 00007f6e4013df98 CR3: 000000005dbd6000 CR4: 00000000003526f0 [ 748.878334][T18234] Kernel panic - not syncing: Fatal exception in interrupt [ 748.885745][T18234] Kernel Offset: disabled [ 748.890049][T18234] Rebooting in 86400 seconds..