last executing test programs: 24.744155916s ago: executing program 3 (id=159): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="81bccdf204e8104394dee634db16f023376faeac1af9e2d94ab9a7c6bc8a9006c3329fb2d8cd3ea0d42d7521675af414b07e4ddbcbe0c314626711eca628f32148d739cbb6bd8186da1fb0218f453b00c6f92e5dc08c80728010a5b232154a2b1e27ece633009d625eba83cbadd006b092b7", @ANYRES16=r1, @ANYBLOB="08002abd7000fcdbdf2506000000050005000100000008000a000100000006000e00ee000000"], 0x2c}}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r2, 0x89e1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, 0x0, 0x51f180, 0x100) utimensat(r8, 0x0, 0x0, 0x100) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x8}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, r3, 0x0) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) 23.764344073s ago: executing program 3 (id=161): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2aafb2aaa6486baf, 0x10010, 0xffffffffffffffff, 0xee34a000) mbind(&(0x7f00002b3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000200)=0x6, 0x2, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x40008, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000dc8000/0x3000)=nil) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0x9, 0xf1b7, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0xffffffffffffffff, 0x4000000000002, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x90e, 0x2, 0x2, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 22.00084331s ago: executing program 3 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2040400) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0xc0089364, &(0x7f0000001240)) 21.874787827s ago: executing program 1 (id=169): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x18010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000780)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014"], 0xf0}}, 0x0) ioprio_set$uid(0x3, 0xee00, 0x4007) socket$inet(0x2, 0x1, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1ffffffffffffd92, 0x1}}, 0x40) ioctl$KDGKBDIACR(r3, 0x4b4b, &(0x7f0000000080)) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], &(0x7f0000000500)=""/172, 0x64, 0xac, 0x0, 0x6, 0x10000, @value=r5}, 0x28) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r8 = shmget(0x1, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 21.010601782s ago: executing program 3 (id=170): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x0, 0x4, 0x0, 0x9}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000006c0)={{@my=0x1}, @any, 0x0, 0x1, 0xa0c, 0x1, 0x4, 0x4, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7aa, &(0x7f0000000180)={{@my=0x1}}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)={0xffffffff, 0x4}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x40801) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 18.924724475s ago: executing program 3 (id=177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x58) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_aout(r8, &(0x7f0000000180)=ANY=[], 0xfffffecc) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xffffffffffffffff, 0x6}) fchown(r8, 0xee01, 0x0) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 18.917297063s ago: executing program 1 (id=178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbmon(0x0, 0x400, 0x208000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppoe(0x18, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r7) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x30, r8, 0x1, 0x70bd28, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x4c}}, 0x804) write$binfmt_register(0xffffffffffffffff, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) syz_usb_connect$cdc_ecm(0x0, 0x87, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "000094850000"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mdlm_detail={0x4, 0x24, 0x13, 0xf}, @mdlm_detail={0x22, 0x24, 0x13, 0x2, "8d76912f0108439def3a2825e2826121633b4ec390c4ea9c9cb312b3ce8b"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xfe, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 16.865974372s ago: executing program 2 (id=182): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x81, 0x601, 0x48, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfffffef9, 0x7}}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xa0000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) getpid() getpid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000004080)="611cad", 0x3, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r1, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) openat$ttynull(0xffffffffffffff9c, &(0x7f00000003c0), 0x80040, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@hyper, 0x2}) socket$inet6(0xa, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/kexec_crash_loaded', 0x20f02, 0x19) 16.865503392s ago: executing program 0 (id=183): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f100000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0xfffffffffffffe5f) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) flock(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1ffffffffffffd86, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x25, 0x0, 0x1}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x4, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r9}, 0x18) socket(0x1, 0x5, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x5, 0x9, 0x6, 0x0, 0x29de, 0x0}) syz_open_procfs$namespace(r10, &(0x7f0000000340)='ns/pid_for_children\x00') 15.923564634s ago: executing program 2 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) io_uring_setup(0x1503, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000580)=""/152, 0x98}], 0x2, 0x80, 0xb6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x2, &(0x7f0000000280)=[{0x9, 0x74, 0xfb, 0x100}, {0xfffd, 0x0, 0x3, 0xa2}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@ipv4_delroute={0x48, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xc8, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x8}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r4}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14804}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000001ffffff000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) open(0x0, 0x1c1c01, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x1, 0x4002) 15.803381238s ago: executing program 1 (id=185): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80801) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4c, 0x0, "9850aefd374fa3fc96567405ccb772853e8109351ec3c12b48638e2f762b40660780cb75ff882832d6a1c6c20a4cb282ea619fda84db39d95685779f5e954229f79180bbeeb9939d81af21c28840e280"}, 0xd8) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) preadv2(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1, 0xbcf, 0x40, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe83}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000003c0)={0x7, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x6}}, {{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1c000000}}}, 0x108) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 15.760038437s ago: executing program 3 (id=186): syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, 0x0) 15.450990761s ago: executing program 1 (id=187): sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) socket(0x2, 0x80805, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) 15.448323901s ago: executing program 4 (id=188): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000002c0)={{0x2, 0x0, 0x80, {0x6000, 0x10000}}, "34f9453feb5330291e4801c7f53a149f4d06ce19e20f0aabc297b06d70948cacdac3e740fb4b6ec0fb5ce370de2b9361a28e61ab473e870b8454652e9e1876730e848bab5df1573709892d71beb20ef43d3efa72a41c025f3201d93217fa9374769874967844dcf520ab18cf748e1c3d155c9fa429d2f777fc7c5350dbea7a8571a5e857a2794aeebebb3ff35acd02f37a22a4928dcf6af39e6d80ac5dcec6885150b5d3d9682b5df38dd7a966a2d1274c8a5d00dc1cfa6d1c0109d62b23707336c143a5bc0a79ce9150089297daa46aa216c70b745314ae8dbcfe2e052e5e8f26d1618c6408d74763f0306152036b232c1fe7aa4249d030e8a9332f4a27eb6d85980917ab173b982f04d1b8f1fe0659889e596f867c1bef9895fc332cd57d5d4950f0692f780cd120b9a949f86913877267b676eb6dbb1494e8b16109122d266767650c136c46d4ae34640f8e8bbe0bf995d24d68450895ae73b572d5f7e4cc138cbb648cd05d188e967fe39382e452ef810bb9e830037270f5e33368a99672b6802b38ec4772e8cc746e11ca780672842c045f03b2ab402624753cce54715d24ce7471a2edc62e4c8802e9375695f26a67dd6d89bf258ca84573dfacad15e0d28ce1f8f933a3da53a8224fe607b8e9e53d9c1336fa5bf8a3b3fa7875ca61df653480124ff1edcfc2ceb72be50500bcd6d7d1ae3f36aa08d1b127942f0cb3ce485d0c229d378e0aaec8b7bbd1fb0b0c3a97ad10a5340eac23ddde01d2b931250b55b7567b0b1d413afd6890b1106b3f758da2385f25feee413ae81e4c502204bbef88847cc1fb2cf39da9dc01a48f378418f57b65eaa96b5785ec932b9955f3043ed5bda1986f27ddaf3aabade99731d3e1a59e74977c1faf3e03f0781f2ebf16d7c1060557f0fecf5366c15ffc0b3800172b72777352f73c32a30d2941eb15f60fd761505be9b4ca549634efdd49ae9b1e41198ea44cf83025ba1ae4caca0c8adffd56b166b54538c115e76ec8ea2a3d72310bcbf1aba057a7f9fe39618d2a8ece943e8c81e819b3e3a7554578bedc020ac60de1b9e58b3c437a14f9ac8d520d8caaab166a939d96a95b8d3701330058a65ee93f98a4ab0cb79ee3de426f41cd7e3d6a1b1e029ffd2c6f75dc7723d43cd2612baa90baaafd392c6dbe0f9f9111d71a0740366c62de729c3b21b7734f24a29acbcd4df1e3d526ccf303ed1115d08d2fa092a083d96f283ddd9132f3de915dae5c3abc8807bddae367812a47e082c44bd51780689dd85887fc598ba7a126cd4dad74c06b84e781b46fd48d2372a065243edebd48002ca1423299e84ce5aac85d3fa658f0972880c66c2bd3aa5c3a5782cee9ebbdda8faf084e9cc91dba8d9699e686b4d9253b1bf57d91053aa1ab69ab1d523ed97715c6b8c37640d31156932d98f137c20f3d282076a9b7d5e2ab777b68fba8e731143f2db26b8f9ef8baeaf9346b3bf73ce30a89073a4ce2068d3a9f571ce272f7532e0785ea972b557f6a9173647616a653f7a4e4403e578909bce5b01d985f7c78b4641273bfcb7669e2855a3deb3f3e130506cc47d585bcad31c537025c58a0ac8de29def0ff94cac7e9ed4d4a14ca6b64e2a1096c358ff3449b4296757fdc305256a9477ec6abd6e24fcaafa166eaad8c177d44c7c906290af51ca6e70ed5f21915db61363c4a78b95e189298829a08518346eccefdb51238086fed81580cd47632b7355c2057e3edff6f665660a6c19939f806eca8834914e9d9e3d76b3a979a1dd55799c3e3bb9d7dc2291a43616aab8d3e2046255ca202ef47df4dbec8d63d35c0f53f3657100ec91090d47a11857ce59127d369b28d8b740ab9a218130fef9f2f7d025772079be456b49c783ca9f4c2d40e677c1ba2314a91ef54d8fca8afb4cea5dff1a5a93d0cac66903249bbff3c95ebe0112d802148d9cc5d189d5e86f933dcd7bd6de630b1a04cfa60764574a70c1e05f50c7cae9e8b9f3d74149d226c40787ba9894d195755fb92101fbfc319329a3177e7b94892c3de067784d1c74fc998cc0cbb4052b7a1f176053c286ee8561a425789535bb36732aac6298c9c3f5c6a0bfcd6dafd2dcc0bb611d3da72acaac9e9da3874289b40d77cd03e3c5a18ff90c166caf01dffb115fa9fb9b2a2e11b1e29c0edfa0de16bbe0d9a562b8eceb6dca504700927d6e9bd6e473140d2a3f88e3fe4f9fc983ba7bf5ca2130c75f1df5db9af028be719ec65f7347bd4bf37683fd0bc7228925dc97a9223f9891570fa381b989184d50ac9a55b75cccf2aa71f6a132e1c5d10e39c56f513538dbeda634ed5cfaccc2fb48f8d8bc0d6cdf7177ce89b0826318026337e7429e5b935ecf5b590bb5cf315c5d4d2f0a7e9541770b0446df43a250b64693f8199e7ab0604306e86e8de75e1ae369281fa68c522240446f117c79e5ca637c7c7000ff50688c74719e712513d4900b15775319e6f4d38c8af9be01b664fb4417b824226312bf4299085a12ac3f33af24e577dca53c75dc759c78fc5e53aa6a814c081d2c88e42514a6449a7481673f44097a2b7aec5ab75ca6a26b80197c47b156b2bb77399d954be87c8e7fbf7a1fe100373bc366e08bc063cf82775c10db3d131dc05f2948f01f3b4680fa66486d3cdf39ea5165391406d683a94642cea1764245c0a04fbac4e907a4e2b26318470c10698c0734ff236a8985d28303a6e3195aec0b66d16848f401d0fb225d6dacff6a0d3da7c09fb5d31ac5d8e3da7b539bbed409908e6168046039d7721b7daf961cb45e6e79bf0207fa478ffbebb7a93ab1f58efce65f0ec045f0e08500cf332384d4584ac12a6cd4c1653c0ffc8d83e356c1263fabfb5b47228d90962cc3b56619b42053f63b62591783ef9bd87c14179c329350a2d5019c41517e28d872c2cbd50f8e0cb1e9884a8d3c7a55abf592eca6a243ee70b3fb772913513e5dd937a8ce9459e642e63c32ef70be1734cdf1ede5e4fcdc525feda12c12d062736e6f8539ae47ee70da2a8d2e1ae75e10212847e241f1d63cd204654ed71627b4dda485ea5652eae0d89dc239a66e666cde0e112e4131ec242adabd5bb2444321ca0657601738fedd556553bb235a21fff517cf3e039e95b764206f5c3212299075d10bf88bc7b40185039be6260be6abe0ec01cc54904b14aead5e01c60a8b43e48f65481ed5ff73b4e9be42a908e2e837b676c1df68b7191d8477899197996c4abd8e61ec039d4ab0413a8bc4de47dcbfbbce0493658197fc24d1e6fee2097f42a434bd2885b691e6451319ba37498b55ef32ccd560f799265b26bcb24f4ee5b60b093fbf8937c2fd3df4362bcab539a1f1f0cdf0f76ca5847f448d011cfe4be3f1d764c18939522ed5891a2971240ddeefbc8e57dbcfd396efd1d2c88f69c6506532c10dbcde31f42eaa07ba582fa4fb8ffb37a5ce8c887624863fc8262de18cbf0e49690598cdb0eb3e8ddd29a053fd081a7421776147cd75a1993b1dc0696d32f609285403cecb6bf7f2067954f831ec1350b82c176ec66f0a3fc8d86efff2edfd6b585bc44b371836e4d44a0d3126feea525384a768bba8ea8f3ecc665095362183ff872857cff09e3c62747214c0e57c636a7c91ffb2b4a2736236fac48c56d8836301de4099041e1876facdc0287d55294c246b169fa68a03f9403718be7873062520222205fb1c8cf9c14cdb699962cb66ff34331d445f82c7c2f779ef070aa5ed44eda707de97c87d9cf57a60fa8e0af8122c0f54cb16db99514a96cfa9c5cc1c638db95ce07c0e4c1d3a5e593c0bd405fc2d912d6b58be58f8b509dba35d8f918b1072c4a913f6fde05afbd279a4f3454657f8ba5218515e409c0ec38241c8bb10e73c725ba3bb809a2ee191b51438faff91d6d231b9ce092e2d329cb7d669a3a20cef0c88a9b1ad2f454c0d041b3f9c4580ef25f573e829176cd7387d5f018b5261fcce0f640ee95fcc5b6764752422943f8d773e4cd14f8c05e7e5cbdd072a1e7e17024d9ac87f48e2dab18e232c13ae158ceef806e523013eb2508ec573fe4b9820005ee9340cdc286ecf343a536fdd3a3fa67d84ad23922e9698f7fb4ece0349e47457cf24610e9fb635be0c9d0a6fdceacbd9c596aa861c381f95b8b78faea3125467e4d112e2dd9f8601769b2d14fdb314839d2e5d9a02f06a637ccb5d3cbe2ace22a283880e3257facc704e86fd3195f209361412fc2b3eedaade667c7f9886cd446c41c2824d7afe7f1199a48ae47d2b442d6c4be9617e46c37722f5d93186047d38742739d228c297ef7b372f2b831492c771d7db10d20c1c4d8544341230da63825112c96a6adf52f18179ed9a2f716fa89f2caac8398e5d6d9e7926620bf86f31524aa48437d3f91c9634428d44860c8d63a1ed47d4c7aff97b88d8f94da524ddda2f303364b13ae119f8a5b454c9eaed2700722cbda4f0b739da9734092f45bae72296a7ee7c155a66cb6002fc9817cb325b5bd32b0d0d426f9fe8b076eeeaf23b90784745b575be04dcfbc443b9df6bdd1149fa9b18f9089cbb4f3702af301096f0aa756b8acc2ee2ca926fdb6e2ea469458087215f04715e9373a5397389d1b3b108768c387bb4d678a88eec52e41f05930d191c24c44c2dfc3143405ea75279898548baba52987c1f226a5ef25d3b916cdd42aecc2027800748a1ef2c2788c55132d7e34cb00f93cb9c2dcc82f2b5e091afd82ded211bad9160290d8a142b293a5a8b5aeea396689d0bfc353cb23e3b8078d721eea962bf38413299cd2fbd3b92e73a55d9e3ee95c108c71f42180d06f19b086ce2113c6c6c59a282632df9d787cccd93221915dacd1a24ab487c160a73287d8dba591d85854977044a33e04a7a3e3684b9303a561eb5759e6ef5cf153dce2b98d37be8bd50741cc4a1a31377b93ab7c9cf534d7779f68fdd8034de34291e410e63851afce51476e4333e530677e436bce06ba27bce6f5d711238207c3ace409621f03244851bbbe25436b531e870ad9f1e9b607942f9e558c4fbd6b0138c76b21d371ef6b8dd4c398094e0c49f9e343d7a3d6ead7e38dd93f8633c9bc27d70c48d2a168c126423fa10ef347762df2ad7adfebac03775de5551b78176139bd8d21d66c68b41cf9101b27526657453a099b9de259aee63c4462c95a09516a3b94671266833cad339a283c56920d05c05e8bed492b559078813f20ccd25814f065cf190b88e0030251d1a7ace61aef85f5186d6f051c8128dfd11d7968138c113fe34b3acc22f18021ac34ccfff457033dcd3b495e16304c9e6af8fca14e9e6f85cb9878c280fadffbe233b1b01cad10dbd23beebe55ce8110ffbfe70af624b1044c922da42647ee54c5b0474b1f48213f50be0f50e40495f75c1c014c77be20cc59927371cc979fc9489d492c65a89f8007e4b19e98827b9bb6825fe264426c09442eb9c02212471511dca17eea33809a93f41018f34a15075df30f5c8857cfb4f9cf92bb7f17bb63dfda4310afc5c569325b6e2e5adac2d845eee069242b7016db9e05f2ce28f53f06eb45bf1c7ed8606f780ba34cff7a0bc9438a5fbcfa989f309da812316831413281e3608800da9f5ff87f9569afd6662cf59b64fd985194efbe9952992faac5a2dcf1229697216ece123496dcbf6374533d152c19a4edc16ed1021013a06872d14a96751e1b7791a76ce615a423459483a3a458f29485ec7174043702ed3ed5b42db49ebed98d0ca750379f9f7d91d54412b19b180201ae771f39e45835c0e0118d537ce0133", "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"}) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file1/file4\x00', 0x4) 15.447982403s ago: executing program 0 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x20010000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r6, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0xfffffffffffffed9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_procfs(r3, &(0x7f0000000180)='smaps_rollup\x00') setgroups(0x0, 0x0) lseek(r8, 0x10000000005, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a"], 0xd) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 15.126146993s ago: executing program 4 (id=190): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x8000000000000, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r2, 0x0, 0x0) (async) accept(r2, 0x0, 0x0) 14.843566659s ago: executing program 4 (id=191): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x14, 0x0, 0xc79c59394d69f4e3, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c014) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x14, 0x0, 0xc79c59394d69f4e3, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c014) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xb, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000299605002800128009000100626f6e640000000018000280140008800800"], 0x48}, 0x1, 0x0, 0x0, 0x40060880}, 0x240400c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 14.667052285s ago: executing program 4 (id=192): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000440)="00214717a70700000000030600c751f4b9000000aaa6721d5874f72cf850d32f46380feb9357215db3dbfa78fc44fac3060000009e14c1e7eced89873875313c7cd4da5160973eda96c39e4cd5acbe6bacad600060e753585400", 0x5a}], 0x1, 0x6, 0x3d) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000000)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 14.422003581s ago: executing program 4 (id=193): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0x180, 0x0) (async) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000380)=@ethtool_test={0x1a, 0x8, 0xa684}}) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000200)) (async) epoll_create1(0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000140)={{0x3, 0x1b}, 0x60}, 0x10) (async) r10 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) recvmmsg(r0, &(0x7f000000fdc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) write$tun(r13, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811fffc010000000000000000000000000001ff02000000000000ddff0100000000014f114e2000189078040000000b00000000000100000000005c10497ba9bf0e1b46ff9a2c72c32934df1ace8a43a9855eb9718defbb7a9e56f6559d9d3ebc5aa66bce8926e9c446750880da3e29a992f7281a3c8b520903244b6bcf721a687bb4339c76f72c8090f581779867b931bf199a80a514e93d03"], 0x52) 14.26091091s ago: executing program 4 (id=194): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="dfeb010018000000000000000c0000a40c0000000200000000000000000000840100000000004880aacedc69306e2ff3d582f5805187fc5657e3f29bf7019907aa3eedbc42c914c2034ddbf7701911be6bef0a02da086d715790a5312f9a0efef1885b52c567a8f4c6811508aad44711e8bd18528942e600c24619b391ec1b12656e7854e3c6b7f87242249d9c6f46bb4726258c3b5f20a8a4c6cb1eeafdf9df006c905b17752ec85a095a7549736a9c9292782b54e6dbc1480edf1dfdf2dd07e0160f3f49fc44b27d0048825117998776b09c19c75ff4"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x801) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x400, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r1, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xb0000004}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) syz_open_dev$sndmidi(&(0x7f0000000080), 0x4, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000280)=0x8) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000480)={"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"}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000051c0000200012800e00010069703665707370616e0000000c0002800600030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@xdp={0x2c, 0x3, 0x0, 0x3a}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="9800000000000000160100000200000089dc21a04dfae35dcaed1c6b9fbc9e0c309c08d1db31f5ab73d26437f8cb6afe7a20a96109b5942e6a46892869ba73c2dc72c9cb98b94d16ae9dc46db02124d3f39958c0cfd3d5c86a90561ee4ba2ea6c8c2491060820af4e280f7c36aecefeaf65c2181ef5b30e8921fc69a4706a00033bd82a31b071e3240525f2186cdec9f518832fae7fac80058000000000000001401000008000000b7e15ffbdf64992b70f6d476abad905a56c266fb246a5f99adb1a1343beca3d332b2410b42a71f96ab8bdc22f8eae7c4e21cb83e17f69fd79d840336aec678201bca0775b80000005000000000000000070100000100000073f27d882dae0b9521ac2664fa65f728ca248894aafb3ed8ec2ce20bee011c011b5afa23e0d507b86e1faec80485cfee3f93c84e3ad87b89bf00000000000000a0000000000000000401000002000000ff7a520b56cd2a12d240b2eac28db257f8be3608670f4b89a17d8c1d55aea0a43f00b961d20279cb7cc7e58d00aeee9059441517a8e399bd7a6f0baca5ab18445349ce241bb6ea5955ee10c70b5c7fdda1e3abdf8ead9935eb87793dd485bc28da0a8519b92ef7a175f8e56cf486ac366a48b6ff1d81f8eaedfe5a4c7eaac04bd218eb0b01a53e00b0f49209aebe1c004389ec23d7f5"], 0x1e0}, 0x0) 14.198701637s ago: executing program 2 (id=195): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) getgroups(0x0, &(0x7f0000000200)) setgid(0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @private2, 0x108}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa2ffffff}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)=0x1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRES8=r6], 0x20}, 0x1, 0x0, 0x0, 0x20040031}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) 14.137906145s ago: executing program 0 (id=196): r0 = getpgrp(0xffffffffffffffff) move_pages(r0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0xfffffff7, 0x80000002, 0x5fc0d994, 0x3ff, 0xc17, 0x8, 0x400], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4) r1 = syz_open_procfs(r0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0, 0x27}], 0x2, 0x0, 0x5) semget$private(0x0, 0x3, 0x211) 13.567377533s ago: executing program 0 (id=197): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c040"], 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x81, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x68db, 0x2, 0xffffffff, 0x0, 0x0, r7}, &(0x7f00000003c0), &(0x7f0000000180)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', r5, r7, 0x0, 0x5, 0x5}, 0x50) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xbe) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675"], 0x10}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) setpriority(0x2, 0x0, 0x1) 13.487508159s ago: executing program 2 (id=198): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioperm(0x284, 0x7f, 0xe3) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x6, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) ioperm(0x284, 0x7f, 0xe3) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x6, 0x4}) (async) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async) 13.334090105s ago: executing program 1 (id=199): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x400, 0x3, 0x1e000000, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"}) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x3, &(0x7f0000000000)=0x5}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x40, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) 13.182435936s ago: executing program 2 (id=200): ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000340)={0x0, 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {0x80000000}], 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x6, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000480)={r0, &(0x7f00000003c0), &(0x7f0000000400)}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() fchown(r1, r2, r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000005c0)) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000600)={0xc83c, 0x4, [{0x8}, {}, {}, {0x1}]}) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000640), &(0x7f0000000680)=0x30) r5 = eventfd(0x43) ioctl$FIONCLEX(r5, 0x5450) sendto$inet6(0xffffffffffffffff, &(0x7f00000006c0)="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", 0xfa, 0x40080c0, &(0x7f00000007c0)={0xa, 0x4e23, 0xe2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}, 0x1c) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000840)="0f090fa1b805008ed03e0f14fd0f01cf66d9e966b802119a190f23c80f21f86635080060000f23f8baf80c66b8a0d6868166efbafc0c66b80000000066efbaf80c66b81868c38566efbafc0c66ed66b9800000c00f326635000100000f30", 0x5e}], 0x1, 0x1, &(0x7f0000000900)=[@cr4={0x1, 0x100132}, @cr0={0x0, 0x10}], 0x2) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='mm_page_alloc\x00', r7, 0x0, 0xfffffffffffffff8}, 0x18) ppoll(&(0x7f00000009c0)=[{r6, 0x904e}, {r8, 0x1400}, {r1, 0x620}, {r7, 0x100}, {r7, 0x10}, {r1, 0x12}], 0x6, &(0x7f0000000a00), &(0x7f0000000a40)={[0x4e]}, 0x8) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000a80)={0x2a, 0x3}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x5) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000ac0)={0x10008, 0x0, &(0x7f0000ffc000/0x4000)=nil}) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000b00), &(0x7f0000000b40)=0xe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0x1a0, 0xd8, 0x298, 0x358, 0x1a0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000b80), {[{{@ip={@private=0xa010102, @multicast1, 0xffffff00, 0xff, 'veth0_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x5e, 0x1, 0x6}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x7}}}, {{@ip={@remote, @remote, 0xff000000, 0xffffff00, 'dvmrp0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x4, 0x2, 0x12}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x493, @broadcast, 0x4e24}}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0xffffff00, 0xffffffff, 'macvtap0\x00', 'veth0\x00', {0xff}, {0xff}, 0x8, 0x5, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x6, 0x0, 0x5], 0x4, 0x2}, {0x2, [0x4, 0x0, 0x2, 0x4, 0x2], 0x4, 0x4}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@multicast1, @local, 0xff, 0xffffff00, 'netpci0\x00', 'xfrm0\x00', {}, {0xff}, 0xff, 0x2, 0x8}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x0, 0x2, 0x3, 0x2, 0x0, 0x3], 0x0, 0x6}}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x2b}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000021c0)={r1, &(0x7f0000001140)="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", &(0x7f0000002140)=""/112, 0x4}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r7) setsockopt$MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000002240)={{0xa, 0x4e23, 0x5, @mcast1, 0xffffffff}, {0xa, 0x4e20, 0x2, @remote, 0xb47}, 0x0, {[0x2, 0xf, 0xe4, 0x7fff, 0x3, 0x17, 0x96d, 0x1c000000]}}, 0x5c) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f00000022c0)={0x0, r1}) dup(r10) madvise(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x10) 13.178066324s ago: executing program 1 (id=201): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x4, 0xc00, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0xf6, 0xaf, 0x3a, 0x20, 0x12d1, 0x8acb, 0x4093, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbee, 0x4, 0x1, 0x2, 0x80, 0x9, [{{0x9, 0x4, 0x25, 0x10, 0x3, 0xff, 0x2, 0x63, 0xda, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "8514b996"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xdac5, 0x40}, {0x6, 0x24, 0x1a, 0xa68, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x7f, 0xb66}, @mdlm_detail={0xfc, 0x24, 0x13, 0xf, "22001b79ad319f08bd7ff395ec0e8d67126f3c2307ce41f204efd20e5f98e62ae9e17494813a9565bad588208725ea7013e3d186b0def4eb5978eb2c871ab4b607059e162047dcebbb01de070da0c17c451ae5c9dc1bdb24fdbac81ef51584ae35fbdf77f08a0a2f786eeef551c6cdf1b10307bb11eb5fe283e1addbecf9bc72950e4d3e96dae5f1083536b3ed48d3b94cfe7c20098b7d981cd8927e26fb9b7d6c62488a22b9067ec88e20e1681151fcf812cb8dfcad1a190899370d45d5faa37f4b809476d1400b806d9b2a92007c6a98833849b3c393d32fa0f0c790ba69185b1cb1e32918018a760079ac4f0a2dfbfe1cbc0375c9184c"}, @mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0xfff9}]}, @uac_as={[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x0, 0x7, "3aed79", "056109"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x80, 0x2, 0x4, 0x9, "fbd1a9"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xd3, 0x1, 0x10, 0x3, "3bb4", '_5'}]}], [{{0x9, 0x5, 0x2, 0x0, 0x420, 0x1, 0x8, 0x3, [@generic={0x34, 0x5, "bac76387955b24fac117de83723608eebb864b443dd092ddeb589b10ce006ca0a7a7e85643855a099620533abd2dd1524c71"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x1, 0x7f, [@generic={0x1e, 0x21, "d6e31e7e408461923d5acf01c221a44c718cfc7d5eb67c81c5c702b6"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xe, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x30, 0x4}, @generic={0x61, 0x23, "9788227bf6c88a6b72e49b48266881647cdfad1ea155e2bd7c1dd1c36cceff0028b632210daaf0623dd9a127921ed0364bc9872f6f813283fe5071864c4a424dedce28a9288b3ac8f3ca3973d63e6e0c52e3deedc2cd029db6a300e57d19bc"}]}}]}}, {{0x9, 0x4, 0xc0, 0x3, 0x6, 0xf3, 0x69, 0xb3, 0x81, [@generic={0x79, 0x0, "dda2c8cd330f65380e8f41300ef49f44fd740e0aa50e1a3b02d854d5c604f65c02808bfb696545b3f54d8e422df0771d2fcaf444c996c5ae46812201fcdfb9fbade6aa1d5f13d57f8bafc42eda9d4d7956c9470fc2751cd0e4b55c6ae1ba91d5881d28ed09cc059bd2ac961b233ee85e9aaecad0ac3b00"}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0xc0}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x5, 0x6, "ddc9"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x5, 0x6, [0x3, 0x0, 0x1, 0x8, 0x8, 0x2], 0x92}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x6, 0x1, 0x1}]}], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0xf8, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x3, 0x6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0xfb, 0xc0, [@generic={0x63, 0x24, "a4cb28031344efb34dcbb81cf262ed3fbf8721b4d6be6fd518c165aae6dd4bb49a62955bf32b9416704c1de7609351a69577a0f62092a0d6605ff8bc80779beb74fa8b739ef713b6f90302aafd9947c7612a36b881d159fe3afa71293d7da22e2e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x3, 0x7d, 0x26, [@generic={0x6f, 0x31, "a6c5831402c1859740552694038897c3180ba134bd1ff1e87e1b6259ddb011a315150f760dbbd148495e57f80a123f4f1e2f1adbee253588e2ba96f032d2e808aac588a0611f2deef401deea818bc227cc8a2049a4774f033e9a1587ae9f998222b044aa6b30ae8715375eec64"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x6, 0x0, 0xfe, [@generic={0xe3, 0x21, "7fad6981a51a3037a4507fcb03396cdd70ab2c08df4894545e42429d48f32a46cba89725c12b44e3f1f7c068a1624b7c30dc72dde17da605d01390c6e51d83fe9fd55793b46b054a89d0664ca1063a3b50cd9e0ef9878306cb235a336cf25db71959f865b517aa64d3f58e2198b1d3cf833e40cff3abcf779cc2ad8a64da562f84bdb8497bcd75e316df6410643a5e60fffd0db3b1a9cae4cf6864723ccc5851b9a581ebe2cf1c5318d7dd77e7691257da838dda830c8af09d962d06c9ef77a1e1a394e3a4676a63129f8727b1f83ddb713c8cccb332776b1aa8ee77d5f0702be0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xd, 0x92, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x8, 0x4, 0x7, [@generic={0x19, 0xd, "ce08e358807a32e93b1b913744d374f227fe608fd622b9"}]}}]}}, {{0x9, 0x4, 0x50, 0x2f, 0x1, 0x6b, 0xcd, 0x6e, 0xa6, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x2, "bac140"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x94, 0x4, 0xba, 0xff, "6b04c19f53"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x8, 0xee, "6cc593ad"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x46, 0x4, 0xdd, 0x9, "ebffe7389c7cc677a2"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x1, 0x0, 0x3, "89d265"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x81, 0x8, "46aa40", ',h'}]}], [{{0x9, 0x5, 0xc, 0x1, 0x40, 0x80, 0x1, 0x6, [@generic={0xcd, 0x24, "71fa8c8198d994c669e98513dd5f03ab97787e2b920f8e97384b123f8a3258e7475ba45c98e274220a2337a0ae75502e7f421c5b2991447641a7fee29759616c766e7b029fdfc45c7d2d31150b6a1727817d02e452c549d9859d274c743765e6ae79437aa100d2e542c5636976b7fe6cd2f7944daa9600e61674d9728d1af6d15070cbf7296d03bef6495beca4fa99dda5deccab9c859f1d996ea644df1e16b36439ae3df65ee53cb98cba875f9693f5c7afb97920e953116f115db64c87e7aa994951bed11e0df16b76fa"}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x9, 0x3ff}]}}]}}, {{0x9, 0x4, 0xbe, 0x90, 0xd, 0x5c, 0x83, 0x52, 0x9, [], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x9, 0x4, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x43, 0x8c9}, @generic={0xa2, 0x31, "2e960e8406e96201281ea2307559c7fc7cd2c900780f6576e97f5d3e25e10dd8070c8de8bfbc48110f07207e486cc832c47e3f4d85bdb2ad76c2454ac8c57fc345a4a8cc721a2ab62df4c051bc8c2a8c38884c5c9878a05bfd81f246783d908bba3aba6fa6d7e95626c0026b9caa6ebbb2248851a7bd4d5adb669594fcf2c19fa7377c89aa12abccdda63b95c8050ee46b60919a940d9f26ece2beecb6401480"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x3, 0xe, 0x81, [@generic={0x95, 0xb, "3059f99a6cc6f513fff26b58dcd928b5fd2ed78b48b7e88d61068c8d16799dba1fda3a1638d4556cb54c84b0fb8a7cd7bf5bd821cd82eaf4567ab8dd36f53cd3225df8bab7d19793a8f32f5f7ae7e3bb815cd259db40142a01db5fd5109832e9fe2242d5ec2bf5b7a40d9fe796a4c534d2fcd24467ef68d9edc9611438a14a70bc5d6122c6f1c58ce420a954891ae97371fdc2"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x5, 0x84, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xd}, @generic={0xd1, 