last executing test programs: 1m36.167122862s ago: executing program 1 (id=238): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000008, 0x30, r0, 0x18a57000) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1m36.070732044s ago: executing program 1 (id=240): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000580)=0x1a, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x7, 0x0, 0x9, 0xa550}) removexattr(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000180)=@random={'system.', 'system.posix_acl_access\x00'}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) (async) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x3a6, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r7, 0x4, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) 1m35.838402376s ago: executing program 1 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknod$loop(&(0x7f00000000c0)='./file1/file4/file6\x00', 0x8, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff04"], 0x14}, 0x1, 0x0, 0x0, 0x440d7}, 0x8000000) 1m35.659847196s ago: executing program 1 (id=243): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x3ec0}}], 0x2, 0x0) 1m35.453704824s ago: executing program 1 (id=247): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000044) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0), 0x101c02, 0x0) readv(r4, &(0x7f0000003900), 0x0) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000280)={0x0, 0x4000, "0425195da2fc9bd3231ce497938c6549648815a6e67ab6de", {0x5, 0x7}, 0xfffffffe}) socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_pts(0xffffffffffffffff, 0x80000) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x283}) 1m31.77420942s ago: executing program 1 (id=262): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="750a0090ff0000006111a4000000000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x94) semtimedop(0x0, 0x0, 0x0, 0x0) 1m30.516875414s ago: executing program 32 (id=262): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="750a0090ff0000006111a4000000000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x94) semtimedop(0x0, 0x0, 0x0, 0x0) 52.650450323s ago: executing program 2 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x700, 0x0, 0x48815}, 0xc020) sendmsg$nl_route(r0, 0x0, 0x8000002) 52.141022159s ago: executing program 2 (id=382): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmmsg(r4, 0x0, 0x0, 0x10043, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x345, 0x4000897d, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000906010200000000000000000000bc38f0412a1a9fd7b5d55ea42fa7aa9c51140f56ee8700000900020073797a31000000001400010007000000100007800c00da1fe88301407f000001"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601ffff0002050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) removexattr(0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xfffff) r7 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x34565348, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) socket(0x1d, 0x2, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 51.106188003s ago: executing program 2 (id=385): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x3, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x8, 0x3, 0x6) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000680)=@ethtool_ringparam={0x11, 0x7ff, 0xb02f, 0x6, 0x3, 0x5, 0xffffffc0, 0xd43f, 0x68f6}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000280)={"7e29dadcbe140cb87097c67faad7bbdb", 0x0, 0x0, {0xfffffffffffffffa, 0x8}, {0x1}, 0x9, [0x4, 0x800000, 0xffffffffffffffff, 0x205, 0x5, 0x100000000, 0x1, 0x10001, 0x9, 0xff, 0x3, 0x3, 0x4, 0x10000, 0x4, 0x7]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000380)={"b605000000e934ae3af5739275f51750", r7, r8, {0xfffffffffefffff7, 0x7f}, {0x6, 0x140}, 0x8, [0x9, 0x68f6, 0x3, 0x0, 0x6, 0xd3cf, 0x0, 0x5, 0xffffffffbfffff80, 0x0, 0xff, 0x5, 0x80000000, 0x7, 0x3, 0xfffffffffffffff9]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgrp(0xffffffffffffffff) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 46.822737276s ago: executing program 3 (id=394): mkdir(&(0x7f0000000000)='./file0\x00', 0x4a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0xb6, 0x30440) r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000)=0x1000009, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x440400, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800fd000314010029bd7000ffdbdf2509000200737971310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0x8091}, 0x20000010) 45.756246656s ago: executing program 2 (id=398): io_uring_setup(0x6ba2, &(0x7f0000000200)={0x0, 0x956, 0x40, 0x103fd, 0x81}) r0 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus/../file0\x00', 0x4c0c40, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x2485, &(0x7f0000000040)={0x0, 0xc8bd, 0xc000, 0x0, 0x26b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) 43.604351891s ago: executing program 3 (id=405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000680)={0x42, 0x0, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) listen(r0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 43.498362976s ago: executing program 2 (id=407): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="300000006800010000000000000000000a000000000000000600070003000000080008800400210008000500", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x8, 0x10, 0x6, 0x40000, 0x2, 0x2, 0x7d, 0xffffff19}}) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r5 = socket(0x2d, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc891}, 0x851) 43.396410968s ago: executing program 3 (id=409): pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f00000002c0), 0x4) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x80085}, 0x4010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000004, 0x0) read$msr(r7, &(0x7f000001b700)=""/102392, 0x18ff8) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x17, &(0x7f0000000000), 0x10) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r8, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_setup(0x7d7f, &(0x7f0000000240)={0x0, 0x1ed1, 0x2000, 0xffffffff, 0xbfdffffe, 0x0, r6}, &(0x7f0000000200), &(0x7f0000000300)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 42.314281419s ago: executing program 3 (id=411): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xffffff01, 0x278, 0x3, 0x5, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffc]}, 0x8, 0x800) r5 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r4, 0x7, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102390, 0x19008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xae}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfa, 0xfc, 0x0, 0x0, 0x5}, {0xdddd1000, 0x100000, 0x4, 0x8, 0x3, 0xfb, 0x2, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x4}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03"], 0x0) 42.313269219s ago: executing program 2 (id=413): syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="2ea48cc13bddaaaaaaaaaaaa00000000000008004500fde1000000000011907800000000000000006c494e22fdcd9078e5ffed00"/64], 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x401) socket(0x5, 0x80000, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2935, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000000}, 0x20008054) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESHEX=r11, @ANYBLOB="00002abd7000fcdbdf25010d03160ce6c3e3b37891f20ec46ad0f93ba0e8"], 0x28}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 38.834402427s ago: executing program 3 (id=419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0xfff5, {0x3, 0x84}}}, 0x5c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 38.54444762s ago: executing program 3 (id=421): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x1000}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff], [0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff7076, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x14]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x400000009) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000001c0), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) shutdown(r4, 0x1) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) 26.855629201s ago: executing program 33 (id=413): syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="2ea48cc13bddaaaaaaaaaaaa00000000000008004500fde1000000000011907800000000000000006c494e22fdcd9078e5ffed00"/64], 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x401) socket(0x5, 0x80000, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2935, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000000}, 0x20008054) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESHEX=r11, @ANYBLOB="00002abd7000fcdbdf25010d03160ce6c3e3b37891f20ec46ad0f93ba0e8"], 0x28}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 23.515175526s ago: executing program 34 (id=421): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x1000}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff], [0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff7076, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x14]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x400000009) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000001c0), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) shutdown(r4, 0x1) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) 23.12358328s ago: executing program 0 (id=462): recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x17, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/77, 0x56}], 0x1}, 0x8001}], 0x1, 0x2141, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4d0a9863dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8c39ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e20800", [0xfffffffffffffffe]}}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) flock(r4, 0x2) dup3(0xffffffffffffffff, r1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 22.966248101s ago: executing program 5 (id=463): socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c72050000000000000030303030307030303030303030303030303034303030302c6173a5aa65725f69643519b83b073b2b108b3156585d9c997e6dd277b2530ced8eba054dc650a68ea5c5f0dfd00ad5c561ca2bb6dae01f6520af6629afa095863582fe7340046ff7a3c7da7353c2cb3f160bef9ac5b7362b92cc608a85", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x9, 0xda}, 0x2) r5 = syz_io_uring_setup(0x512, &(0x7f0000000300)={0x0, 0x4b11, 0x100, 0x1, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r5}) syz_open_procfs(0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', &(0x7f00000000c0)={0x40000, 0x0, 0x11}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22.207871277s ago: executing program 0 (id=464): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, &(0x7f0000000580)=""/57, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) 22.156646265s ago: executing program 0 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r10, @ANYBLOB="050006"], 0x24}}, 0x8) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b1375", 0x7e}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000001940)={&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/77, 0x4d}, {&(0x7f00000016c0)=""/87, 0x57}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/245, 0xf5}, {&(0x7f0000001880)=""/47, 0x2f}], 0x8}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r12, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 21.538420312s ago: executing program 5 (id=466): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = getpid() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b:$\x00'/510, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000700}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x1a}, 0x28) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 20.809034815s ago: executing program 0 (id=467): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862", 0xe}], 0x3}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d1645e064ac37e750b17f4fc8eff2ae7e282deab", 0x14}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x68, 0x4000000}}], 0x1, 0x40000) ioctl$sock_ifreq(0xffffffffffffffff, 0x891e, &(0x7f0000000200)={'bond0\x00', @ifru_addrs=@xdp={0x2c, 0x2, 0x0, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x6b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xf0, 0x29, 0x36, {0x5e, 0x1a, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2e8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42028}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 20.755036511s ago: executing program 4 (id=468): prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c00c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r3, r2, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x7, 0x2}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='contention_begin\x00', r8, 0x0, 0x5}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 20.654400284s ago: executing program 5 (id=469): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x50, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001900010000000000fbdbff251d010900500012802a028080080027000e0000003d004180e7227ae5c252f37c41df2a84b5cdecbc7e272fbe572d6a76e2253ab30bd45f00466ac17605d18985dffc132cff49dc226eda6ce3c24e45f03a698e04"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x100000000000f7) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x10000}, [@jmp={0x5, 0x1, 0x3, 0x3, 0x4, 0xc, 0xffffffffffffffff}]}, &(0x7f00000004c0)='syzkaller\x00', 0x42ad, 0x3b, &(0x7f0000000500)=""/59, 0x40f00, 0x44, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xa, 0x9, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000006c0)=[r3, r5], &(0x7f0000000700)=[{0x1, 0x4, 0x9}, {0x0, 0x3, 0x6, 0x2}, {0x3, 0x3, 0x5, 0x1}, {0x1, 0x4, 0x4, 0x2}, {0x3, 0x3, 0x4, 0x8}, {0x1, 0x5, 0x9, 0x2}], 0x10, 0xe51d}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000540)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.879425565s ago: executing program 5 (id=470): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2$watch_queue(&(0x7f0000002240), 0x80) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000000080), 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) pipe(&(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r6, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 18.59829597s ago: executing program 0 (id=471): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x50, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001900010000000000fbdbff251d010900500012802a028080080027000e0000003d004180e7227ae5c252f37c41df2a84b5cdecbc7e272fbe572d6a76e2253ab30bd45f00466ac17605d18985dffc132cff49dc226eda6ce3c24e45f03a698e04"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x100000000000f7) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x10000}, [@jmp={0x5, 0x1, 0x3, 0x3, 0x4, 0xc, 0xffffffffffffffff}]}, &(0x7f00000004c0)='syzkaller\x00', 0x42ad, 0x3b, &(0x7f0000000500)=""/59, 0x40f00, 0x44, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xa, 0x9, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000006c0)=[r3, r5], &(0x7f0000000700)=[{0x1, 0x4, 0x9}, {0x0, 0x3, 0x6, 0x2}, {0x3, 0x3, 0x5, 0x1}, {0x1, 0x4, 0x4, 0x2}, {0x3, 0x3, 0x4, 0x8}, {0x1, 0x5, 0x9, 0x2}], 0x10, 0xe51d}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000540)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.763615104s ago: executing program 0 (id=472): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600060025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) setitimer(0x2, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 17.702902927s ago: executing program 5 (id=473): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, &(0x7f0000000580)=""/57, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) 17.634931123s ago: executing program 5 (id=474): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22a000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x40010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x149240, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)={@val={0x70, 0x800}, @void, @llc={@snap={0x1, 0xab, "ff", "77c2ca", 0x6000, "1efb7be5f1778fa839455b2bd59c34bcc201c86c1428c3aac06fd3df9e8db16727018b2ab07adc5601d2fe23577daf418ffc"}}}, 0x3e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180011000d00"/20, @ANYRES32=r9, @ANYRES16=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) 16.995798997s ago: executing program 4 (id=475): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x80010000}, 0x48) 15.846955711s ago: executing program 4 (id=476): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xfa, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xec, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x34, 0x4, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x70, 0x3, [{0x0, 0xc, "0800b28c590300000052"}, {0x1, 0x8, "020007651442"}, {0x0, 0xe, "743495437304000000b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x7, 0xf, "73bc23f9ffffffa30900a301c8"}, {0x0, 0xf, "c8f46976e79ea788f03d9d3205"}]}, @timestamp_addr={0x44, 0x4c, 0xe1, 0x1, 0x4, [{@loopback, 0x3}, {@empty, 0x81}, {@multicast1, 0x1}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xffff9a05}, {@loopback, 0x100}, {@private=0xa010100, 0x4}, {@multicast2, 0x80000000}, {@private=0xa010102, 0x12c}]}]}}}}}}}, 0x0) 15.845946433s ago: executing program 4 (id=477): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0xc, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0x800, 0x1, 0xc000, 0x5, 0x4132, 0x3, 0x1000, 0x7e, 0x99, 0x8, "fe1d00003413000000f1ff000080004000000000000000003f00"}}) 15.742611246s ago: executing program 4 (id=478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e, 0x1f000000}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 15.732059046s ago: executing program 4 (id=479): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x2080483) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x200, 0x0, 0x2, 0x3}, 0x20) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304026000000000000109022400013a000000090400000103000000092100000001220200090581"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001480)=""/4122, 0x101a, 0x99) pwritev(r1, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 2.49433388s ago: executing program 35 (id=472): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600060025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) setitimer(0x2, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 2.461609224s ago: executing program 36 (id=474): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22a000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x40010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x149240, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)={@val={0x70, 0x800}, @void, @llc={@snap={0x1, 0xab, "ff", "77c2ca", 0x6000, "1efb7be5f1778fa839455b2bd59c34bcc201c86c1428c3aac06fd3df9e8db16727018b2ab07adc5601d2fe23577daf418ffc"}}}, 0x3e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180011000d00"/20, @ANYRES32=r9, @ANYRES16=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) 0s ago: executing program 37 (id=479): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x2080483) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x200, 0x0, 0x2, 0x3}, 0x20) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304026000000000000109022400013a000000090400000103000000092100000001220200090581"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001480)=""/4122, 0x101a, 0x99) pwritev(r1, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): s an invalid bInterval 0, changing to 7 [ 97.919856][ T5876] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.954409][ T5876] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.963538][ T5876] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.007578][ T5876] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.026297][ T5876] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.035450][ T5876] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.051745][ T5876] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.078310][ T5876] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 98.088899][ T5876] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 98.097936][ T5876] usb 1-1: Product: syz [ 98.102307][ T5876] usb 1-1: Manufacturer: syz [ 98.106974][ T5876] usb 1-1: SerialNumber: syz [ 98.114895][ T5876] usb 1-1: config 0 descriptor?? [ 98.131964][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 98.136708][ T5876] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 98.166774][ T30] audit: type=1400 audit(1762653190.487:230): avc: denied { watch } for pid=6139 comm="syz.4.58" path="/12" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.292988][ T9] usb 4-1: device descriptor read/64, error -71 [ 98.341906][ T30] audit: type=1400 audit(1762653190.657:231): avc: denied { mounton } for pid=6142 comm="syz.4.59" path="/13/file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.366513][ T5876] kernel read not supported for file bpf-prog (pid: 5876 comm: kworker/1:5) [ 98.387143][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 98.411124][ T5876] usb 1-1: USB disconnect, device number 5 [ 98.433097][ T9] usb usb4-port1: attempt power cycle [ 98.439492][ T5876] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 98.687526][ T6147] syz.2.61 (6147): /proc/6146/oom_adj is deprecated, please use /proc/6146/oom_score_adj instead. [ 98.729633][ T30] audit: type=1400 audit(1762653191.047:232): avc: denied { create } for pid=6148 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 98.771323][ T6149] Illegal XDP return value 5405 on prog (id 20) dev syz_tun, expect packet loss! [ 98.811270][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 98.838998][ T30] audit: type=1400 audit(1762653191.157:233): avc: denied { write } for pid=6148 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 98.864048][ T6149] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 98.933498][ T9] usb 4-1: device descriptor read/8, error -71 [ 98.935960][ T6143] comedi: valid board names for 8255 driver are: [ 98.948831][ T6143] 8255 [ 98.952088][ T6143] comedi: valid board names for vmk80xx driver are: [ 98.958696][ T6143] vmk80xx [ 98.962179][ T6143] comedi: valid board names for usbduxsigma driver are: [ 98.964359][ T6149] bond1 (unregistering): Released all slaves [ 98.969203][ T6143] usbduxsigma [ 99.460668][ T6143] comedi: valid board names for usbduxfast driver are: [ 99.467739][ T6143] usbduxfast [ 99.472500][ T6143] comedi: valid board names for usbdux driver are: [ 99.484130][ T6143] usbdux [ 99.487259][ T6143] comedi: valid board names for ni6501 driver are: [ 99.494039][ T6143] ni6501 [ 99.497034][ T6143] comedi: valid board names for dt9812 driver are: [ 99.515429][ T6143] dt9812 [ 99.522265][ T6143] comedi: valid board names for ni_labpc_cs driver are: [ 99.552384][ T6143] ni_labpc_cs [ 99.554616][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'. [ 99.559669][ T6143] comedi: valid board names for ni_daq_700 driver are: [ 99.577358][ T6143] ni_daq_700 [ 99.580834][ T6143] comedi: valid board names for labpc_pci driver are: [ 99.590205][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 99.605470][ T6143] labpc_pci [ 99.615915][ T9] usb 4-1: device descriptor read/8, error -71 [ 99.624349][ T6143] comedi: valid board names for adl_pci9118 driver are: [ 99.635651][ T6143] pci9118dg [ 99.642040][ T6143] pci9118hg [ 99.649013][ T6143] pci9118hr [ 99.653247][ T6143] comedi: valid board names for 8255_pci driver are: [ 99.660871][ T6143] 8255_pci [ 99.675478][ T6143] comedi: valid board names for s526 driver are: [ 99.693058][ T6143] s526 [ 99.699004][ T6143] comedi: valid board names for multiq3 driver are: [ 99.713019][ T6143] multiq3 [ 99.716109][ T6143] comedi: valid board names for pcmuio driver are: [ 99.724146][ T6143] pcmuio48 [ 99.727315][ T6143] pcmuio96 [ 99.735881][ T6143] comedi: valid board names for pcmmio driver are: [ 99.745018][ T6143] pcmmio [ 99.746010][ T9] usb usb4-port1: unable to enumerate USB device [ 99.754866][ T6143] comedi: valid board names for pcmda12 driver are: [ 99.870199][ T6143] pcmda12 [ 99.874176][ T6143] comedi: valid board names for pcmad driver are: [ 99.880845][ T6143] pcmad12 [ 99.884357][ T6143] pcmad16 [ 99.887431][ T6143] comedi: valid board names for ni_labpc driver are: [ 99.894771][ T6143] lab-pc-1200 [ 99.898276][ T6143] lab-pc-1200ai [ 99.902187][ T6143] lab-pc+ [ 99.931327][ T6143] comedi: valid board names for atmio16 driver are: [ 99.939574][ T6143] atmio16 [ 99.943588][ T6143] atmio16d [ 99.946867][ T6143] comedi: valid board names for ni_at_ao driver are: [ 100.331783][ T6143] at-ao-6 [ 100.335173][ T6143] at-ao-10 [ 100.338523][ T6143] comedi: valid board names for ni_at_a2150 driver are: [ 100.351207][ T6143] ni_at_a2150 [ 100.356472][ T6143] comedi: valid board names for adq12b driver are: [ 100.372567][ T6143] adq12b [ 100.377554][ T6143] comedi: valid board names for mpc624 driver are: [ 100.415095][ T6143] mpc624 [ 100.425500][ T6143] comedi: valid board names for c6xdigio driver are: [ 100.443495][ T6143] c6xdigio [ 100.451237][ T6143] comedi: valid board names for aio_iiro_16 driver are: [ 100.496910][ T6143] aio_iiro_16 [ 100.501351][ T6143] comedi: valid board names for aio_aio12_8 driver are: [ 100.537162][ T6143] aio_aio12_8 [ 100.549975][ T6143] aio_ai12_8 [ 100.635437][ T6143] aio_ao12_4 [ 100.640700][ T6143] comedi: valid board names for fl512 driver are: [ 100.664700][ T6143] fl512 [ 100.669900][ T6143] comedi: valid board names for dmm32at driver are: [ 100.677266][ T6143] dmm32at [ 100.681837][ T6143] comedi: valid board names for dt282x driver are: [ 100.688876][ T6143] dt2821 [ 100.692009][ T6143] dt2821-f [ 100.695109][ T6143] dt2821-g [ 100.698195][ T6143] dt2823 [ 100.702332][ T6143] dt2824-pgh [ 100.705612][ T6143] dt2824-pgl [ 100.708871][ T6143] dt2825 [ 100.712714][ T6143] dt2827 [ 100.724547][ T6143] dt2828 [ 100.736970][ T6143] dt2829 [ 100.749532][ T6143] dt21-ez [ 100.762090][ T6143] dt23-ez [ 100.796838][ T6143] dt24-ez [ 100.817459][ T6143] dt24-ez-pgl [ 100.925271][ T6143] comedi: valid board names for dt2817 driver are: [ 100.966128][ T6143] dt2817 [ 101.024144][ T6143] comedi: valid board names for dt2815 driver are: [ 101.127244][ T6143] dt2815 [ 101.132419][ T6143] comedi: valid board names for dt2814 driver are: [ 101.141788][ T6143] dt2814 [ 101.144871][ T6143] comedi: valid board names for dt2811 driver are: [ 101.152052][ T6143] dt2811-pgh [ 101.155322][ T6143] dt2811-pgl [ 101.158579][ T6143] comedi: valid board names for dt2801 driver are: [ 101.179674][ T6143] dt2801 [ 101.231065][ T6143] comedi: valid board names for das6402 driver are: [ 101.237937][ T6143] das6402-12 [ 101.241628][ T6143] das6402-16 [ 101.250186][ T6143] comedi: valid board names for das1800 driver are: [ 101.267034][ T6143] das-1701st [ 101.276686][ T6143] das-1701st-da [ 101.285931][ T6143] das-1702st [ 101.297949][ T6143] das-1702st-da [ 101.315245][ T6143] das-1702hr [ 101.323824][ T6143] das-1702hr-da [ 101.331395][ T6143] das-1701ao [ 101.342068][ T6143] das-1702ao [ 101.354766][ T6143] das-1801st [ 101.377634][ T6143] das-1801st-da [ 101.390992][ T6143] das-1802st [ 101.410047][ T6143] das-1802st-da [ 101.484768][ T6143] das-1802hr [ 101.524540][ T6177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.69'. [ 101.536759][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 101.536772][ T30] audit: type=1400 audit(1762653193.817:242): avc: denied { create } for pid=6173 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.600993][ T6143] das-1802hr-da [ 101.649189][ T6143] das-1801hc [ 101.655600][ T6178] netlink: 64 bytes leftover after parsing attributes in process `syz.0.70'. [ 101.676454][ T6143] das-1802hc [ 101.679835][ T6143] das-1801ao [ 101.695683][ T6180] xt_hashlimit: size too large, truncated to 1048576 [ 101.703974][ T6143] das-1802ao [ 101.707385][ T6143] comedi: valid board names for das800 driver are: [ 101.961011][ T6143] das-800 [ 101.964052][ T6143] cio-das800 [ 101.967308][ T6143] das-801 [ 101.970296][ T6143] cio-das801 [ 102.659570][ T6188] Invalid ELF header magic: != ELF [ 102.666917][ T30] audit: type=1400 audit(1762653194.967:243): avc: denied { sys_module } for pid=6186 comm="syz.2.72" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.850974][ T6143] das-802 [ 102.854015][ T6143] cio-das802 [ 102.871447][ T6143] cio-das802/16 [ 102.881429][ T6143] comedi: valid board names for isa-das08 driver are: [ 102.901220][ T30] audit: type=1400 audit(1762653194.967:244): avc: denied { module_load } for pid=6186 comm="syz.2.72" path=2F6D656D66643AFB2261268F65118CD634F920202864656C6574656429 dev="hugetlbfs" ino=9524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 102.928498][ T6143] isa-das08 [ 102.928512][ T6143] das08-pgm [ 102.928518][ T6143] das08-pgh [ 102.928525][ T6143] das08-pgl [ 102.928531][ T6143] das08-aoh [ 102.928537][ T6143] das08-aol [ 102.928543][ T6143] das08-aom [ 102.928550][ T6143] das08/jr-ao [ 102.928556][ T6143] das08jr-16-ao [ 102.928563][ T6143] pc104-das08 [ 103.030979][ T6143] das08jr/16 [ 103.036647][ T6143] comedi: valid board names for das16m1 driver are: [ 103.045637][ T6143] das16m1 [ 103.048755][ T6143] comedi: valid board names for dac02 driver are: [ 103.139710][ T6143] dac02 [ 103.143422][ T6143] comedi: valid board names for rti802 driver are: [ 103.150009][ T6143] rti802 [ 103.200983][ T6143] comedi: valid board names for rti800 driver are: [ 103.219828][ T6143] rti800 [ 103.277082][ T6191] loop2: detected capacity change from 0 to 7 [ 103.287016][ T6191] Dev loop2: unable to read RDB block 7 [ 103.292766][ T6191] loop2: AHDI p1 p2 p3 [ 103.296923][ T6191] loop2: partition table partially beyond EOD, truncated [ 103.310996][ T6143] rti815 [ 103.313953][ T6143] comedi: valid board names for pcm3724 driver are: [ 103.320524][ T6143] pcm3724 [ 103.325611][ T6191] loop2: p1 start 1601398130 is beyond EOD, truncated [ 103.346805][ T6191] loop2: p2 start 1702059890 is beyond EOD, truncated [ 103.384305][ T6143] comedi: valid board names for pcl818 driver are: [ 103.413491][ T6143] pcl818l [ 103.421682][ T6143] pcl818h [ 103.426768][ T6143] pcl818hd [ 103.441220][ T6143] pcl818hg [ 103.449474][ T6143] pcl818 [ 103.459262][ T6143] pcl718 [ 103.472543][ T6143] pcm3718 [ 103.511227][ T6143] comedi: valid board names for pcl816 driver are: [ 103.581036][ T6143] pcl816 [ 103.584006][ T6143] pcl814b [ 103.587033][ T6143] comedi: valid board names for pcl812 driver are: [ 103.644645][ T6143] pcl812 [ 103.648484][ T6143] pcl812pg [ 103.702100][ T6143] acl8112pg [ 103.711321][ T6143] acl8112dg [ 103.813378][ T6143] acl8112hg [ 103.817079][ T6143] a821pgl [ 103.835055][ T6143] a821pglnda [ 103.865224][ T6143] a821pgh [ 103.868854][ T6143] a822pgl [ 103.896665][ T1206] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.032182][ T6143] a822pgh [ 104.035481][ T6143] a823pgl [ 104.038555][ T6143] a823pgh [ 104.049693][ T6143] pcl813 [ 104.057777][ T6143] pcl813b [ 104.068420][ T6143] acl8113 [ 104.074980][ T6143] iso813 [ 104.080455][ T6143] acl8216 [ 104.081089][ T5876] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 104.089550][ T6143] a826pg [ 104.096086][ T6143] comedi: valid board names for pcl730 driver are: [ 104.118584][ T6143] pcl730 [ 104.124047][ T6143] iso730 [ 104.127002][ T6143] acl7130 [ 104.130080][ T6143] pcm3730 [ 104.134180][ T6143] pcl725 [ 104.139159][ T6143] p8r8dio [ 104.142485][ T6143] acl7225b [ 104.145628][ T6143] p16r16dio [ 104.148820][ T6143] pcl733 [ 104.152267][ T6143] pcl734 [ 104.155264][ T6143] opmm-1616-xt [ 104.158766][ T6143] pearl-mm-p [ 104.169468][ T6143] ir104-pbf [ 104.174959][ T6143] comedi: valid board names for pcl726 driver are: [ 104.182277][ T6143] pcl726 [ 104.183094][ T1206] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 104.185274][ T6143] pcl727 [ 104.193837][ T1206] usb 1-1: config 0 has no interface number 0 [ 104.196252][ T6143] pcl728 [ 104.196261][ T6143] acl6126 [ 104.196267][ T6143] acl6128 [ 104.196274][ T6143] comedi: valid board names for pcl724 driver are: [ 104.203939][ T1206] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 104.206068][ T6143] pcl724 [ 104.206078][ T6143] pcl722 [ 104.206084][ T6143] pcl731 [ 104.206091][ T6143] acl7122 [ 104.206098][ T6143] acl7124 [ 104.209165][ T1206] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 104.216211][ T6143] pet48dio [ 104.219740][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.230827][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.78'. [ 104.235827][ T6143] pcmio48 [ 104.245216][ T5876] usb 4-1: device descriptor read/64, error -71 [ 104.255981][ T1206] usb 1-1: config 0 descriptor?? [ 104.288311][ T6143] onyx-mm-dio [ 104.293109][ T6143] comedi: valid board names for pcl711 driver are: [ 104.301960][ T1206] ttusbir 1-1:0.83: cannot find expected altsetting [ 104.307137][ T6143] pcl711 [ 104.317655][ T6143] pcl711b [ 104.320695][ T6143] acl8112hg [ 104.323969][ T6143] acl8112dg [ 104.327157][ T6143] comedi: valid board names for amplc_pc263 driver are: [ 104.348136][ T6143] pc263 [ 104.351874][ T6143] comedi: valid board names for amplc_pc236 driver are: [ 104.358903][ T6143] pc36at [ 104.362335][ T6143] comedi: valid board names for amplc_dio200 driver are: [ 104.369930][ T6143] pc212e [ 104.373711][ T6143] pc214e [ 104.376738][ T6143] pc215e [ 104.379748][ T6143] pc218e [ 104.383131][ T6143] pc272e [ 104.386276][ T6143] comedi: valid board names for comedi_parport driver are: [ 104.387933][ T6213] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.399729][ T6143] comedi_parport [ 104.411794][ T6143] comedi: valid board names for comedi_test driver are: [ 104.418837][ T6143] comedi_test [ 104.422757][ T6143] comedi: valid board names for comedi_bond driver are: [ 104.430372][ T6143] comedi_bond [ 104.493437][ T5887] usb 1-1: USB disconnect, device number 6 [ 104.541119][ T5876] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 104.831377][ T5876] usb 4-1: device descriptor read/64, error -71 [ 105.010485][ T5876] usb usb4-port1: attempt power cycle [ 105.045254][ T6221] netlink: 'syz.2.82': attribute type 11 has an invalid length. [ 105.053054][ T30] audit: type=1400 audit(1762653197.367:245): avc: denied { create } for pid=6220 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.101424][ T30] audit: type=1400 audit(1762653197.367:246): avc: denied { write } for pid=6220 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.148174][ T6226] netlink: 64 bytes leftover after parsing attributes in process `syz.4.84'. [ 105.371138][ T5876] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 105.433923][ T5876] usb 4-1: device descriptor read/8, error -71 [ 105.451382][ T30] audit: type=1400 audit(1762653197.767:247): avc: denied { name_bind } for pid=6235 comm="syz.1.88" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 105.534326][ T30] audit: type=1400 audit(1762653197.837:248): avc: denied { execute } for pid=6235 comm="syz.1.88" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 105.574777][ T6240] xt_cgroup: invalid path, errno=-2 [ 105.691151][ T5876] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 105.732205][ T5876] usb 4-1: device descriptor read/8, error -71 [ 105.862116][ T5876] usb usb4-port1: unable to enumerate USB device [ 105.886558][ T30] audit: type=1400 audit(1762653198.207:249): avc: denied { create } for pid=6242 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.151274][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 106.231069][ T5887] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.316621][ T9] usb 5-1: config 0 has an invalid interface number: 62 but max is 0 [ 106.324921][ T9] usb 5-1: config 0 has no interface number 0 [ 106.352623][ T9] usb 5-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=1b.48 [ 106.369268][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.388242][ T9] usb 5-1: Product: syz [ 106.398290][ T9] usb 5-1: Manufacturer: syz [ 106.408413][ T9] usb 5-1: SerialNumber: syz [ 106.413551][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 106.427410][ T5887] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.439048][ T9] usb 5-1: config 0 descriptor?? [ 106.445041][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.456810][ T9] snd-usb-caiaq 5-1:0.62: can't set alt interface. [ 106.465840][ T5887] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 106.478481][ T9] usb 5-1: unable to init card! (ret=-5) [ 106.485347][ T9] snd-usb-caiaq 5-1:0.62: probe with driver snd-usb-caiaq failed with error -5 [ 106.494789][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.511500][ T5887] usb 1-1: config 0 descriptor?? [ 106.535728][ T5887] usbhid 1-1:0.0: can't add hid device: -22 [ 106.543466][ T5887] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 106.572599][ T6248] syzkaller1: entered promiscuous mode [ 106.588353][ T6248] syzkaller1: entered allmulticast mode [ 106.660999][ T30] audit: type=1400 audit(1762653198.977:250): avc: denied { bind } for pid=6242 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.684619][ T30] audit: type=1400 audit(1762653198.977:251): avc: denied { write } for pid=6242 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.689584][ T5887] usb 5-1: USB disconnect, device number 4 [ 107.022216][ T6260] syz.3.94 uses obsolete (PF_INET,SOCK_PACKET) [ 107.050311][ T30] audit: type=1400 audit(1762653199.367:252): avc: denied { write } for pid=6254 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.171895][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.192889][ T6255] block device autoloading is deprecated and will be removed. [ 107.218737][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.249955][ T30] audit: type=1400 audit(1762653199.567:253): avc: denied { map } for pid=6254 comm="syz.3.94" path="socket:[10458]" dev="sockfs" ino=10458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.325121][ T6255] lo speed is unknown, defaulting to 1000 [ 107.343868][ T6255] lo speed is unknown, defaulting to 1000 [ 107.384508][ T6255] lo speed is unknown, defaulting to 1000 [ 107.394579][ T30] audit: type=1400 audit(1762653199.567:254): avc: denied { read accept } for pid=6254 comm="syz.3.94" path="socket:[10458]" dev="sockfs" ino=10458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.444652][ T6255] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.681242][ T30] audit: type=1400 audit(1762653199.977:255): avc: denied { create } for pid=6264 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.958143][ T30] audit: type=1400 audit(1762653199.977:256): avc: denied { bind } for pid=6264 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.995039][ T6269] capability: warning: `syz.1.93' uses 32-bit capabilities (legacy support in use) [ 108.093988][ T6255] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 108.151605][ T30] audit: type=1400 audit(1762653200.447:257): avc: denied { read write } for pid=6277 comm="syz.4.97" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.174585][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.213326][ T30] audit: type=1400 audit(1762653200.447:258): avc: denied { open } for pid=6277 comm="syz.4.97" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.240720][ T30] audit: type=1400 audit(1762653200.447:259): avc: denied { ioctl } for pid=6277 comm="syz.4.97" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.005076][ T6255] lo speed is unknown, defaulting to 1000 [ 109.014720][ T1206] usb 1-1: USB disconnect, device number 7 [ 109.087641][ T6255] lo speed is unknown, defaulting to 1000 [ 109.125151][ T6255] lo speed is unknown, defaulting to 1000 [ 109.151970][ T6255] lo speed is unknown, defaulting to 1000 [ 109.201373][ T6255] lo speed is unknown, defaulting to 1000 [ 109.345227][ T6298] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 109.639277][ T6298] evm: overlay not supported [ 110.005693][ T6306] fuse: Bad value for 'fd' [ 110.248444][ T976] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.764771][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 111.785896][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.801241][ T976] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 111.814959][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.824031][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.836022][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.850762][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.860377][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.873110][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.882041][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.891089][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.902387][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.950433][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.959672][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.971040][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.979050][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.988290][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.002014][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.010740][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.020606][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.033149][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.040295][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 112.040599][ T30] audit: type=1400 audit(1762653204.327:265): avc: denied { mount } for pid=6321 comm="syz.0.109" name="/" dev="autofs" ino=9891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 112.041750][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.086268][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.087670][ T6319] bridge_slave_1 (unregistering): left