0x4, "d3688c913f6c36a81d92fe848438e6d3778c0593fc38516f1e88e4f0fa442186bf63cb82ecb005ed3709842bc75006969655ea4329176abfa4f08e5e231235654457f7cb18241a7246961d1ce7a58182175f3e64bec48a66cd449eafc6160778975cc5c26f636231026be12b53ee96f684f5bce602c9bbcb6789b3b01a07ba92021db5a433f4495b2549cc526010c2fca71881d06a807fb5c9fecdca8abaf505babb6eda27e2586ce54facfaad7b116bce0c9af4aac80cd81337b7826167a95ddb8cf37bfff2b9538001f403f815d1"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xc, 0xb, 0xc, [@generic={0xbb, 0x23, "efddecd4fb56df3365af09ef1dad11e98efbd28f87c9b99d8657249b2d0b558510de7490ad293ab12ca62434182f2034c09dccb700844bf7c514cd37a05b0ea7ebbf5ddde06d82ed110801330059fedc3cf3114caddcb8fe79cbfa414ab86ac05c96fcf0a9c8e8c44bbd18df654d492a241b0062523ed6b2f8c5654e9dd942bd7dd14687ef5213d3d188a619e1ddf2dc31f2cd0b25664fec564bda13bcb9d551297067e47a264cfb7d89f2ba18733bc35c58dd7efbfca21503"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xd, 0xf8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x7}, @generic={0xd, 0x23, "0021c6ead76be70a1c3467"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xe9, 0x9, 0x0, [@generic={0x60, 0x21, "64771cb1804eb4a90f2ac8e801aaec49408ddce56da7f98c30a56757818e31100c6e8891b2c23e5eaaffff6bab03cb1178b7b8e6132569ba6146bd2858d5a0c9d94d3386d38a24a0697a29fa742d00ce97c34a1d7361869b9a42a3e5524c"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x9, 0x0, 0x71, [@generic={0x3f, 0x31, "d1ded5deefc47006840061cbce7d94e8301fd637c5292a9d7c2ec212aa8e9b09b3098cd7c9e6fb3eebcbc275caba38db7d20c4b033272b21079c121a16"}, @generic={0xe8, 0xf, "384ef95da78361beaf73bb09a9d52b1c34922514942cea9ed2bbdd34c4ff4d3f76018414e0097744813264b3ff1d2b7d12d3cb5aa3085fd38176e10b5edbd9c87aa231394744fafcccaa3ad31ea09df40d1d4b9abf74d0cdfb00636c6ca2b295c22d034048c1065e34603cdf6205ec2d3c97d4fac18b3631c082a7d593240ff8b534d645f111732720fde86192280f357edd0ad624aedf2d75bcf8634d9396473867faa4699d44480c06efc98bdf3175080892ba3836a3b4216b9cdeea5be73250ad238f382247f3514ddced8a48953a86c060b04de926178b95734d7e69005ce02a8cefbb04"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x9, 0x6, 0xed, [@generic={0x65, 0x4, "b54a678cee9f337383f37ede47a12ed37ce4988874121121113642ee4bc003faa92bb4471181a1f39b14cd2b2a426c269b7879ef1467bfc36dff8b93fec846c47892b802770af7558b43f7c69f5383a57ebb20661b54e6eeca6841d1eec1ea3ad753ad"}, @generic={0x28, 0x2, "6ab64c6baf42d340acc1dfb87bf2ebb0d186d76584bca24b3128fb78222a1cedd89f3daf68b0"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8d0309f887ebf16e, 0x3, 0x6, 0x1, [@generic={0x24, 0x21, "3ebe04471c6cda52af04531549780ed57b65d9ec204085d4af78afe8feb5afbbd5dd"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x5, 0x8d, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x7, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x17, 0x101}]}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x0, 0x9, 0xb}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x8, 0x1}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0x3, 0x3a, 0x20, 0x2}, 0x42, &(0x7f00000000c0)={0x5, 0xf, 0x42, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x1, 0xa3, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "7e4f53c68dd8000d1e28e666d888e467"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0xd, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9dfd9c2f316b87951a6c4c0edd0ab083"}]}, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x44d}}, {0x67, &(0x7f0000000140)=@string={0x67, 0x3, "4a7070cec0ec5ca4711dfb654d92e67e51b7aa108bed3e014a43582f50c574fd0159d1d58fc8c47daa4c4c5832e9b6c11ba08c2ed195517cdd47d5f9778f144e7a054267fe8f85e4eb9257cb4949672ed91013324c670a637ab15da352d390c69fdbee6ca5"}}]}) (async) syz_usb_connect(0x4, 0xc00, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0xf6, 0xaf, 0x3a, 0x20, 0x12d1, 0x8acb, 0x4093, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbee, 0x4, 0x1, 0x2, 0x80, 0x9, [{{0x9, 0x4, 0x25, 0x10, 0x3, 0xff, 0x2, 0x63, 0xda, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "8514b996"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xdac5, 0x40}, {0x6, 0x24, 0x1a, 0xa68, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x7f, 0xb66}, @mdlm_detail={0xfc, 0x24, 0x13, 0xf, "22001b79ad319f08bd7ff395ec0e8d67126f3c2307ce41f204efd20e5f98e62ae9e17494813a9565bad588208725ea7013e3d186b0def4eb5978eb2c871ab4b607059e162047dcebbb01de070da0c17c451ae5c9dc1bdb24fdbac81ef51584ae35fbdf77f08a0a2f786eeef551c6cdf1b10307bb11eb5fe283e1addbecf9bc72950e4d3e96dae5f1083536b3ed48d3b94cfe7c20098b7d981cd8927e26fb9b7d6c62488a22b9067ec88e20e1681151fcf812cb8dfcad1a190899370d45d5faa37f4b809476d1400b806d9b2a92007c6a98833849b3c393d32fa0f0c790ba69185b1cb1e32918018a760079ac4f0a2dfbfe1cbc0375c9184c"}, @mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0xfff9}]}, @uac_as={[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x0, 0x7, "3aed79", "056109"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x80, 0x2, 0x4, 0x9, "fbd1a9"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xd3, 0x1, 0x10, 0x3, "3bb4", '_5'}]}], [{{0x9, 0x5, 0x2, 0x0, 0x420, 0x1, 0x8, 0x3, [@generic={0x34, 0x5, "bac76387955b24fac117de83723608eebb864b443dd092ddeb589b10ce006ca0a7a7e85643855a099620533abd2dd1524c71"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x1, 0x7f, [@generic={0x1e, 0x21, "d6e31e7e408461923d5acf01c221a44c718cfc7d5eb67c81c5c702b6"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xe, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x30, 0x4}, @generic={0x61, 0x23, "9788227bf6c88a6b72e49b48266881647cdfad1ea155e2bd7c1dd1c36cceff0028b632210daaf0623dd9a127921ed0364bc9872f6f813283fe5071864c4a424dedce28a9288b3ac8f3ca3973d63e6e0c52e3deedc2cd029db6a300e57d19bc"}]}}]}}, {{0x9, 0x4, 0xc0, 0x3, 0x6, 0xf3, 0x69, 0xb3, 0x81, [@generic={0x79, 0x0, "dda2c8cd330f65380e8f41300ef49f44fd740e0aa50e1a3b02d854d5c604f65c02808bfb696545b3f54d8e422df0771d2fcaf444c996c5ae46812201fcdfb9fbade6aa1d5f13d57f8bafc42eda9d4d7956c9470fc2751cd0e4b55c6ae1ba91d5881d28ed09cc059bd2ac961b233ee85e9aaecad0ac3b00"}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0xc0}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x5, 0x6, "ddc9"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x5, 0x6, [0x3, 0x0, 0x1, 0x8, 0x8, 0x2], 0x92}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x6, 0x1, 0x1}]}], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0xf8, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x3, 0x6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0xfb, 0xc0, [@generic={0x63, 0x24, "a4cb28031344efb34dcbb81cf262ed3fbf8721b4d6be6fd518c165aae6dd4bb49a62955bf32b9416704c1de7609351a69577a0f62092a0d6605ff8bc80779beb74fa8b739ef713b6f90302aafd9947c7612a36b881d159fe3afa71293d7da22e2e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x3, 0x7d, 0x26, [@generic={0x6f, 0x31, "a6c5831402c1859740552694038897c3180ba134bd1ff1e87e1b6259ddb011a315150f760dbbd148495e57f80a123f4f1e2f1adbee253588e2ba96f032d2e808aac588a0611f2deef401deea818bc227cc8a2049a4774f033e9a1587ae9f998222b044aa6b30ae8715375eec64"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x6, 0x0, 0xfe, [@generic={0xe3, 0x21, "7fad6981a51a3037a4507fcb03396cdd70ab2c08df4894545e42429d48f32a46cba89725c12b44e3f1f7c068a1624b7c30dc72dde17da605d01390c6e51d83fe9fd55793b46b054a89d0664ca1063a3b50cd9e0ef9878306cb235a336cf25db71959f865b517aa64d3f58e2198b1d3cf833e40cff3abcf779cc2ad8a64da562f84bdb8497bcd75e316df6410643a5e60fffd0db3b1a9cae4cf6864723ccc5851b9a581ebe2cf1c5318d7dd77e7691257da838dda830c8af09d962d06c9ef77a1e1a394e3a4676a63129f8727b1f83ddb713c8cccb332776b1aa8ee77d5f0702be0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xd, 0x92, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x8, 0x4, 0x7, [@generic={0x19, 0xd, "ce08e358807a32e93b1b913744d374f227fe608fd622b9"}]}}]}}, {{0x9, 0x4, 0x50, 0x2f, 0x1, 0x6b, 0xcd, 0x6e, 0xa6, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x2, "bac140"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x94, 0x4, 0xba, 0xff, "6b04c19f53"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x8, 0xee, "6cc593ad"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x46, 0x4, 0xdd, 0x9, "ebffe7389c7cc677a2"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x1, 0x0, 0x3, "89d265"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x81, 0x8, "46aa40", ',h'}]}], [{{0x9, 0x5, 0xc, 0x1, 0x40, 0x80, 0x1, 0x6, [@generic={0xcd, 0x24, "71fa8c8198d994c669e98513dd5f03ab97787e2b920f8e97384b123f8a3258e7475ba45c98e274220a2337a0ae75502e7f421c5b2991447641a7fee29759616c766e7b029fdfc45c7d2d31150b6a1727817d02e452c549d9859d274c743765e6ae79437aa100d2e542c5636976b7fe6cd2f7944daa9600e61674d9728d1af6d15070cbf7296d03bef6495beca4fa99dda5deccab9c859f1d996ea644df1e16b36439ae3df65ee53cb98cba875f9693f5c7afb97920e953116f115db64c87e7aa994951bed11e0df16b76fa"}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x9, 0x3ff}]}}]}}, {{0x9, 0x4, 0xbe, 0x90, 0xd, 0x5c, 0x83, 0x52, 0x9, [], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x9, 0x4, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x43, 0x8c9}, @generic={0xa2, 0x31, "2e960e8406e96201281ea2307559c7fc7cd2c900780f6576e97f5d3e25e10dd8070c8de8bfbc48110f07207e486cc832c47e3f4d85bdb2ad76c2454ac8c57fc345a4a8cc721a2ab62df4c051bc8c2a8c38884c5c9878a05bfd81f246783d908bba3aba6fa6d7e95626c0026b9caa6ebbb2248851a7bd4d5adb669594fcf2c19fa7377c89aa12abccdda63b95c8050ee46b60919a940d9f26ece2beecb6401480"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x3, 0xe, 0x81, [@generic={0x95, 0xb, "3059f99a6cc6f513fff26b58dcd928b5fd2ed78b48b7e88d61068c8d16799dba1fda3a1638d4556cb54c84b0fb8a7cd7bf5bd821cd82eaf4567ab8dd36f53cd3225df8bab7d19793a8f32f5f7ae7e3bb815cd259db40142a01db5fd5109832e9fe2242d5ec2bf5b7a40d9fe796a4c534d2fcd24467ef68d9edc9611438a14a70bc5d6122c6f1c58ce420a954891ae97371fdc2"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x5, 0x84, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xd}, @generic={0xd1, 0x4, "d3688c913f6c36a81d92fe848438e6d3778c0593fc38516f1e88e4f0fa442186bf63cb82ecb005ed3709842bc75006969655ea4329176abfa4f08e5e231235654457f7cb18241a7246961d1ce7a58182175f3e64bec48a66cd449eafc6160778975cc5c26f636231026be12b53ee96f684f5bce602c9bbcb6789b3b01a07ba92021db5a433f4495b2549cc526010c2fca71881d06a807fb5c9fecdca8abaf505babb6eda27e2586ce54facfaad7b116bce0c9af4aac80cd81337b7826167a95ddb8cf37bfff2b9538001f403f815d1"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xc, 0xb, 0xc, [@generic={0xbb, 0x23, "efddecd4fb56df3365af09ef1dad11e98efbd28f87c9b99d8657249b2d0b558510de7490ad293ab12ca62434182f2034c09dccb700844bf7c514cd37a05b0ea7ebbf5ddde06d82ed110801330059fedc3cf3114caddcb8fe79cbfa414ab86ac05c96fcf0a9c8e8c44bbd18df654d492a241b0062523ed6b2f8c5654e9dd942bd7dd14687ef5213d3d188a619e1ddf2dc31f2cd0b25664fec564bda13bcb9d551297067e47a264cfb7d89f2ba18733bc35c58dd7efbfca21503"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xd, 0xf8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x7}, @generic={0xd, 0x23, "0021c6ead76be70a1c3467"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xe9, 0x9, 0x0, [@generic={0x60, 0x21, "64771cb1804eb4a90f2ac8e801aaec49408ddce56da7f98c30a56757818e31100c6e8891b2c23e5eaaffff6bab03cb1178b7b8e6132569ba6146bd2858d5a0c9d94d3386d38a24a0697a29fa742d00ce97c34a1d7361869b9a42a3e5524c"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x9, 0x0, 0x71, [@generic={0x3f, 0x31, "d1ded5deefc47006840061cbce7d94e8301fd637c5292a9d7c2ec212aa8e9b09b3098cd7c9e6fb3eebcbc275caba38db7d20c4b033272b21079c121a16"}, @generic={0xe8, 0xf, "384ef95da78361beaf73bb09a9d52b1c34922514942cea9ed2bbdd34c4ff4d3f76018414e0097744813264b3ff1d2b7d12d3cb5aa3085fd38176e10b5edbd9c87aa231394744fafcccaa3ad31ea09df40d1d4b9abf74d0cdfb00636c6ca2b295c22d034048c1065e34603cdf6205ec2d3c97d4fac18b3631c082a7d593240ff8b534d645f111732720fde86192280f357edd0ad624aedf2d75bcf8634d9396473867faa4699d44480c06efc98bdf3175080892ba3836a3b4216b9cdeea5be73250ad238f382247f3514ddced8a48953a86c060b04de926178b95734d7e69005ce02a8cefbb04"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x9, 0x6, 0xed, [@generic={0x65, 0x4, "b54a678cee9f337383f37ede47a12ed37ce4988874121121113642ee4bc003faa92bb4471181a1f39b14cd2b2a426c269b7879ef1467bfc36dff8b93fec846c47892b802770af7558b43f7c69f5383a57ebb20661b54e6eeca6841d1eec1ea3ad753ad"}, @generic={0x28, 0x2, "6ab64c6baf42d340acc1dfb87bf2ebb0d186d76584bca24b3128fb78222a1cedd89f3daf68b0"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8d0309f887ebf16e, 0x3, 0x6, 0x1, [@generic={0x24, 0x21, "3ebe04471c6cda52af04531549780ed57b65d9ec204085d4af78afe8feb5afbbd5dd"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x5, 0x8d, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x7, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x17, 0x101}]}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x0, 0x9, 0xb}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x8, 0x1}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0x3, 0x3a, 0x20, 0x2}, 0x42, &(0x7f00000000c0)={0x5, 0xf, 0x42, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x1, 0xa3, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "7e4f53c68dd8000d1e28e666d888e467"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0xd, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9dfd9c2f316b87951a6c4c0edd0ab083"}]}, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x44d}}, {0x67, &(0x7f0000000140)=@string={0x67, 0x3, "4a7070cec0ec5ca4711dfb654d92e67e51b7aa108bed3e014a43582f50c574fd0159d1d58fc8c47daa4c4c5832e9b6c11ba08c2ed195517cdd47d5f9778f144e7a054267fe8f85e4eb9257cb4949672ed91013324c670a637ab15da352d390c69fdbee6ca5"}}]}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="449d060721b9e6bb51f207000000", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r4, 0x29, 0x4b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x34324258, 0x0, 0x8, [{0x6, 0x5}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x100}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0) 12.965910262s ago: executing program 2 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000ff7000/0x3000)=nil, 0x400c) (async) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x607, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2523f330}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x27608eb7}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a2771cb}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d3bd42e}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0xa4}}, 0x4) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x404e23}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0), 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) (async) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e) 10.47668582s ago: executing program 0 (id=203): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 10.39074934s ago: executing program 0 (id=204): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$COMEDI_CMDTEST(r6, 0x8050640a, &(0x7f0000000040)={0x1, 0x1, 0x80, 0xffff, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0x7fff, 0x100, 0x401, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20000004) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000010bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 0s ago: executing program 32 (id=186): syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 66.035342][ T30] audit: type=1400 audit(1760533289.477:62): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.058643][ T30] audit: type=1400 audit(1760533289.497:63): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.061961][ T5798] cgroup: Unknown subsys name 'net' [ 66.087264][ T30] audit: type=1400 audit(1760533289.527:64): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.192625][ T5798] cgroup: Unknown subsys name 'cpuset' [ 66.200878][ T5798] cgroup: Unknown subsys name 'rlimit' [ 66.330578][ T30] audit: type=1400 audit(1760533289.777:65): avc: denied { setattr } for pid=5798 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.354264][ T30] audit: type=1400 audit(1760533289.777:66): avc: denied { create } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.390471][ T30] audit: type=1400 audit(1760533289.777:67): avc: denied { write } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.410836][ T30] audit: type=1400 audit(1760533289.777:68): avc: denied { read } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.431094][ T30] audit: type=1400 audit(1760533289.797:69): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.455989][ T30] audit: type=1400 audit(1760533289.797:70): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.467806][ T5800] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.488137][ T30] audit: type=1400 audit(1760533289.827:71): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.453824][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.940096][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.958904][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.966483][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.974770][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.984520][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.992216][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.000471][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.007592][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.020471][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.031671][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.038981][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.049067][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.056767][ T5136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.087001][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.087427][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.109679][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.111101][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.124400][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.130018][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.132085][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.138872][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.155265][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.162548][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.170290][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.177491][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.636913][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 70.748935][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 70.778823][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 70.858788][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 70.868274][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 70.886207][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.893884][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.901240][ T5808] bridge_slave_0: entered allmulticast mode [ 70.908022][ T5808] bridge_slave_0: entered promiscuous mode [ 70.932056][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.939126][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.946456][ T5808] bridge_slave_1: entered allmulticast mode [ 70.953150][ T5808] bridge_slave_1: entered promiscuous mode [ 71.058849][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.076136][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.083013][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.095243][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.102415][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.109472][ T5815] bridge_slave_0: entered allmulticast mode [ 71.116430][ T5815] bridge_slave_0: entered promiscuous mode [ 71.128357][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.137521][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.144998][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.152120][ T5820] bridge_slave_0: entered allmulticast mode [ 71.158764][ T5820] bridge_slave_0: entered promiscuous mode [ 71.170049][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.177124][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.184317][ T5815] bridge_slave_1: entered allmulticast mode [ 71.191306][ T5815] bridge_slave_1: entered promiscuous mode [ 71.220734][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.227814][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.234994][ T5820] bridge_slave_1: entered allmulticast mode [ 71.241755][ T5820] bridge_slave_1: entered promiscuous mode [ 71.301996][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.311849][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.318960][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.326233][ T5812] bridge_slave_0: entered allmulticast mode [ 71.332991][ T5812] bridge_slave_0: entered promiscuous mode [ 71.348218][ T5808] team0: Port device team_slave_0 added [ 71.364196][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.373394][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.380656][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.387850][ T5812] bridge_slave_1: entered allmulticast mode [ 71.394808][ T5812] bridge_slave_1: entered promiscuous mode [ 71.401285][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.408357][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.415564][ T5822] bridge_slave_0: entered allmulticast mode [ 71.422422][ T5822] bridge_slave_0: entered promiscuous mode [ 71.430821][ T5808] team0: Port device team_slave_1 added [ 71.436966][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.444038][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.451647][ T5822] bridge_slave_1: entered allmulticast mode [ 71.458321][ T5822] bridge_slave_1: entered promiscuous mode [ 71.466764][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.511971][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.563562][ T5815] team0: Port device team_slave_0 added [ 71.579933][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.595181][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.602261][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.628461][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.641946][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.653083][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.663602][ T5815] team0: Port device team_slave_1 added [ 71.670838][ T5820] team0: Port device team_slave_0 added [ 71.678369][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.687897][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.695085][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.721543][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.760127][ T5820] team0: Port device team_slave_1 added [ 71.802801][ T5822] team0: Port device team_slave_0 added [ 71.810745][ T5812] team0: Port device team_slave_0 added [ 71.825106][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.832301][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.858391][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.871406][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.878319][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.904454][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.916361][ T5822] team0: Port device team_slave_1 added [ 71.923413][ T5812] team0: Port device team_slave_1 added [ 71.946427][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.953420][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.979552][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.021048][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.027986][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.053976][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.082572][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.089507][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.116401][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.127016][ T5824] Bluetooth: hci0: command tx timeout [ 72.128564][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.139711][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.165906][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.180544][ T5824] Bluetooth: hci2: command tx timeout [ 72.180549][ T5818] Bluetooth: hci1: command tx timeout [ 72.198629][ T5808] hsr_slave_0: entered promiscuous mode [ 72.205717][ T5808] hsr_slave_1: entered promiscuous mode [ 72.221459][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.228392][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.254837][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.270214][ T5824] Bluetooth: hci3: command tx timeout [ 72.270220][ T5818] Bluetooth: hci4: command tx timeout [ 72.312387][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.319322][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.345596][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.385314][ T5815] hsr_slave_0: entered promiscuous mode [ 72.391468][ T5815] hsr_slave_1: entered promiscuous mode [ 72.397337][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 72.403290][ T5815] Cannot create hsr debugfs directory [ 72.413449][ T5820] hsr_slave_0: entered promiscuous mode [ 72.419517][ T5820] hsr_slave_1: entered promiscuous mode [ 72.425559][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 72.431298][ T5820] Cannot create hsr debugfs directory [ 72.441800][ T5822] hsr_slave_0: entered promiscuous mode [ 72.447855][ T5822] hsr_slave_1: entered promiscuous mode [ 72.454685][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 72.460425][ T5822] Cannot create hsr debugfs directory [ 72.559168][ T5812] hsr_slave_0: entered promiscuous mode [ 72.565300][ T5812] hsr_slave_1: entered promiscuous mode [ 72.572016][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 72.577730][ T5812] Cannot create hsr debugfs directory [ 72.929210][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.939923][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.950336][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.968830][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.011177][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.022666][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.044322][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.054777][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.114378][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.123777][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.137706][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.154047][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.223978][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.265209][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.275234][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.286114][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.305069][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.359071][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.376137][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.388645][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.395862][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.410826][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.419907][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.438420][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.454602][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.461698][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.508537][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.551029][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.568656][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.584756][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.591878][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.624114][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.652840][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.659889][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.669019][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.676099][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.684958][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.692033][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.751992][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 73.752005][ T30] audit: type=1400 audit(1760533297.197:86): avc: denied { sys_module } for pid=5808 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.761623][ T5815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.794731][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.867655][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.915193][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.961803][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.977880][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.995904][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.003023][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.027052][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.053007][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.072590][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.079718][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.144691][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.151824][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.173514][ T5808] veth0_vlan: entered promiscuous mode [ 74.184982][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.190150][ T5824] Bluetooth: hci0: command tx timeout [ 74.199262][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.206430][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.246500][ T5808] veth1_vlan: entered promiscuous mode [ 74.261017][ T5824] Bluetooth: hci2: command tx timeout [ 74.261143][ T5818] Bluetooth: hci1: command tx timeout [ 74.301519][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.312131][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.340491][ T5818] Bluetooth: hci4: command tx timeout [ 74.341063][ T5824] Bluetooth: hci3: command tx timeout [ 74.364905][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.376251][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.416077][ T5808] veth0_macvtap: entered promiscuous mode [ 74.453927][ T5808] veth1_macvtap: entered promiscuous mode [ 74.465279][ T5815] veth0_vlan: entered promiscuous mode [ 74.526485][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.537606][ T5815] veth1_vlan: entered promiscuous mode [ 74.574381][ T5820] veth0_vlan: entered promiscuous mode [ 74.584658][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.637049][ T4290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.646860][ T4290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.673580][ T5820] veth1_vlan: entered promiscuous mode [ 74.686494][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.693655][ T4290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.703485][ T4290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.739237][ T5815] veth0_macvtap: entered promiscuous mode [ 74.792341][ T5815] veth1_macvtap: entered promiscuous mode [ 74.814767][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.849382][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.898098][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.931930][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.941816][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.994012][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.003159][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.018049][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.027223][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.042411][ T5820] veth0_macvtap: entered promiscuous mode [ 75.053293][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.061995][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.080413][ T5820] veth1_macvtap: entered promiscuous mode [ 75.104527][ T30] audit: type=1400 audit(1760533298.547:87): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.21FDpk/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.135394][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.148098][ T30] audit: type=1400 audit(1760533298.547:88): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.170336][ T30] audit: type=1400 audit(1760533298.547:89): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.21FDpk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.197978][ T30] audit: type=1400 audit(1760533298.547:90): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.199823][ T5812] veth0_vlan: entered promiscuous mode [ 75.221272][ T30] audit: type=1400 audit(1760533298.547:91): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.21FDpk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.264303][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.287712][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.301659][ T30] audit: type=1400 audit(1760533298.567:92): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.21FDpk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.345407][ T30] audit: type=1400 audit(1760533298.587:93): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.374042][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.383198][ T30] audit: type=1400 audit(1760533298.617:94): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.397704][ T5822] veth0_vlan: entered promiscuous mode [ 75.411837][ T30] audit: type=1400 audit(1760533298.617:95): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="gadgetfs" ino=8239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.456949][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.467306][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.490749][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.498706][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.511087][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.525198][ T5812] veth1_vlan: entered promiscuous mode [ 75.538822][ T5822] veth1_vlan: entered promiscuous mode [ 75.617342][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.628424][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.668271][ T5822] veth0_macvtap: entered promiscuous mode [ 75.685399][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.696197][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.705236][ T5822] veth1_macvtap: entered promiscuous mode [ 75.731114][ T5812] veth0_macvtap: entered promiscuous mode [ 75.809100][ T5812] veth1_macvtap: entered promiscuous mode [ 75.819781][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.839479][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.857198][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.882726][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.965273][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 75.999206][ T5940] binder: 5939:5940 unknown command 1073938440 [ 76.020294][ T5940] binder: 5939:5940 ioctl c0306201 200000000080 returned -22 [ 76.044281][ T5940] binder: BINDER_SET_CONTEXT_MGR already set [ 76.054806][ T5940] binder: 5939:5940 ioctl 4018620d 200000000040 returned -16 [ 76.165810][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.178743][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.189540][ T5949] Zero length message leads to an empty skb [ 76.270433][ T5824] Bluetooth: hci0: command tx timeout [ 76.340136][ T5824] Bluetooth: hci1: command tx timeout [ 76.351284][ T5824] Bluetooth: hci2: command tx timeout [ 76.420392][ T5824] Bluetooth: hci4: command tx timeout [ 76.430352][ T5824] Bluetooth: hci3: command tx timeout [ 76.465168][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 76.564906][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.684985][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.722876][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.795595][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.854389][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.863326][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.872060][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.882214][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.107294][ T5965] autofs: Unknown parameter '\Tu 'g[3?찯7JQ [ 77.107294][ T5965] ^ϒ3 9mq[˥ĺ:]pFvjvQ HID v0.00 Device [syz1] on syz0 [ 85.705416][ T30] audit: type=1400 audit(1760533308.767:161): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=2792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.758197][ T30] audit: type=1400 audit(1760533308.777:162): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.868400][ T30] audit: type=1400 audit(1760533308.777:163): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2792 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.040107][ T30] audit: type=1400 audit(1760533309.007:164): avc: denied { read write } for pid=6095 comm="syz.0.42" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.171367][ T6105] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.528459][ T30] audit: type=1400 audit(1760533309.007:165): avc: denied { open } for pid=6095 comm="syz.0.42" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.551695][ T30] audit: type=1400 audit(1760533309.627:166): avc: denied { name_bind } for pid=6100 comm="syz.4.43" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 86.722534][ T1207] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 86.738705][ T1207] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 86.764160][ T6109] random: crng reseeded on system resumption [ 86.825182][ T1207] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 86.856760][ T1207] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 86.867971][ T5897] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 87.073013][ T5897] usb 3-1: device descriptor read/64, error -32 [ 87.381187][ T5897] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 87.484255][ T6117] trusted_key: encrypted_key: insufficient parameters specified [ 87.496123][ T6117] trusted_key: encrypted_key: insufficient parameters specified [ 87.600090][ T5897] usb 3-1: device descriptor read/64, error -32 [ 87.607801][ T6120] netlink: 44 bytes leftover after parsing attributes in process `syz.4.46'. [ 87.890122][ T5897] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 87.920347][ T5897] usb 3-1: device descriptor read/8, error -32 [ 88.432793][ T5897] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 88.480490][ T5897] usb 3-1: device descriptor read/8, error -32 [ 88.609117][ T5897] raw-gadget.1 gadget.2: failed to queue suspend event [ 88.618897][ T6063] raw-gadget.1 gadget.2: failed to queue disconnect event [ 88.679798][ T5870] usb 3-1: USB disconnect, device number 2 [ 88.726104][ T979] IPVS: starting estimator thread 0... [ 89.120896][ T6141] IPVS: using max 63 ests per chain, 151200 per kthread [ 89.531785][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 89.531801][ T30] audit: type=1400 audit(1760533312.977:177): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.820068][ T979] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.012527][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 90.036599][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.061181][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.084020][ T979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.110081][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.120443][ T979] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.132706][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.153781][ T979] usb 4-1: config 0 descriptor?? [ 90.241985][ T24] usb 3-1: device descriptor read/64, error -71 [ 90.478742][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.487241][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.508441][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.630087][ T24] usb 3-1: device descriptor read/64, error -71 [ 90.638021][ T6165] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 90.760659][ T24] usb usb3-port1: attempt power cycle [ 90.772625][ T30] audit: type=1400 audit(1760533314.217:178): avc: denied { create } for pid=6168 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 90.936697][ T30] audit: type=1400 audit(1760533314.247:179): avc: denied { lock } for pid=6168 comm="syz.1.59" path="socket:[8111]" dev="sockfs" ino=8111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 90.939895][ T6169] mmap: syz.0.60 (6169) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.035835][ T6173] overlayfs: missing 'lowerdir' [ 91.180367][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.269439][ T24] usb 3-1: device descriptor read/8, error -71 [ 91.334804][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 91.532632][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.619552][ T24] usb 3-1: device descriptor read/8, error -71 [ 91.731966][ T24] usb usb3-port1: unable to enumerate USB device [ 91.816518][ T30] audit: type=1400 audit(1760533315.257:180): avc: denied { read } for pid=6183 comm="syz.4.63" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.851891][ T30] audit: type=1400 audit(1760533315.257:181): avc: denied { open } for pid=6183 comm="syz.4.63" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.886896][ T30] audit: type=1400 audit(1760533315.257:182): avc: denied { ioctl } for pid=6183 comm="syz.4.63" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.913942][ T30] audit: type=1400 audit(1760533315.327:183): avc: denied { mount } for pid=6187 comm="syz.0.64" name="/" dev="hugetlbfs" ino=9536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 91.936522][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.947748][ T6189] ======================================================= [ 91.947748][ T6189] WARNING: The mand mount option has been deprecated and [ 91.947748][ T6189] and is ignored by this kernel. Remove the mand [ 91.947748][ T6189] option from the mount to silence this warning. [ 91.947748][ T6189] ======================================================= [ 91.960700][ T30] audit: type=1400 audit(1760533315.387:184): avc: denied { remount } for pid=6187 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 92.002416][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.040805][ T979] usbhid 4-1:0.0: can't add hid device: -71 [ 92.047001][ T979] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 92.090100][ T6189] hugetlbfs: Bad value 't' for mount option 'size' [ 92.090100][ T6189] [ 92.102376][ T979] usb 4-1: USB disconnect, device number 2 [ 92.123560][ T30] audit: type=1400 audit(1760533315.527:185): avc: denied { getopt } for pid=6190 comm="syz.3.65" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.291049][ T30] audit: type=1400 audit(1760533315.737:186): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 92.744984][ T6204] ubi31: attaching mtd0 [ 92.847263][ T6206] capability: warning: `syz.1.69' uses deprecated v2 capabilities in a way that may be insecure [ 92.859755][ T6206] 9pnet_virtio: no channels available for device 127.0.0.1 [ 93.021529][ T6204] ubi31: scanning is finished [ 93.026394][ T6204] ubi31: empty MTD device detected [ 93.090086][ T5817] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.171007][ T6204] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 93.253890][ T5817] usb 1-1: config 3 has an invalid interface number: 192 but max is 0 [ 93.272309][ T5817] usb 1-1: config 3 has no interface number 0 [ 93.321976][ T5817] usb 1-1: New USB device found, idVendor=0403, idProduct=d011, bcdDevice=a5.97 [ 93.343678][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.397545][ T5817] usb 1-1: Product: syz [ 93.401809][ T5817] usb 1-1: Manufacturer: syz [ 93.406533][ T5817] usb 1-1: SerialNumber: syz [ 93.680163][ T979] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.889589][ T5817] ftdi_sio 1-1:3.192: FTDI USB Serial Device converter detected [ 94.365262][ T5817] ftdi_sio ttyUSB0: unknown device type: 0xa597 [ 94.885954][ T979] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 94.897573][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 94.962217][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 94.973185][ T6233] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 95.048140][ T6234] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 95.168535][ T979] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 95.179348][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.256065][ T979] usb 5-1: Product: syz [ 95.290102][ T979] usb 5-1: Manufacturer: syz [ 95.294814][ T979] usb 5-1: SerialNumber: syz [ 95.346469][ T979] usb 5-1: config 0 descriptor?? [ 95.427109][ T979] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 95.446566][ T777] usb 1-1: USB disconnect, device number 2 [ 95.473303][ T777] ftdi_sio 1-1:3.192: device disconnected [ 96.892556][ T6254] No control pipe specified [ 97.059349][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 97.059364][ T30] audit: type=1400 audit(1760533320.497:199): avc: denied { create } for pid=6256 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.152741][ T6257] geneve2: entered promiscuous mode [ 97.206626][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 40001 - 0 [ 97.250753][ T30] audit: type=1400 audit(1760533320.657:200): avc: denied { mount } for pid=6258 comm="syz.3.82" name="/" dev="ramfs" ino=9655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.280101][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 40001 - 0 [ 97.303590][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 40001 - 0 [ 97.361379][ T30] audit: type=1400 audit(1760533320.667:201): avc: denied { setattr } for pid=6258 comm="syz.3.82" name="NETLINK" dev="sockfs" ino=9648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.777014][ T30] audit: type=1400 audit(1760533321.187:202): avc: denied { connect } for pid=6265 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.798799][ T777] usb 5-1: USB disconnect, device number 3 [ 97.806211][ T6260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.909517][ T30] audit: type=1400 audit(1760533321.197:203): avc: denied { shutdown } for pid=6265 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.019325][ T30] audit: type=1400 audit(1760533321.197:204): avc: denied { read } for pid=6265 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.087871][ T30] audit: type=1400 audit(1760533321.307:205): avc: denied { map } for pid=6265 comm="syz.1.84" path="socket:[10550]" dev="sockfs" ino=10550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.436684][ T30] audit: type=1400 audit(1760533321.877:206): avc: denied { setopt } for pid=6277 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.738819][ T30] audit: type=1400 audit(1760533322.177:207): avc: denied { read write } for pid=6283 comm="syz.3.88" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.770212][ T30] audit: type=1400 audit(1760533322.177:208): avc: denied { open } for pid=6283 comm="syz.3.88" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.088993][ T6289] warning: `syz.0.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.199475][ T6296] input: syz1 as /devices/virtual/input/input7 [ 99.310251][ T5817] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.486274][ T6302] netlink: 165 bytes leftover after parsing attributes in process `syz.0.93'. [ 99.967496][ T5817] usb 5-1: config 255 has an invalid interface number: 181 but max is 0 [ 100.051144][ T1207] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.062007][ T5817] usb 5-1: config 255 has no interface number 0 [ 100.069832][ T5817] usb 5-1: config 255 interface 181 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 100.092879][ T5817] usb 5-1: config 255 interface 181 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 100.149700][ T5817] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=43.b6 [ 100.160236][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.164548][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.191938][ T5817] usb 5-1: Product: syz [ 100.197258][ T5817] usb 5-1: Manufacturer: syz [ 100.206063][ T5817] usb 5-1: SerialNumber: syz [ 100.209473][ T6260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.214045][ T6294] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.227157][ T6260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40001 - 0 [ 100.229275][ T1207] usb 2-1: device descriptor read/64, error -71 [ 100.320136][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 100.329828][ T24] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 100.338397][ T24] usb 1-1: config 0 has no interface number 0 [ 100.411765][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 100.421384][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.431767][ T24] usb 1-1: Product: syz [ 100.434103][ T6260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.435930][ T24] usb 1-1: Manufacturer: syz [ 100.435949][ T24] usb 1-1: SerialNumber: syz [ 100.463401][ T6260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40001 - 0 [ 100.475252][ T24] usb 1-1: config 0 descriptor?? [ 100.551548][ T1207] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.667685][ T6260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.681020][ T6260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40001 - 0 [ 100.904748][ T24] radio-si470x 1-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 100.955182][ T6309] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 101.042449][ T6309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.068126][ T6309] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 101.185635][ T1207] usb 2-1: device descriptor read/64, error -71 [ 101.268341][ T24] radio-si470x 1-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 101.375089][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 40001 - 0 [ 101.382053][ T1207] usb usb2-port1: attempt power cycle [ 101.383768][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 101.419747][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 40001 - 0 [ 101.428232][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 101.450123][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 40001 - 0 [ 101.459503][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 101.489129][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 40001 - 0 [ 101.498625][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 101.732737][ T1207] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.736010][ T979] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.817362][ T1207] usb 2-1: device descriptor read/8, error -71 [ 101.953885][ T24] radio-si470x 1-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 101.963221][ T24] radio-si470x 1-1:0.35: si470x_get_scratch: si470x_get_report returned -110 [ 101.974847][ T24] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 102.010354][ T24] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 102.037707][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'. [ 102.081278][ T1207] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.100070][ T979] usb 4-1: device descriptor read/64, error -71 [ 102.101067][ T1207] usb 2-1: device descriptor read/8, error -71 [ 102.220837][ T1207] usb usb2-port1: unable to enumerate USB device [ 102.334044][ T24] usb 1-1: USB disconnect, device number 3 [ 102.389553][ T5817] ti_usb_3410_5052 5-1:255.181: TI USB 3410 1 port adapter converter detected [ 102.441281][ T979] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.466786][ T5817] ti_usb_3410_5052 5-1:255.181: missing endpoints [ 102.540894][ T5817] usb 5-1: USB disconnect, device number 4 [ 102.580123][ T979] usb 4-1: device descriptor read/64, error -71 [ 102.714945][ T979] usb usb4-port1: attempt power cycle [ 102.798578][ T6356] sp0: Synchronizing with TNC [ 102.808354][ T5870] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.860707][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.868748][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.879741][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 102.879755][ T30] audit: type=1400 audit(1760533327.320:230): avc: denied { write } for pid=6353 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.942290][ T6361] bridge_slave_1: left allmulticast mode [ 102.948028][ T6361] bridge_slave_1: left promiscuous mode [ 102.955910][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.004762][ T6361] bridge_slave_0: left allmulticast mode [ 103.011802][ T6361] bridge_slave_0: left promiscuous mode [ 103.019107][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.098699][ T979] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.150936][ T979] usb 4-1: device descriptor read/8, error -71 [ 103.157232][ T30] audit: type=1400 audit(1760533327.590:231): avc: denied { bind } for pid=6353 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.178663][ T5870] usb 2-1: config 255 has an invalid interface number: 181 but max is 0 [ 103.189233][ T5870] usb 2-1: config 255 has no interface number 0 [ 103.200949][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.540127][ T5870] usb 2-1: config 255 interface 181 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 103.722732][ T979] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.730043][ T5870] usb 2-1: config 255 interface 181 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 103.744087][ T5870] usb 2-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=43.b6 [ 103.753726][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.761931][ T5870] usb 2-1: Product: syz [ 103.766153][ T5870] usb 2-1: Manufacturer: syz [ 103.780844][ T5870] usb 2-1: SerialNumber: syz [ 103.784226][ T24] usb 3-1: config 0 has an invalid interface number: 73 but max is 0 [ 103.798000][ T6341] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.810888][ T979] usb 4-1: device descriptor read/8, error -71 [ 103.826979][ T24] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 103.846019][ T24] usb 3-1: config 0 has no interface number 0 [ 103.878006][ T24] usb 3-1: config 0 interface 73 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 103.890462][ T24] usb 3-1: config 0 interface 73 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 103.901792][ T24] usb 3-1: config 0 interface 73 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 103.914458][ T24] usb 3-1: config 0 interface 73 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 103.925726][ T979] usb usb4-port1: unable to enumerate USB device [ 103.933131][ T24] usb 3-1: config 0 interface 73 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 103.944118][ T24] usb 3-1: config 0 interface 73 altsetting 0 endpoint 0x8 has invalid maxpacket 1544, setting to 64 [ 103.956693][ T24] usb 3-1: config 0 interface 73 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 103.974636][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice=75.65 [ 103.986983][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.996868][ T24] usb 3-1: Product: ࠁ [ 104.001158][ T24] usb 3-1: Manufacturer: Ц [ 104.005853][ T24] usb 3-1: SerialNumber: ᠊ [ 104.381781][ T6368] netlink: 'syz.1.98': attribute type 10 has an invalid length. [ 104.412843][ T6368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.445425][ T6368] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 104.593565][ T24] usb 3-1: config 0 descriptor?? [ 104.729637][ T30] audit: type=1400 audit(1760533329.160:232): avc: denied { ioctl } for pid=6371 comm="syz.0.104" path="socket:[9971]" dev="sockfs" ino=9971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.756955][ T30] audit: type=1400 audit(1760533329.190:233): avc: denied { bind } for pid=6371 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.796189][ T30] audit: type=1400 audit(1760533329.190:234): avc: denied { read } for pid=6371 comm="syz.0.104" path="socket:[9971]" dev="sockfs" ino=9971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.818977][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.853219][ T30] audit: type=1400 audit(1760533329.230:235): avc: denied { create } for pid=6373 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 104.876415][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.933418][ T24] snd-usb-audio 3-1:0.73: probe with driver snd-usb-audio failed with error -2 [ 104.948664][ T24] usb 3-1: USB disconnect, device number 7 [ 104.979860][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.73/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.030862][ T979] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.038858][ T5932] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.180037][ T5897] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 105.190061][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 105.196897][ T5932] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 105.207522][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.219165][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.227108][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 105.238334][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.250281][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 105.263180][ T5932] usb 1-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 105.272506][ T979] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 105.280747][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.288746][ T979] usb 4-1: config 0 has no interface number 0 [ 105.294897][ T979] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 105.306954][ T979] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 105.317648][ T5932] usb 1-1: config 0 descriptor?? [ 105.322913][ T979] usb 4-1: config 0 interface 88 has no altsetting 0 [ 105.332462][ T979] usb 4-1: string descriptor 0 read error: -22 [ 105.333298][ T6372] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 105.338873][ T979] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 105.362568][ T979] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 105.364393][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.380477][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.391569][ T979] usb 4-1: config 0 descriptor?? [ 105.431236][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 105.438899][ T5897] usb 5-1: can't read configurations, error -71 [ 105.461539][ T979] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input8 [ 105.563068][ T5932] appledisplay 1-1:0.0: Error while getting initial brightness: -71 [ 105.582507][ T5932] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -71 [ 105.607780][ T5932] usb 1-1: USB disconnect, device number 4 [ 105.617836][ T5981] usb 4-1: USB disconnect, device number 7 [ 105.639157][ T6097] udevd[6097]: Error opening device "/dev/input/event4": No such device [ 105.648019][ T6097] udevd[6097]: Unable to EVIOCGABS device "/dev/input/event4" [ 105.669307][ T6097] udevd[6097]: Unable to EVIOCGABS device "/dev/input/event4" [ 105.766183][ T5870] ti_usb_3410_5052 2-1:255.181: TI USB 3410 1 port adapter converter detected [ 105.777380][ T5870] ti_usb_3410_5052 2-1:255.181: missing endpoints [ 105.791722][ T5870] usb 2-1: USB disconnect, device number 7 [ 105.840053][ T979] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 105.991636][ T979] usb 3-1: config 8 has an invalid interface number: 249 but max is 0 [ 106.014186][ T979] usb 3-1: config 8 has no interface number 0 [ 106.023408][ T979] usb 3-1: config 8 interface 249 has no altsetting 0 [ 106.032382][ T979] usb 3-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice=13.77 [ 106.052767][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.061740][ T979] usb 3-1: Product: syz [ 106.067271][ T979] usb 3-1: Manufacturer: syz [ 106.072508][ T979] usb 3-1: SerialNumber: syz [ 106.103511][ T30] audit: type=1400 audit(1760533330.480:236): avc: denied { setopt } for pid=6386 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.289541][ T979] snd-usb-caiaq 3-1:8.249: can't set alt interface. [ 106.296280][ T979] usb 3-1: unable to init card! (ret=-5) [ 106.302991][ T979] snd-usb-caiaq 3-1:8.249: probe with driver snd-usb-caiaq failed with error -5 [ 106.314079][ T979] usb 3-1: USB disconnect, device number 8 [ 106.490911][ T5897] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.510035][ T1207] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.520301][ T5870] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.652306][ T5897] usb 5-1: config 177 has an invalid interface number: 162 but max is 1 [ 106.670119][ T5897] usb 5-1: config 177 has an invalid descriptor of length 1, skipping remainder of the config [ 106.681609][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 106.688332][ T5897] usb 5-1: config 177 has 1 interface, different from the descriptor's value: 2 [ 106.699373][ T5897] usb 5-1: config 177 has no interface number 0 [ 106.706507][ T1207] usb 4-1: config 255 has an invalid interface number: 181 but max is 0 [ 106.715302][ T5897] usb 5-1: config 177 interface 162 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 106.728609][ T1207] usb 4-1: config 255 has no interface number 0 [ 106.735471][ T5870] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 106.744702][ T1207] usb 4-1: config 255 interface 181 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 106.756084][ T5897] usb 5-1: config 177 interface 162 has no altsetting 0 [ 106.763103][ T5870] usb 1-1: config 2 has no interface number 0 [ 106.769217][ T5870] usb 1-1: config 2 interface 31 has no altsetting 0 [ 106.781717][ T1207] usb 4-1: config 255 interface 181 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 106.795211][ T5870] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 106.805800][ T1207] usb 4-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=43.b6 [ 106.815237][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.823636][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.832122][ T5870] usb 1-1: Product: syz [ 106.836461][ T5897] usb 5-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=a8.52 [ 106.845907][ T1207] usb 4-1: Product: syz [ 106.850301][ T5870] usb 1-1: Manufacturer: syz [ 106.854895][ T5870] usb 1-1: SerialNumber: syz [ 106.859733][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.867874][ T1207] usb 4-1: Manufacturer: syz [ 106.872908][ T1207] usb 4-1: SerialNumber: syz [ 106.878723][ T5897] usb 5-1: Manufacturer: 䐊 [ 106.886361][ T5897] usb 5-1: SerialNumber: ϔ⟄鷼붙舊ర걆䖚尩딜㺱꿅ꨑ䢯屘Ⴠ㙾찺㓽痁✺澰巧䛓当ښ봢➕㬠衯浻섭崢檿司褈ꦹ솫ߑꩌ㪞踰菈䈨争桰藏镙睪ᜱ碦캗蓞뼚窒涏쓺灻㋶譇䯭ᣛ甀唞걘⻮쿁뽱䲐傥㖚門♚㍦챗⟬䠤鋼䱄鷣᳞妲蟆糧幍沚曷䮈۴朞騋⽧올☑켮耢힝ែ﵅䅝䇸ර䚵Ꟍ熽뚏靚秵ᤆ [ 106.921665][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.939737][ T6394] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 106.959408][ T30] audit: type=1400 audit(1760533331.390:237): avc: denied { read write } for pid=6399 comm="syz.2.114" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 106.985074][ T30] audit: type=1400 audit(1760533331.430:238): avc: denied { open } for pid=6399 comm="syz.2.114" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 107.008502][ T30] audit: type=1400 audit(1760533331.430:239): avc: denied { ioctl } for pid=6399 comm="syz.2.114" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 107.130120][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 107.220225][ T6390] ucma_write: process 81 (syz.4.110) changed security contexts after opening file descriptor, this is not allowed. [ 107.377392][ T5897] hub 5-1:177.162: bad descriptor, ignoring hub [ 107.384596][ T5897] hub 5-1:177.162: probe with driver hub failed with error -5 [ 107.398408][ T5897] mos7840 5-1:177.162: required endpoints missing [ 107.444454][ T5897] usb 5-1: USB disconnect, device number 6 [ 107.472675][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.722774][ T6412] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 107.860233][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.870324][ T6412] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 107.925815][ T5870] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 107.926839][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 107.926852][ T30] audit: type=1400 audit(1760533332.360:246): avc: denied { create } for pid=6413 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 107.937668][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 107.975571][ T5870] usb 1-1: USB disconnect, device number 5 [ 107.992665][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 108.005587][ T9] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 108.018111][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.032225][ T9] usb 2-1: config 0 descriptor?? [ 108.043924][ T6398] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 108.503484][ T9] aureal 0003:0755:2626.0004: unknown main item tag 0x6 [ 108.525612][ T9] aureal 0003:0755:2626.0004: report_id 29495 is invalid [ 108.606193][ T6426] dvmrp0: entered allmulticast mode [ 108.696380][ T9] aureal 0003:0755:2626.0004: item 0 2 1 8 parsing failed [ 108.702943][ T30] audit: type=1400 audit(1760533333.140:247): avc: denied { read } for pid=6427 comm="syz.0.119" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.955130][ T9] aureal 0003:0755:2626.0004: probe with driver aureal failed with error -22 [ 108.973338][ T9] usb 2-1: USB disconnect, device number 8 [ 109.420101][ T30] audit: type=1400 audit(1760533333.400:248): avc: denied { open } for pid=6427 comm="syz.0.119" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.450366][ T6423] dvmrp0: left allmulticast mode [ 109.477165][ T1207] ti_usb_3410_5052 4-1:255.181: TI USB 3410 1 port adapter converter detected [ 109.510183][ T30] audit: type=1400 audit(1760533333.760:249): avc: denied { ioctl } for pid=6427 comm="syz.0.119" path="/dev/usbmon4" dev="devtmpfs" ino=728 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.715095][ T1207] ti_usb_3410_5052 4-1:255.181: missing endpoints [ 109.795005][ T1207] usb 4-1: USB disconnect, device number 8 [ 110.250243][ T5951] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.610064][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 110.660736][ T5951] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.684131][ T5951] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.710096][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.716801][ T5951] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 