allmulticast mode [ 112.105252][ T6319] bridge_slave_1 (unregistering): left promiscuous mode [ 112.113961][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.119271][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.191733][ T30] audit: type=1400 audit(1762653204.517:266): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 112.279205][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.288207][ T976] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.334631][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.348668][ T976] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 112.376685][ T976] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 112.385868][ T976] usb 5-1: Product: syz [ 112.390184][ T976] usb 5-1: Manufacturer: syz [ 112.396060][ T976] usb 5-1: SerialNumber: syz [ 112.421710][ T976] usb 5-1: config 0 descriptor?? [ 112.452697][ T976] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 112.672831][ T30] audit: type=1400 audit(1762653204.987:267): avc: denied { create } for pid=6329 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 112.676555][ T976] usb 5-1: USB disconnect, device number 5 [ 112.822991][ T976] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 112.941122][ T6333] syzkaller0: entered promiscuous mode [ 112.951351][ T6333] syzkaller0: entered allmulticast mode [ 113.001526][ T6333] netlink: 44 bytes leftover after parsing attributes in process `syz.2.113'. [ 113.007924][ T6335] netlink: 'syz.3.114': attribute type 1 has an invalid length. [ 113.081633][ T6333] Invalid option length (938168) for dns_resolver key [ 113.196839][ T30] audit: type=1400 audit(1762653205.517:268): avc: denied { write } for pid=6308 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.717128][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.810039][ T30] audit: type=1400 audit(1762653206.127:269): avc: denied { remount } for pid=6352 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.224314][ T6365] loop2: detected capacity change from 0 to 7 [ 114.263558][ T6366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.349941][ T6365] Dev loop2: unable to read RDB block 7 [ 114.356425][ T6365] loop2: AHDI p1 p2 p3 [ 114.368288][ T6365] loop2: partition table partially beyond EOD, truncated [ 114.380772][ T6365] loop2: p1 start 1601398130 is beyond EOD, truncated [ 114.388362][ T6365] loop2: p2 start 1702059890 is beyond EOD, truncated [ 115.751040][ T5811] Bluetooth: hci5: command 0xfc11 tx timeout [ 115.757200][ T5817] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 116.230999][ T5887] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.244130][ T1206] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.401995][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 116.414887][ T5887] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 116.431470][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.445005][ T1206] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 116.461801][ T5887] usb 1-1: Product: syz [ 116.466027][ T1206] usb 5-1: config 0 has no interface number 0 [ 116.472503][ T5887] usb 1-1: Manufacturer: syz [ 116.477101][ T5887] usb 1-1: SerialNumber: syz [ 116.484160][ T1206] usb 5-1: config 0 interface 41 has no altsetting 0 [ 116.503219][ T1206] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 116.514481][ T5887] usb 1-1: config 0 descriptor?? [ 116.529100][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.550610][ T1206] usb 5-1: Product: syz [ 116.559523][ T1206] usb 5-1: Manufacturer: syz [ 116.600592][ T1206] usb 5-1: SerialNumber: syz [ 116.637047][ T1206] usb 5-1: config 0 descriptor?? [ 117.205638][ T1206] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 117.243415][ T30] audit: type=1400 audit(1762653209.557:270): avc: denied { setopt } for pid=6390 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.587712][ T30] audit: type=1400 audit(1762653209.887:271): avc: denied { connect } for pid=6407 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.794182][ T30] audit: type=1400 audit(1762653209.887:272): avc: denied { name_connect } for pid=6407 comm="syz.3.135" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 117.817029][ T30] audit: type=1400 audit(1762653209.907:273): avc: denied { getopt } for pid=6407 comm="syz.3.135" lport=41030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.841612][ T30] audit: type=1400 audit(1762653209.997:274): avc: denied { accept } for pid=6414 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.180712][ T30] audit: type=1400 audit(1762653210.497:275): avc: denied { create } for pid=6426 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.733644][ T6435] bridge1: entered allmulticast mode [ 118.834719][ T10] usb 5-1: USB disconnect, device number 6 [ 118.924258][ T5887] usb-storage 1-1:0.0: USB Mass Storage device detected [ 119.059654][ T30] audit: type=1400 audit(1762653211.377:276): avc: denied { lock } for pid=6440 comm="syz.2.144" path="socket:[11059]" dev="sockfs" ino=11059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.068487][ T6438] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 119.100514][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 119.106226][ T5887] usb 1-1: USB disconnect, device number 8 [ 119.121340][ T30] audit: type=1400 audit(1762653211.407:277): avc: denied { ioctl } for pid=6440 comm="syz.2.144" path="socket:[11067]" dev="sockfs" ino=11067 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.167839][ T6441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.208790][ T6445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.263366][ T6448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.302085][ T6441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.314578][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 119.459250][ T30] audit: type=1400 audit(1762653211.767:278): avc: denied { block_suspend } for pid=6451 comm="syz.4.149" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.539797][ T30] audit: type=1400 audit(1762653211.847:279): avc: denied { write } for pid=6451 comm="syz.4.149" path="socket:[11100]" dev="sockfs" ino=11100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.125423][ T6461] lo speed is unknown, defaulting to 1000 [ 120.611170][ T1213] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.835443][ T1213] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 120.851311][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.869892][ T1213] usb 1-1: config 0 descriptor?? [ 120.880247][ T6469] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 120.948052][ T6477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'. [ 121.141864][ T1213] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 121.247504][ T6473] infiniband syz1: set active [ 121.259963][ T6473] infiniband syz1: added syz_tun [ 121.364589][ T1213] [drm:udl_init] *ERROR* Selecting channel failed [ 121.375567][ T6473] RDS/IB: syz1: added [ 121.381055][ T6473] smc: adding ib device syz1 with port count 1 [ 121.396692][ T6473] smc: ib device syz1 port 1 has no pnetid [ 121.403364][ T1213] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 121.410832][ T1213] [drm] Initialized udl on minor 2 [ 121.418043][ T1213] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 121.429232][ T1213] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 121.438731][ T1206] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 121.448790][ T1213] usb 1-1: USB disconnect, device number 9 [ 121.456075][ T1206] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 121.500275][ T6469] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 122.447634][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 122.447651][ T30] audit: type=1400 audit(1762653214.767:281): avc: denied { connect } for pid=6494 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.540969][ T30] audit: type=1400 audit(1762653214.767:282): avc: denied { setopt } for pid=6494 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.601025][ T30] audit: type=1400 audit(1762653214.767:283): avc: denied { read } for pid=6494 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.899994][ T6501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.162'. [ 123.103150][ T30] audit: type=1400 audit(1762653215.417:284): avc: denied { bind } for pid=6499 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.143699][ T30] audit: type=1400 audit(1762653215.417:285): avc: denied { listen } for pid=6499 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.406013][ T30] audit: type=1400 audit(1762653215.727:286): avc: denied { read } for pid=6512 comm="syz.0.165" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 123.460488][ T30] audit: type=1400 audit(1762653215.727:287): avc: denied { open } for pid=6512 comm="syz.0.165" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 124.126606][ T30] audit: type=1400 audit(1762653216.447:288): avc: denied { name_bind } for pid=6523 comm="syz.0.168" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 124.170436][ T30] audit: type=1400 audit(1762653216.487:289): avc: denied { setopt } for pid=6523 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.401160][ T30] audit: type=1400 audit(1762653216.677:290): avc: denied { append } for pid=6527 comm="syz.4.170" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 124.424651][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.772485][ T6543] fuse: Bad value for 'rootmode' [ 126.238232][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 126.571589][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 126.800963][ T5887] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.910276][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 126.960945][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 126.968932][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.980715][ T5887] usb 1-1: config 7 has an invalid interface number: 25 but max is 0 [ 126.999043][ T5887] usb 1-1: config 7 has no interface number 0 [ 127.020921][ T5887] usb 1-1: config 7 interface 25 has no altsetting 0 [ 127.042642][ T5887] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=1b.a2 [ 127.054224][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.099707][ T5887] usb 1-1: Product: syz [ 127.136318][ T5887] usb 1-1: Manufacturer: syz [ 127.149597][ T5887] usb 1-1: SerialNumber: syz [ 127.848538][ T6571] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 127.867005][ T6571] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 128.322041][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 128.322053][ T30] audit: type=1400 audit(1762653220.647:312): avc: denied { remove_name } for pid=6573 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2818 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.891155][ T30] audit: type=1400 audit(1762653220.757:313): avc: denied { write } for pid=6574 comm="syz.4.180" name="if_inet6" dev="proc" ino=4026533220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 128.924142][ T30] audit: type=1400 audit(1762653220.857:314): avc: denied { unlink } for pid=6573 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2818 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.202285][ T5887] usb_ehset_test 1-1:7.25: probe with driver usb_ehset_test failed with error -32 [ 129.255944][ T5887] usb 1-1: USB disconnect, device number 10 [ 129.550995][ T5876] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.731021][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 129.744543][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.760193][ T5876] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 129.773275][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.791834][ T5876] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 129.824739][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.842853][ T5876] usb 5-1: Product: syz [ 129.884430][ T5876] usb 5-1: Manufacturer: syz [ 129.889060][ T5876] usb 5-1: SerialNumber: syz [ 129.971301][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 129.997956][ T43] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 130.009147][ T43] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.028180][ T30] audit: type=1400 audit(1762653222.337:315): avc: denied { create } for pid=6601 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.037302][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.448087][ T5876] usb 5-1: Limiting number of CPorts to U8_MAX [ 130.457742][ T30] audit: type=1400 audit(1762653222.347:316): avc: denied { ioctl } for pid=6601 comm="syz.1.185" path="socket:[11601]" dev="sockfs" ino=11601 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.532337][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.554994][ T5876] usb 5-1: Not enough endpoints found in device, aborting! [ 130.566469][ T43] usb 3-1: Product: syz [ 130.590102][ T43] usb 3-1: Manufacturer: syz [ 130.604740][ T43] usb 3-1: SerialNumber: syz [ 131.019811][ T6614] fuse: Unknown parameter 'grou00000000000000000000' [ 131.166905][ T6613] macvtap1: entered promiscuous mode [ 131.173670][ T6613] macvtap1: entered allmulticast mode [ 131.179128][ T6613] veth1_vlan: entered allmulticast mode [ 131.315824][ T43] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 131.401638][ T43] usb 3-1: USB disconnect, device number 3 [ 131.524533][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.892838][ T30] audit: type=1400 audit(1762653224.217:317): avc: denied { read } for pid=6625 comm="syz.0.191" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 131.894053][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 131.929621][ T6626] 9pnet_fd: Insufficient options for proto=fd [ 131.939483][ T30] audit: type=1400 audit(1762653224.247:318): avc: denied { open } for pid=6625 comm="syz.0.191" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 131.968174][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 131.982429][ T6628] netlink: 'syz.3.193': attribute type 1 has an invalid length. [ 132.099041][ T30] audit: type=1400 audit(1762653224.417:319): avc: denied { write } for pid=6629 comm="syz.1.192" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 132.214092][ T30] audit: type=1326 audit(1762653224.537:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 132.523748][ T30] audit: type=1326 audit(1762653224.537:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 132.625474][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.655961][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.799644][ T1213] usb 5-1: USB disconnect, device number 7 [ 132.841357][ T1206] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.054098][ T1206] usb 4-1: Using ep0 maxpacket: 32 [ 133.606411][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 133.606426][ T30] audit: type=1326 audit(1762653225.917:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67ed38f2cb code=0x7ffc0000 [ 133.982922][ T1206] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.007877][ T1206] usb 4-1: config 0 has no interface number 0 [ 134.045627][ T1206] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.057805][ T30] audit: type=1326 audit(1762653226.127:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67ed38f2cb code=0x7ffc0000 [ 134.089854][ T1206] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.108790][ T1206] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 134.127674][ T30] audit: type=1326 audit(1762653226.187:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67ed38f2cb code=0x7ffc0000 [ 134.171387][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.196997][ T1206] usb 4-1: config 0 descriptor?? [ 134.208331][ T30] audit: type=1326 audit(1762653226.227:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67ed38f2cb code=0x7ffc0000 [ 134.233455][ T30] audit: type=1326 audit(1762653226.307:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67ed38f2cb code=0x7ffc0000 [ 134.256996][ T30] audit: type=1326 audit(1762653226.307:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67ed38f2cb code=0x7ffc0000 [ 134.296655][ T30] audit: type=1400 audit(1762653226.337:354): avc: denied { append } for pid=6646 comm="syz.4.199" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.328580][ T30] audit: type=1326 audit(1762653226.527:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67ed38f2cb code=0x7ffc0000 [ 134.350956][ T976] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.359807][ T30] audit: type=1326 audit(1762653226.527:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67ed38f2cb code=0x7ffc0000 [ 134.491057][ T30] audit: type=1326 audit(1762653226.527:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67ed38f2cb code=0x7ffc0000 [ 134.609900][ T6667] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 134.643854][ T976] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.652601][ T976] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49919, setting to 1024 [ 134.664242][ T976] usb 2-1: config 1 interface 1 has no altsetting 0 [ 134.672777][ T976] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.683353][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.691397][ T976] usb 2-1: Product: syz [ 134.695558][ T976] usb 2-1: Manufacturer: syz [ 134.700147][ T976] usb 2-1: SerialNumber: syz [ 134.823043][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.832780][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.841776][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 134.844342][ T1206] usbhid 4-1:0.1: can't add hid device: -71 [ 134.858980][ T1206] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 134.871769][ T1206] usb 4-1: USB disconnect, device number 13 [ 134.878197][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.918447][ T976] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 134.926515][ T976] usb 2-1: found format II with max.bitrate = 2418, frame size=7 [ 134.934789][ T976] usb 2-1: 2:1: All rates were zero [ 134.950742][ T976] usb 2-1: USB disconnect, device number 5 [ 135.014377][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 135.025052][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 135.036818][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 135.046776][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 135.056649][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 135.066154][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.075519][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.088649][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 135.102377][ T24] usb 1-1: config 0 descriptor?? [ 135.118061][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.127190][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.135260][ T5876] usb 5-1: Product: syz [ 135.139449][ T5876] usb 5-1: Manufacturer: syz [ 135.144813][ T5876] usb 5-1: SerialNumber: syz [ 135.355934][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.368958][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.391015][ T24] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 135.401375][ T24] hdpvr 1-1:0.0: device init failed [ 135.407309][ T24] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 135.426439][ T24] usb 1-1: USB disconnect, device number 11 [ 136.075836][ T6666] kvm: kvm [6665]: vcpu2, guest rIP: 0x913c Unhandled WRMSR(0x11e) = 0x0 [ 136.393360][ T1206] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.565360][ T1206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.589627][ T1206] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 136.615498][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.944417][ T6694] PKCS7: Unknown OID: [5] (bad) [ 136.949334][ T6694] PKCS7: Only support pkcs7_signedData type [ 136.993500][ T1206] usb 2-1: config 0 descriptor?? [ 137.010688][ T6687] xt_cgroup: invalid path, errno=-2 [ 137.062392][ T1206] pwc: Askey VC010 type 2 USB webcam detected. [ 137.651890][ T1206] pwc: recv_control_msg error -32 req 02 val 2700 [ 137.675772][ T1206] pwc: recv_control_msg error -32 req 02 val 2c00 [ 137.715758][ T1206] pwc: recv_control_msg error -71 req 04 val 1000 [ 137.734358][ T1206] pwc: recv_control_msg error -71 req 04 val 1300 [ 137.767337][ T1206] pwc: recv_control_msg error -71 req 04 val 1400 [ 137.821435][ T1206] pwc: recv_control_msg error -71 req 02 val 2000 [ 137.837675][ T1206] pwc: recv_control_msg error -71 req 02 val 2100 [ 137.938972][ T6699] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 137.946858][ T6699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.210'. [ 137.957133][ T6699] veth0_vlan: entered allmulticast mode [ 137.966181][ T6699] bridge0: port 3(veth0_vlan) entered blocking state [ 137.973510][ T6699] bridge0: port 3(veth0_vlan) entered disabled state [ 138.005835][ T6699] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 138.307787][ T1206] pwc: recv_control_msg error -71 req 04 val 1500 [ 138.346088][ T1206] pwc: recv_control_msg error -71 req 02 