110.727174][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.735817][ T5981] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.739207][ T30] audit: type=1400 audit(1760533335.170:250): avc: denied { getopt } for pid=6448 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.762484][ T5951] usb 3-1: config 0 descriptor?? [ 110.764023][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.010416][ T1207] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.063026][ T30] audit: type=1400 audit(1760533335.430:251): avc: denied { create } for pid=6453 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.082605][ T5981] usb 5-1: Using ep0 maxpacket: 8 [ 111.088652][ T5870] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 111.089182][ T5981] usb 5-1: config 11 has an invalid interface number: 95 but max is 0 [ 111.098023][ T30] audit: type=1400 audit(1760533335.430:252): avc: denied { write } for pid=6453 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.139197][ T5981] usb 5-1: config 11 has no interface number 0 [ 111.145853][ T5981] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 111.159110][ T5981] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 111.184033][ T5981] usb 5-1: config 11 interface 95 has no altsetting 0 [ 111.215619][ T5981] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 111.227139][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.237016][ T5981] usb 5-1: Product: syz [ 111.246298][ T5981] usb 5-1: Manufacturer: syz [ 111.254402][ T5981] usb 5-1: SerialNumber: syz [ 111.290615][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 111.292198][ T5951] nzxt-smart2 0003:1E71:2009.0005: item fetching failed at offset 0/5 [ 111.297810][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.310735][ T5951] nzxt-smart2 0003:1E71:2009.0005: probe with driver nzxt-smart2 failed with error -22 [ 111.317135][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.354316][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.372177][ T5870] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 111.383626][ T1207] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.401413][ T1207] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.417590][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.417709][ T5870] usb 2-1: string descriptor 0 read error: -22 [ 111.432330][ T5870] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 111.442946][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.452342][ T1207] usb 4-1: config 0 descriptor?? [ 111.477638][ T5870] imon_raw 2-1:64.0: IR endpoint missing [ 111.526112][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 111.715641][ T30] audit: type=1400 audit(1760533336.150:253): avc: denied { sys_module } for pid=6442 comm="syz.4.124" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.769214][ T5870] usb 2-1: USB disconnect, device number 9 [ 111.841904][ T5981] usbtouchscreen 5-1:11.95: probe with driver usbtouchscreen failed with error -22 [ 111.888403][ T5981] usb 5-1: USB disconnect, device number 7 [ 112.018122][ T1207] usbhid 4-1:0.0: can't add hid device: -71 [ 112.029168][ T1207] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 112.038490][ T5951] usb 3-1: USB disconnect, device number 9 [ 112.040558][ T1207] usb 4-1: USB disconnect, device number 9 [ 112.154753][ T30] audit: type=1400 audit(1760533336.560:254): avc: denied { setopt } for pid=6480 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.387458][ T30] audit: type=1400 audit(1760533336.820:255): avc: denied { block_suspend } for pid=6480 comm="syz.3.129" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.560866][ T5951] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 112.814027][ T5951] usb 3-1: config 7 has an invalid interface number: 194 but max is 3 [ 112.848385][ T5951] usb 3-1: config 7 has an invalid interface number: 45 but max is 3 [ 112.856974][ T5951] usb 3-1: config 7 has an invalid interface number: 251 but max is 3 [ 112.866039][ T5951] usb 3-1: config 7 has no interface number 0 [ 112.874515][ T5951] usb 3-1: config 7 has no interface number 1 [ 112.885806][ T5951] usb 3-1: config 7 has no interface number 3 [ 112.892106][ T5951] usb 3-1: config 7 interface 194 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 112.903225][ T5951] usb 3-1: config 7 interface 194 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 112.914555][ T5951] usb 3-1: config 7 interface 194 altsetting 8 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 112.927090][ T5951] usb 3-1: config 7 interface 194 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 112.939183][ T5951] usb 3-1: config 7 interface 194 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 112.951009][ T5951] usb 3-1: config 7 interface 194 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 112.978542][ T5951] usb 3-1: config 7 interface 2 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 113.002700][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 113.002712][ T30] audit: type=1400 audit(1760533337.410:263): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 113.049128][ T5951] usb 3-1: config 7 interface 2 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 113.076447][ T5951] usb 3-1: config 7 interface 2 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 113.087662][ T5951] usb 3-1: config 7 interface 2 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 113.098501][ T5951] usb 3-1: config 7 interface 2 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 113.111158][ T5951] usb 3-1: config 7 interface 2 altsetting 3 endpoint 0xD has invalid maxpacket 1056, setting to 64 [ 113.122804][ T5951] usb 3-1: config 7 interface 2 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 113.135068][ T5951] usb 3-1: config 7 interface 2 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 113.146281][ T5951] usb 3-1: config 7 interface 251 altsetting 213 has a duplicate endpoint with address 0x5, skipping [ 113.158729][ T5951] usb 3-1: config 7 interface 251 altsetting 213 has an invalid descriptor for endpoint zero, skipping [ 113.172726][ T5951] usb 3-1: config 7 interface 251 altsetting 213 has a duplicate endpoint with address 0x5, skipping [ 113.183875][ T5951] usb 3-1: config 7 interface 251 altsetting 213 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 113.195471][ T5951] usb 3-1: config 7 interface 251 altsetting 213 has a duplicate endpoint with address 0xB, skipping [ 113.206935][ T5951] usb 3-1: config 7 interface 251 altsetting 213 has a duplicate endpoint with address 0x1, skipping [ 113.218028][ T5951] usb 3-1: config 7 interface 251 altsetting 213 bulk endpoint 0xE has invalid maxpacket 16 [ 113.228642][ T5951] usb 3-1: config 7 interface 251 altsetting 213 has a duplicate endpoint with address 0x3, skipping [ 113.242226][ T30] audit: type=1400 audit(1760533337.680:264): avc: denied { map } for pid=6498 comm="syz.1.134" path="socket:[10153]" dev="sockfs" ino=10153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 113.269849][ T5951] usb 3-1: config 7 interface 194 has no altsetting 0 [ 113.277386][ T5951] usb 3-1: config 7 interface 2 has no altsetting 0 [ 113.285662][ T5951] usb 3-1: config 7 interface 45 has no altsetting 0 [ 113.292666][ T5951] usb 3-1: config 7 interface 251 has no altsetting 0 [ 113.301414][ T5951] usb 3-1: New USB device found, idVendor=11ff, idProduct=81c8, bcdDevice=38.d0 [ 113.310763][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.327891][ T6483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.351929][ T6501] vlan2: entered promiscuous mode [ 113.357074][ T6501] bridge0: entered promiscuous mode [ 113.382923][ T30] audit: type=1400 audit(1760533337.820:265): avc: denied { read write } for pid=6498 comm="syz.1.134" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 113.412285][ T30] audit: type=1400 audit(1760533337.850:266): avc: denied { open } for pid=6498 comm="syz.1.134" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 113.902934][ T5951] usb 3-1: string descriptor 0 read error: -71 [ 114.033593][ T5824] Bluetooth: hci3: unexpected cc 0x203c length: 9 > 1 [ 114.059315][ T5951] usb 3-1: USB disconnect, device number 10 [ 114.115357][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 114.420590][ T30] audit: type=1400 audit(1760533338.550:267): avc: denied { bind } for pid=6504 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.999102][ T30] audit: type=1400 audit(1760533338.550:268): avc: denied { name_bind } for pid=6504 comm="syz.3.136" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 115.030120][ T30] audit: type=1400 audit(1760533338.550:269): avc: denied { node_bind } for pid=6504 comm="syz.3.136" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 115.052128][ T30] audit: type=1400 audit(1760533338.570:270): avc: denied { connect } for pid=6504 comm="syz.3.136" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.072794][ T30] audit: type=1400 audit(1760533338.570:271): avc: denied { name_connect } for pid=6504 comm="syz.3.136" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 115.306381][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.481239][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.730532][ T6523] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 115.742380][ T5951] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 115.973105][ T6527] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 115.982041][ T5951] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 115.992837][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.011149][ T5951] usb 3-1: config 0 descriptor?? [ 116.031537][ T6527] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.506439][ T30] audit: type=1400 audit(1760533340.930:272): avc: denied { shutdown } for pid=6529 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.906759][ T6514] tmpfs: Bad value for 'mpol' [ 116.912529][ T5951] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 117.316866][ T1207] usb 3-1: USB disconnect, device number 11 [ 117.497771][ T6555] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.506383][ T6555] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.515606][ T6555] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.524895][ T6555] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 117.724116][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 117.834847][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 117.870184][ T1207] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 118.110183][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 118.128943][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.239224][ T6570] binder: BINDER_SET_CONTEXT_MGR already set [ 118.245334][ T6570] binder: 6564:6570 ioctl 4018620d 200000004a80 returned -16 [ 118.836736][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.856073][ T1207] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.870447][ T1207] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.879481][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.891940][ T1207] usb 3-1: config 0 descriptor?? [ 119.125435][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 119.125446][ T30] audit: type=1326 audit(1760533343.560:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.0.155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f118038eec9 code=0x7ffe0000 [ 119.302644][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.148'. [ 119.311522][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.148'. [ 119.323608][ T5870] IPVS: starting estimator thread 0... [ 119.420033][ T6576] IPVS: using max 35 ests per chain, 84000 per kthread [ 120.411630][ T1207] usbhid 3-1:0.0: can't add hid device: -71 [ 120.442506][ T6580] dvmrp0: entered allmulticast mode [ 120.448124][ T1207] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 120.490796][ T1207] usb 3-1: USB disconnect, device number 12 [ 120.519026][ T6580] overlayfs: failed to resolve './file1': -2 [ 120.899699][ T6579] dvmrp0: left allmulticast mode [ 121.019230][ T6587] netlink: 80 bytes leftover after parsing attributes in process `syz.4.158'. [ 121.055853][ T30] audit: type=1400 audit(1760533345.497:288): avc: denied { ioctl } for pid=6583 comm="syz.4.158" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.147553][ T30] audit: type=1400 audit(1760533345.587:289): avc: denied { ioctl } for pid=6588 comm="syz.3.159" path="socket:[12414]" dev="sockfs" ino=12414 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 122.666018][ T6600] pim6reg: entered allmulticast mode [ 123.367106][ T6611] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.370053][ T30] audit: type=1400 audit(1760533347.747:290): avc: denied { write } for pid=6606 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.383459][ T6611] infiniband s1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.814542][ T6620] netlink: 'syz.4.166': attribute type 10 has an invalid length. [ 123.955911][ T6620] batman_adv: batadv0: Adding interface: team0 [ 124.110174][ T6620] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.135349][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.852812][ T6620] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 124.863445][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 124.872747][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 125.350286][ T5951] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.428928][ T6643] netlink: 48 bytes leftover after parsing attributes in process `syz.0.172'. [ 125.548378][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.548617][ T5951] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.548706][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.603108][ T5951] usb 4-1: config 0 descriptor?? [ 125.710526][ T30] audit: type=1400 audit(1760533350.157:291): avc: denied { mount } for pid=6640 comm="syz.0.172" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 125.731933][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.775623][ T6632] netlink: 'syz.1.169': attribute type 21 has an invalid length. [ 125.783485][ T6632] netlink: 128 bytes leftover after parsing attributes in process `syz.1.169'. [ 125.793145][ T6632] netlink: 'syz.1.169': attribute type 5 has an invalid length. [ 125.801012][ T6632] netlink: 'syz.1.169': attribute type 6 has an invalid length. [ 125.808993][ T6632] netlink: 3 bytes leftover after parsing attributes in process `syz.1.169'. [ 125.854434][ T5951] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 125.880233][ T5870] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.898553][ T5951] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input10 [ 126.080053][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 126.108872][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.120808][ T5870] usb 3-1: string descriptor 0 read error: -22 [ 126.143842][ T5870] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 126.144403][ T5951] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 126.183119][ T30] audit: type=1400 audit(1760533350.617:292): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 126.226805][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.296059][ T30] audit: type=1400 audit(1760533350.737:293): avc: denied { create } for pid=6652 comm="syz.0.175" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.350561][ T5981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.377733][ T5951] usb 4-1: USB disconnect, device number 10 [ 126.575054][ T5981] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 126.581555][ T6651] fido_id[6651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 126.775659][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.797192][ T5981] usb 5-1: Product: syz [ 126.806879][ T5981] usb 5-1: Manufacturer: syz [ 126.812129][ T5981] usb 5-1: SerialNumber: syz [ 126.947350][ T30] audit: type=1400 audit(1760533351.387:294): avc: denied { read } for pid=6658 comm="syz.0.176" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 126.994942][ T30] audit: type=1400 audit(1760533351.387:295): avc: denied { open } for pid=6658 comm="syz.0.176" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 127.026493][ T30] audit: type=1400 audit(1760533351.417:296): avc: denied { ioctl } for pid=6658 comm="syz.0.176" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 127.050974][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.757222][ T30] audit: type=1400 audit(1760533351.727:297): avc: denied { create } for pid=6660 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.778722][ T6650] tmpfs: Bad value for 'mpol' [ 127.801307][ T979] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.820886][ T30] audit: type=1400 audit(1760533352.197:298): avc: denied { mount } for pid=6662 comm="syz.3.177" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.970167][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 128.051602][ T979] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 128.114076][ T30] audit: type=1400 audit(1760533352.527:299): avc: denied { map } for pid=6672 comm="syz.0.179" path="/45/file1/file0" dev="autofs" ino=11378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 128.137483][ T979] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 128.149307][ T979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.160587][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.168606][ T979] usb 2-1: SerialNumber: syz [ 128.218228][ T6667] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.225825][ T6667] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.236607][ T30] audit: type=1400 audit(1760533352.677:300): avc: denied { append } for pid=6674 comm="syz.0.180" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.310419][ T6675] tmpfs: Bad value for 'mpol' [ 128.668518][ T5870] asix 3-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 128.678997][ T5870] asix 3-1:7.0: probe with driver asix failed with error -71 [ 128.691127][ T5870] usb 3-1: USB disconnect, device number 13 [ 128.929642][ T5981] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 129.680851][ T5981] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 129.706567][ T5981] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 129.739009][ T5981] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 129.759725][ T5981] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 129.777469][ T5981] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 129.938301][ T5981] usb 5-1: USB disconnect, device number 8 [ 130.062131][ T979] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 130.091069][ T979] usb 2-1: USB disconnect, device number 10 [ 130.672240][ T6700] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 130.871887][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 130.871901][ T30] audit: type=1400 audit(1760533355.317:306): avc: denied { connect } for pid=6696 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.938130][ T30] audit: type=1400 audit(1760533355.377:307): avc: denied { accept } for pid=6705 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.950034][ T5897] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 130.987666][ T5824] Bluetooth: hci0: connection err: -111 [ 131.009454][ T6703] dvmrp8: entered allmulticast mode [ 131.155963][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 131.215686][ T5897] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 131.256944][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.282040][ T5897] usb 4-1: Product: syz [ 131.285630][ T30] audit: type=1400 audit(1760533355.727:308): avc: denied { write } for pid=6711 comm="syz.4.192" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.296626][ T5897] usb 4-1: Manufacturer: syz [ 131.330040][ T5897] usb 4-1: SerialNumber: syz [ 131.357538][ T5897] usb 4-1: config 0 descriptor?? [ 131.364190][ T6702] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.493689][ T30] audit: type=1400 audit(1760533355.937:309): avc: denied { read } for pid=6713 comm="syz.4.193" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.516457][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.562379][ T30] audit: type=1400 audit(1760533355.967:310): avc: denied { open } for pid=6713 comm="syz.4.193" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.691790][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 132.017496][ T6729] binder: 6701:6729 ioctl 4018620d 0 returned -22 [ 132.483879][ T30] audit: type=1400 audit(1760533356.927:311): avc: denied { execute } for pid=6733 comm="syz.2.198" path="/34/cpuacct.usage_percpu" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.511096][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.511172][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.553870][ T6734] misc userio: No port type given on /dev/userio [ 132.640181][ T30] audit: type=1400 audit(1760533357.027:312): avc: denied { name_bind } for pid=6735 comm="syz.1.199" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 132.661232][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.798045][ T30] audit: type=1400 audit(1760533357.237:313): avc: denied { ioctl } for pid=6740 comm="syz.2.200" path="socket:[11545]" dev="sockfs" ino=11545 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.950282][ T30] audit: type=1400 audit(1760533357.267:314): avc: denied { getopt } for pid=6740 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.981552][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.029719][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.130048][ T5981] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 133.290053][ T5981] usb 2-1: device descriptor read/64, error -71 [ 133.561141][ T5981] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 133.710811][ T5981] usb 2-1: device descriptor read/64, error -71 [ 133.841561][ T5981] usb usb2-port1: attempt power cycle [ 134.200038][ T5981] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 134.220753][ T5981] usb 2-1: device descriptor read/8, error -71 [ 134.460023][ T5981] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 134.480700][ T5981] usb 2-1: device descriptor read/8, error -71 [ 134.590433][ T5981] usb usb2-port1: unable to enumerate USB device [ 145.921346][ T1298] ================================================================== [ 145.929429][ T1298] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 145.936635][ T1298] Read of size 1 at addr ffff8880328f5490 by task aoe_tx0/1298 [ 145.944153][ T1298] [ 145.946468][ T1298] CPU: 0 UID: 0 PID: 1298 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 145.946489][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.946508][ T1298] Call Trace: [ 145.946515][ T1298] [ 145.946521][ T1298] dump_stack_lvl+0x116/0x1f0 [ 145.946546][ T1298] print_report+0xcd/0x630 [ 145.946570][ T1298] ? __virt_addr_valid+0x81/0x610 [ 145.946587][ T1298] ? __phys_addr+0xe8/0x180 [ 145.946605][ T1298] ? handle_tx+0x5dc/0x630 [ 145.946625][ T1298] kasan_report+0xe0/0x110 [ 145.946649][ T1298] ? handle_tx+0x5dc/0x630 [ 145.946673][ T1298] handle_tx+0x5dc/0x630 [ 145.946698][ T1298] dev_hard_start_xmit+0x97/0x740 [ 145.946727][ T1298] __dev_queue_xmit+0xa46/0x4490 [ 145.946745][ T1298] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.946765][ T1298] ? finish_task_switch.isra.0+0x221/0xc10 [ 145.946792][ T1298] ? rcu_is_watching+0x12/0xc0 [ 145.946808][ T1298] ? __pfx___dev_queue_xmit+0x10/0x10 [ 145.946823][ T1298] ? __schedule+0x11a3/0x5de0 [ 145.946843][ T1298] ? __lock_acquire+0xb8a/0x1c90 [ 145.946864][ T1298] ? __lock_acquire+0xb8a/0x1c90 [ 145.946886][ T1298] ? do_raw_spin_lock+0x12c/0x2b0 [ 145.946914][ T1298] ? rcu_is_watching+0x12/0xc0 [ 145.946932][ T1298] tx+0xcc/0x190 [ 145.946948][ T1298] ? __pfx_tx+0x10/0x10 [ 145.946963][ T1298] kthread+0x1e4/0x3e0 [ 145.946987][ T1298] ? find_held_lock+0x2b/0x80 [ 145.947002][ T1298] ? __pfx_kthread+0x10/0x10 [ 145.947026][ T1298] ? __pfx_default_wake_function+0x10/0x10 [ 145.947053][ T1298] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.947073][ T1298] ? __kthread_parkme+0x19e/0x250 [ 145.947092][ T1298] ? __pfx_kthread+0x10/0x10 [ 145.947115][ T1298] kthread+0x3c5/0x780 [ 145.947136][ T1298] ? __pfx_kthread+0x10/0x10 [ 145.947157][ T1298] ? rcu_is_watching+0x12/0xc0 [ 145.947173][ T1298] ? __pfx_kthread+0x10/0x10 [ 145.947194][ T1298] ret_from_fork+0x675/0x7d0 [ 145.947214][ T1298] ? __pfx_kthread+0x10/0x10 [ 145.947234][ T1298] ret_from_fork_asm+0x1a/0x30 [ 145.947259][ T1298] [ 145.947264][ T1298] [ 146.141574][ T1298] Allocated by task 6304: [ 146.145879][ T1298] kasan_save_stack+0x33/0x60 [ 146.150545][ T1298] kasan_save_track+0x14/0x30 [ 146.155205][ T1298] __kasan_kmalloc+0xaa/0xb0 [ 146.159777][ T1298] alloc_tty_struct+0x96/0x8c0 [ 146.164530][ T1298] tty_init_dev.part.0+0x1e/0x500 [ 146.169543][ T1298] tty_open+0xa4f/0xf90 [ 146.173686][ T1298] chrdev_open+0x234/0x6a0 [ 146.178086][ T1298] do_dentry_open+0x982/0x1530 [ 146.182836][ T1298] vfs_open+0x82/0x3f0 [ 146.186895][ T1298] path_openat+0x1de4/0x2cb0 [ 146.191476][ T1298] do_filp_open+0x20b/0x470 [ 146.195972][ T1298] do_sys_openat2+0x11b/0x1d0 [ 146.200628][ T1298] __x64_sys_openat+0x174/0x210 [ 146.205461][ T1298] do_syscall_64+0xcd/0xfa0 [ 146.209950][ T1298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.215828][ T1298] [ 146.218128][ T1298] Freed by task 5951: [ 146.222085][ T1298] kasan_save_stack+0x33/0x60 [ 146.226747][ T1298] kasan_save_track+0x14/0x30 [ 146.231406][ T1298] __kasan_save_free_info+0x3b/0x60 [ 146.236586][ T1298] __kasan_slab_free+0x5f/0x80 [ 146.241332][ T1298] kfree+0x2b8/0x6d0 [ 146.245208][ T1298] process_one_work+0x9cf/0x1b70 [ 146.250133][ T1298] worker_thread+0x6c8/0xf10 [ 146.254712][ T1298] kthread+0x3c5/0x780 [ 146.258764][ T1298] ret_from_fork+0x675/0x7d0 [ 146.263339][ T1298] ret_from_fork_asm+0x1a/0x30 [ 146.268082][ T1298] [ 146.270387][ T1298] Last potentially related work creation: [ 146.276074][ T1298] kasan_save_stack+0x33/0x60 [ 146.280732][ T1298] kasan_record_aux_stack+0xa7/0xc0 [ 146.285910][ T1298] insert_work+0x36/0x230 [ 146.290225][ T1298] __queue_work+0x97e/0x1160 [ 146.294799][ T1298] queue_work_on+0x1a4/0x1f0 [ 146.299375][ T1298] release_tty+0x4de/0x5d0 [ 146.303775][ T1298] tty_release_struct+0xb7/0xe0 [ 146.308611][ T1298] tty_release+0xe2d/0x1430 [ 146.313102][ T1298] __fput+0x402/0xb70 [ 146.317065][ T1298] task_work_run+0x150/0x240 [ 146.321644][ T1298] do_exit+0x86f/0x2bf0 [ 146.325783][ T1298] do_group_exit+0xd3/0x2a0 [ 146.330268][ T1298] get_signal+0x2671/0x26d0 [ 146.334752][ T1298] arch_do_signal_or_restart+0x8f/0x7c0 [ 146.340287][ T1298] exit_to_user_mode_loop+0x85/0x130 [ 146.345559][ T1298] do_syscall_64+0x426/0xfa0 [ 146.350132][ T1298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.356007][ T1298] [ 146.358307][ T1298] The buggy address belongs to the object at ffff8880328f5000 [ 146.358307][ T1298] which belongs to the cache kmalloc-cg-2k of size 2048 [ 146.372606][ T1298] The buggy address is located 1168 bytes inside of [ 146.372606][ T1298] freed 2048-byte region [ffff8880328f5000, ffff8880328f5800) [ 146.386551][ T1298] [ 146.388854][ T1298] The buggy address belongs to the physical page: [ 146.395245][ T1298] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880328f3000 pfn:0x328f0 [ 146.405295][ T1298] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 146.413775][ T1298] memcg:ffff88802803f201 [ 146.417996][ T1298] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 146.425970][ T1298] page_type: f5(slab) [ 146.429944][ T1298] raw: 00fff00000000040 ffff88813ff303c0 0000000000000000 dead000000000001 [ 146.438513][ T1298] raw: ffff8880328f3000 0000000000080005 00000000f5000000 ffff88802803f201 [ 146.447080][ T1298] head: 00fff00000000040 ffff88813ff303c0 0000000000000000 dead000000000001 [ 146.455731][ T1298] head: ffff8880328f3000 0000000000080005 00000000f5000000 ffff88802803f201 [ 146.464383][ T1298] head: 00fff00000000003 ffffea0000ca3c01 00000000ffffffff 00000000ffffffff [ 146.473034][ T1298] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 146.481676][ T1298] page dumped because: kasan: bad access detected [ 146.488074][ T1298] page_owner tracks the page as allocated [ 146.493762][ T1298] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5928, tgid 5927 (syz.0.1), ts 75714569427, free_ts 75683113565 [ 146.514669][ T1298] post_alloc_hook+0x1c0/0x230 [ 146.519423][ T1298] get_page_from_freelist+0x10a3/0x3a30 [ 146.524952][ T1298] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 146.530829][ T1298] alloc_pages_mpol+0x1fb/0x550 [ 146.535667][ T1298] new_slab+0x24a/0x360 [ 146.539807][ T1298] ___slab_alloc+0xdc4/0x1ae0 [ 146.544463][ T1298] __slab_alloc.constprop.0+0x63/0x110 [ 146.549902][ T1298] __kmalloc_cache_noprof+0x477/0x780 [ 146.555254][ T1298] ipv6_add_dev+0x1c9/0x15f0 [ 146.559826][ T1298] addrconf_notify+0x53e/0x19e0 [ 146.564663][ T1298] notifier_call_chain+0xbc/0x410 [ 146.569677][ T1298] call_netdevice_notifiers_info+0xbe/0x140 [ 146.575557][ T1298] register_netdevice+0x182e/0x2270 [ 146.580741][ T1298] register_netdev+0x34/0x50 [ 146.585317][ T1298] ip6_tnl_init_net+0x2c7/0x4d0 [ 146.590151][ T1298] ops_init+0x1e2/0x5f0 [ 146.594288][ T1298] page last free pid 5928 tgid 5927 stack trace: [ 146.600592][ T1298] __free_frozen_pages+0x7df/0x1160 [ 146.605768][ T1298] __put_partials+0x130/0x170 [ 146.610426][ T1298] qlist_free_all+0x4d/0x120 [ 146.615001][ T1298] kasan_quarantine_reduce+0x195/0x1e0 [ 146.620443][ T1298] __kasan_slab_alloc+0x69/0x90 [ 146.625281][ T1298] __kmalloc_cache_noprof+0x274/0x780 [ 146.630633][ T1298] ref_tracker_alloc+0x18e/0x5b0 [ 146.635562][ T1298] netdev_queue_update_kobjects+0x2db/0x720 [ 146.641441][ T1298] netdev_register_kobject+0x2b3/0x3d0 [ 146.646883][ T1298] register_netdevice+0x13dc/0x2270 [ 146.652063][ T1298] register_netdev+0x34/0x50 [ 146.656635][ T1298] sit_init_net+0x286/0x630 [ 146.661121][ T1298] ops_init+0x1e2/0x5f0 [ 146.665259][ T1298] setup_net+0x100/0x390 [ 146.669482][ T1298] copy_net_ns+0x2f8/0x690 [ 146.673883][ T1298] create_new_namespaces+0x3ea/0xa90 [ 146.679148][ T1298] [ 146.681449][ T1298] Memory state around the buggy address: [ 146.687054][ T1298] ffff8880328f5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.695091][ T1298] ffff8880328f5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.703136][ T1298] >ffff8880328f5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.711174][ T1298] ^ [ 146.715738][ T1298] ffff8880328f5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.723780][ T1298] ffff8880328f5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.731822][ T1298] ================================================================== [ 146.739923][ T1298] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.747106][ T1298] CPU: 0 UID: 0 PID: 1298 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 146.756122][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.766167][ T1298] Call Trace: [ 146.769436][ T1298] [ 146.772360][ T1298] dump_stack_lvl+0x3d/0x1f0 [ 146.776953][ T1298] vpanic+0x640/0x6f0 [ 146.780933][ T1298] panic+0xca/0xd0 [ 146.784652][ T1298] ? __pfx_panic+0x10/0x10 [ 146.789058][ T1298] ? check_panic_on_warn+0x1f/0xb0 [ 146.794154][ T1298] check_panic_on_warn+0xab/0xb0 [ 146.799079][ T1298] end_report+0x107/0x170 [ 146.803398][ T1298] kasan_report+0xee/0x110 [ 146.807813][ T1298] ? handle_tx+0x5dc/0x630 [ 146.812226][ T1298] handle_tx+0x5dc/0x630 [ 146.816462][ T1298] dev_hard_start_xmit+0x97/0x740 [ 146.821480][ T1298] __dev_queue_xmit+0xa46/0x4490 [ 146.826405][ T1298] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.831590][ T1298] ? finish_task_switch.isra.0+0x221/0xc10 [ 146.837390][ T1298] ? rcu_is_watching+0x12/0xc0 [ 146.842139][ T1298] ? __pfx___dev_queue_xmit+0x10/0x10 [ 146.847498][ T1298] ? __schedule+0x11a3/0x5de0 [ 146.852163][ T1298] ? __lock_acquire+0xb8a/0x1c90 [ 146.857089][ T1298] ? __lock_acquire+0xb8a/0x1c90 [ 146.862017][ T1298] ? do_raw_spin_lock+0x12c/0x2b0 [ 146.867035][ T1298] ? rcu_is_watching+0x12/0xc0 [ 146.871780][ T1298] tx+0xcc/0x190 [ 146.875311][ T1298] ? __pfx_tx+0x10/0x10 [ 146.879444][ T1298] kthread+0x1e4/0x3e0 [ 146.883503][ T1298] ? find_held_lock+0x2b/0x80 [ 146.888160][ T1298] ? __pfx_kthread+0x10/0x10 [ 146.892738][ T1298] ? __pfx_default_wake_function+0x10/0x10 [ 146.898534][ T1298] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.903717][ T1298] ? __kthread_parkme+0x19e/0x250 [ 146.908723][ T1298] ? __pfx_kthread+0x10/0x10 [ 146.913300][ T1298] kthread+0x3c5/0x780 [ 146.917355][ T1298] ? __pfx_kthread+0x10/0x10 [ 146.921931][ T1298] ? rcu_is_watching+0x12/0xc0 [ 146.926677][ T1298] ? __pfx_kthread+0x10/0x10 [ 146.931253][ T1298] ret_from_fork+0x675/0x7d0 [ 146.935830][ T1298] ? __pfx_kthread+0x10/0x10 [ 146.940406][ T1298] ret_from_fork_asm+0x1a/0x30 [ 146.945157][ T1298] [ 146.948373][ T1298] Kernel Offset: disabled [ 146.952669][ T1298] Rebooting in 86400 seconds..