val 2500 [ 138.368327][ T1206] pwc: recv_control_msg error -71 req 02 val 2400 [ 138.420987][ T1206] pwc: recv_control_msg error -71 req 02 val 2600 [ 138.441489][ T1206] pwc: recv_control_msg error -71 req 02 val 2900 [ 138.478307][ T1206] pwc: recv_control_msg error -71 req 02 val 2800 [ 138.520032][ T1206] pwc: recv_control_msg error -71 req 04 val 1100 [ 138.537602][ T1206] pwc: recv_control_msg error -71 req 04 val 1200 [ 138.550485][ T1206] pwc: Registered as video103. [ 138.610121][ T1206] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 138.610997][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 138.611010][ T30] audit: type=1400 audit(1762653230.927:397): avc: denied { getopt } for pid=6702 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.260480][ T1206] usb 2-1: USB disconnect, device number 6 [ 139.308226][ T30] audit: type=1400 audit(1762653231.207:398): avc: denied { bind } for pid=6702 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.756130][ T30] audit: type=1400 audit(1762653231.207:399): avc: denied { connect } for pid=6702 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.756179][ T30] audit: type=1400 audit(1762653231.667:400): avc: denied { ioctl } for pid=6700 comm="syz.1.211" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.756222][ T30] audit: type=1400 audit(1762653232.077:401): avc: denied { read } for pid=6700 comm="syz.1.211" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 139.756265][ T30] audit: type=1400 audit(1762653232.077:402): avc: denied { open } for pid=6700 comm="syz.1.211" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 139.756305][ T30] audit: type=1400 audit(1762653232.077:403): avc: denied { ioctl } for pid=6700 comm="syz.1.211" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 139.782516][ T5876] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 139.921137][ T5876] usb 5-1: USB disconnect, device number 8 [ 139.985507][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.234168][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.222'. [ 142.288338][ T30] audit: type=1400 audit(1762653234.607:404): avc: denied { read } for pid=6751 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.420958][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 142.485435][ T30] audit: type=1400 audit(1762653234.787:405): avc: denied { create } for pid=6751 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.555714][ T6759] FAULT_INJECTION: forcing a failure. [ 142.555714][ T6759] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.610976][ T5876] usb 5-1: device descriptor read/64, error -71 [ 142.620984][ T6759] CPU: 0 UID: 0 PID: 6759 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 142.621012][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.621024][ T6759] Call Trace: [ 142.621031][ T6759] [ 142.621039][ T6759] dump_stack_lvl+0x16c/0x1f0 [ 142.621075][ T6759] should_fail_ex+0x512/0x640 [ 142.621100][ T6759] _copy_to_user+0x32/0xd0 [ 142.621127][ T6759] simple_read_from_buffer+0xcb/0x170 [ 142.621160][ T6759] proc_fail_nth_read+0x197/0x240 [ 142.621184][ T6759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.621203][ T6759] ? rw_verify_area+0xcf/0x6c0 [ 142.621228][ T6759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.621247][ T6759] vfs_read+0x1e4/0xcf0 [ 142.621268][ T6759] ? __pfx___mutex_lock+0x10/0x10 [ 142.621287][ T6759] ? __pfx_vfs_read+0x10/0x10 [ 142.621310][ T6759] ? __fget_files+0x20e/0x3c0 [ 142.621338][ T6759] ksys_read+0x12a/0x250 [ 142.621355][ T6759] ? __pfx_ksys_read+0x10/0x10 [ 142.621383][ T6759] do_syscall_64+0xcd/0xfa0 [ 142.621403][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.621423][ T6759] RIP: 0033:0x7efd21d8e0dc [ 142.621439][ T6759] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.621456][ T6759] RSP: 002b:00007efd22cc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.621475][ T6759] RAX: ffffffffffffffda RBX: 00007efd21fe5fa0 RCX: 00007efd21d8e0dc [ 142.621488][ T6759] RDX: 000000000000000f RSI: 00007efd22cc20a0 RDI: 0000000000000004 [ 142.621500][ T6759] RBP: 00007efd22cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 142.621511][ T6759] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 142.621522][ T6759] R13: 00007efd21fe6038 R14: 00007efd21fe5fa0 R15: 00007ffc4ac508b8 [ 142.621551][ T6759] [ 142.961876][ T5876] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.088499][ T976] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 143.111365][ T5876] usb 5-1: device descriptor read/64, error -71 [ 143.234716][ T5876] usb usb5-port1: attempt power cycle [ 143.263913][ T976] usb 4-1: device descriptor read/64, error -71 [ 143.601068][ T976] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 143.623352][ T5876] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.665541][ T5876] usb 5-1: device descriptor read/8, error -71 [ 143.760972][ T976] usb 4-1: device descriptor read/64, error -71 [ 143.871916][ T976] usb usb4-port1: attempt power cycle [ 143.921003][ T5876] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.968116][ T5876] usb 5-1: device descriptor read/8, error -71 [ 144.111236][ T5876] usb usb5-port1: unable to enumerate USB device [ 144.445138][ T976] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 144.471620][ T976] usb 4-1: device descriptor read/8, error -71 [ 144.840975][ T976] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 144.889169][ T6794] autofs: Unknown parameter 'fd0x0000000000000000' [ 145.272675][ T976] usb 4-1: device descriptor read/8, error -71 [ 145.431112][ T5811] Bluetooth: hci4: command 0x0405 tx timeout [ 145.431509][ T976] usb usb4-port1: unable to enumerate USB device [ 145.582187][ T6803] capability: warning: `syz.1.240' uses deprecated v2 capabilities in a way that may be insecure [ 145.746577][ T1213] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 146.060990][ T1213] usb 5-1: Using ep0 maxpacket: 8 [ 146.116803][ T1213] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 146.159070][ T1213] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 146.198399][ T1213] usb 5-1: Product: syz [ 146.225436][ T1213] usb 5-1: Manufacturer: syz [ 146.373893][ T1213] usb 5-1: SerialNumber: syz [ 146.419465][ T6825] Cannot find set identified by id 0 to match [ 146.661733][ T1213] usb 5-1: config 0 descriptor?? [ 146.678919][ T5819] syz1: Port: 1 Link DOWN [ 146.679573][ T2990] smc: removing ib device syz1 [ 146.715557][ T1213] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 147.096693][ T1213] gspca_zc3xx: reg_r err -71 [ 147.101961][ T1213] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 147.143546][ T1213] usb 5-1: USB disconnect, device number 13 [ 148.151825][ T6841] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 148.160028][ T6841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.270966][ T1213] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 148.443345][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.453369][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 148.473704][ T1213] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 148.486726][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 148.497913][ T1213] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 148.622755][ T1213] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 148.644623][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.685283][ T5887] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 148.708560][ T1213] usb 5-1: config 0 descriptor?? [ 148.727158][ T6852] can0: slcan on ttyS3. [ 148.731882][ T5887] usb 1-1: config 0 has no interface number 0 [ 148.769607][ T5887] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 148.778857][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.787423][ T5887] usb 1-1: Product: syz [ 148.793365][ T5887] usb 1-1: Manufacturer: syz [ 148.798009][ T5887] usb 1-1: SerialNumber: syz [ 148.847292][ T5887] usb 1-1: config 0 descriptor?? [ 148.943446][ T6837] x_tables: duplicate underflow at hook 1 [ 149.052205][ T6851] can0 (unregistered): slcan off ttyS3. [ 149.054059][ T30] audit: type=1400 audit(1762653241.377:406): avc: denied { getattr } for pid=6836 comm="syz.4.251" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.131125][ T1213] hdpvr 5-1:0.0: firmware version 0x0 dated [ 149.137131][ T1213] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 149.233922][ T5896] usb 1-1: USB disconnect, device number 12 [ 149.851443][ T30] audit: type=1400 audit(1762653241.447:407): avc: denied { bind } for pid=6856 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.910804][ T1213] hdpvr 5-1:0.0: device init failed [ 149.931344][ T1213] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 149.993677][ T30] audit: type=1400 audit(1762653241.447:408): avc: denied { name_bind } for pid=6856 comm="syz.2.259" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 150.060977][ T30] audit: type=1400 audit(1762653241.447:409): avc: denied { node_bind } for pid=6856 comm="syz.2.259" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 150.124457][ T1054] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.154083][ T1213] usb 5-1: USB disconnect, device number 14 [ 150.554167][ T6862] block device autoloading is deprecated and will be removed. [ 150.927833][ T1054] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.133948][ T1054] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.305660][ T6904] FAULT_INJECTION: forcing a failure. [ 151.305660][ T6904] name failslab, interval 1, probability 0, space 0, times 0 [ 151.352243][ T6904] CPU: 1 UID: 0 PID: 6904 Comm: syz.4.267 Not tainted syzkaller #0 PREEMPT(full) [ 151.352272][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.352283][ T6904] Call Trace: [ 151.352289][ T6904] [ 151.352297][ T6904] dump_stack_lvl+0x16c/0x1f0 [ 151.352331][ T6904] should_fail_ex+0x512/0x640 [ 151.352352][ T6904] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 151.352384][ T6904] should_failslab+0xc2/0x120 [ 151.352404][ T6904] kmem_cache_alloc_node_noprof+0x78/0x770 [ 151.352429][ T6904] ? __alloc_skb+0x2b2/0x380 [ 151.352458][ T6904] ? __alloc_skb+0x2b2/0x380 [ 151.352476][ T6904] ? __pfx_avc_has_perm+0x10/0x10 [ 151.352498][ T6904] __alloc_skb+0x2b2/0x380 [ 151.352520][ T6904] ? __pfx___alloc_skb+0x10/0x10 [ 151.352541][ T6904] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 151.352560][ T6904] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 151.352598][ T6904] netlink_alloc_large_skb+0x69/0x140 [ 151.352628][ T6904] netlink_sendmsg+0x698/0xdd0 [ 151.352659][ T6904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.352696][ T6904] ____sys_sendmsg+0xa98/0xc70 [ 151.352716][ T6904] ? copy_msghdr_from_user+0x10a/0x160 [ 151.352740][ T6904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.352771][ T6904] ___sys_sendmsg+0x134/0x1d0 [ 151.352797][ T6904] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.352819][ T6904] ? __lock_acquire+0x622/0x1c90 [ 151.352884][ T6904] __sys_sendmsg+0x16d/0x220 [ 151.352909][ T6904] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.352947][ T6904] do_syscall_64+0xcd/0xfa0 [ 151.352967][ T6904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.352986][ T6904] RIP: 0033:0x7fdf8458f6c9 [ 151.353002][ T6904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.353020][ T6904] RSP: 002b:00007fdf853f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.353036][ T6904] RAX: ffffffffffffffda RBX: 00007fdf847e6090 RCX: 00007fdf8458f6c9 [ 151.353048][ T6904] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000006 [ 151.353057][ T6904] RBP: 00007fdf853f7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.353067][ T6904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.353076][ T6904] R13: 00007fdf847e6128 R14: 00007fdf847e6090 R15: 00007ffe7aaae598 [ 151.353105][ T6904] [ 151.704058][ T6907] deleting an unspecified loop device is not supported. [ 151.806559][ T30] audit: type=1400 audit(1762653244.027:410): avc: denied { ioctl } for pid=6906 comm="syz.0.268" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 151.845766][ T6904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56319 sclass=netlink_tcpdiag_socket pid=6904 comm=syz.4.267 [ 151.868067][ T1054] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.354459][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.366010][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.377360][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.388630][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.397133][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.419544][ T30] audit: type=1400 audit(1762653244.737:411): avc: denied { mounton } for pid=6925 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 152.441104][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 152.541753][ T1054] bridge_slave_0: left allmulticast mode [ 152.594482][ T1054] bridge_slave_0: left promiscuous mode [ 152.606468][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.700454][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 152.864679][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.877329][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.887310][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.894063][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 152.906078][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.348843][ T9] usb 1-1: config 0 descriptor?? [ 153.786036][ T9] nzxt-smart2 0003:1E71:2009.0004: collection stack underflow [ 153.832306][ T9] nzxt-smart2 0003:1E71:2009.0004: item 0 4 0 12 parsing failed [ 153.838139][ T6942] netlink: zone id is out of range [ 153.846469][ T30] audit: type=1400 audit(1762653246.157:412): avc: denied { bind } for pid=6941 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.849650][ T9] nzxt-smart2 0003:1E71:2009.0004: probe with driver nzxt-smart2 failed with error -22 [ 153.875315][ T6942] netlink: zone id is out of range [ 153.875329][ T6942] netlink: zone id is out of range [ 153.875338][ T6942] netlink: zone id is out of range [ 153.875345][ T6942] netlink: zone id is out of range [ 153.875353][ T6942] netlink: zone id is out of range [ 153.931670][ T6942] netlink: zone id is out of range [ 153.936914][ T6942] netlink: zone id is out of range [ 153.951319][ T30] audit: type=1400 audit(1762653246.277:413): avc: denied { read } for pid=6941 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.970662][ T6942] netlink: zone id is out of range [ 153.992061][ T6942] netlink: zone id is out of range [ 154.045511][ T1213] usb 1-1: USB disconnect, device number 13 [ 154.134245][ T30] audit: type=1400 audit(1762653246.457:414): avc: denied { mount } for pid=6938 comm="syz.4.276" name="/" dev="configfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 154.160569][ T30] audit: type=1400 audit(1762653246.487:415): avc: denied { search } for pid=6938 comm="syz.4.276" name="/" dev="configfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.270618][ T1054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.282751][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.292906][ T1054] bond0 (unregistering): Released all slaves [ 154.365277][ T6925] lo speed is unknown, defaulting to 1000 [ 154.472182][ T5811] Bluetooth: hci4: command tx timeout [ 155.203563][ T6959] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 155.377409][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.282'. [ 155.425046][ T30] audit: type=1400 audit(1762653247.727:416): avc: denied { create } for pid=6954 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 155.853095][ T6973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6973 comm=syz.4.282 [ 155.924825][ T30] audit: type=1400 audit(1762653248.247:417): avc: denied { sys_admin } for pid=6954 comm="syz.0.280" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 156.098920][ T6959] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 156.550984][ T5811] Bluetooth: hci4: command tx timeout [ 157.695963][ T6925] chnl_net:caif_netlink_parms(): no params data found [ 157.960960][ T5819] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 158.023841][ T7003] loop2: detected capacity change from 0 to 7 [ 158.061280][ T7003] Dev loop2: unable to read RDB block 7 [ 158.071727][ T7003] loop2: AHDI p1 p2 p3 [ 158.094023][ T7003] loop2: partition table partially beyond EOD, truncated [ 158.115103][ T7003] loop2: p1 start 1601398130 is beyond EOD, truncated [ 158.131575][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 158.191038][ T7003] loop2: p2 start 1702059890 is beyond EOD, truncated [ 158.263260][ T5819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.273137][ T5819] usb 5-1: config 1 interface 0 has no altsetting 0 [ 158.283708][ T5819] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 158.300291][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.330820][ T1054] hsr_slave_0: left promiscuous mode [ 158.470017][ T5819] usb 5-1: Product: syz [ 158.475817][ T5819] usb 5-1: Manufacturer: syz [ 158.489446][ T1054] hsr_slave_1: left promiscuous mode [ 158.489579][ T5819] usb 5-1: SerialNumber: syz [ 158.545177][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.645330][ T5811] Bluetooth: hci4: command tx timeout [ 158.651091][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.702946][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.710795][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.724657][ T30] audit: type=1400 audit(1762653251.047:418): avc: denied { append } for pid=7012 comm="syz.3.290" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.791516][ T1054] veth1_macvtap: left promiscuous mode [ 158.798247][ T1054] veth0_macvtap: left promiscuous mode [ 158.804715][ T1054] veth1_vlan: left promiscuous mode [ 158.811841][ T1054] veth0_vlan: left promiscuous mode [ 158.850956][ T30] audit: type=1400 audit(1762653251.147:419): avc: denied { accept } for pid=7012 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.871360][ T30] audit: type=1400 audit(1762653251.177:420): avc: denied { bind } for pid=6992 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.941412][ T30] audit: type=1400 audit(1762653251.227:421): avc: denied { connect } for pid=6992 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.800781][ T1054] team0 (unregistering): Port device team_slave_1 removed [ 159.850394][ T1054] team0 (unregistering): Port device team_slave_0 removed [ 159.942060][ T5887] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 160.104096][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 160.116352][ T5887] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 160.125890][ T5887] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.136398][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.146638][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.157100][ T5887] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.173831][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.185061][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.359676][ T6993] wireguard0: entered promiscuous mode [ 160.367332][ T6993] wireguard0: entered allmulticast mode [ 160.374087][ T9] lo speed is unknown, defaulting to 1000 [ 160.380704][ T9] infiniband syz0: ib_query_port failed (-19) [ 160.431281][ T5819] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 160.456825][ T5819] usb 5-1: USB disconnect, device number 15 [ 160.501319][ T5819] usblp0: removed [ 160.545970][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.556175][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.578366][ T6925] bridge_slave_0: entered allmulticast mode [ 160.606379][ T6925] bridge_slave_0: entered promiscuous mode [ 160.650165][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.671126][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.678441][ T6925] bridge_slave_1: entered allmulticast mode [ 160.709473][ T6925] bridge_slave_1: entered promiscuous mode [ 160.715978][ T5811] Bluetooth: hci4: command tx timeout [ 160.780265][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.844578][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.933592][ T6925] team0: Port device team_slave_0 added [ 160.961632][ T6925] team0: Port device team_slave_1 added [ 161.043288][ T7059] netlink: 'syz.4.296': attribute type 5 has an invalid length. [ 161.058957][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.077053][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.139716][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.162665][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.297'. [ 161.183892][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.191176][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.220367][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.297'. [ 161.241874][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.438081][ T6925] hsr_slave_0: entered promiscuous mode [ 161.445434][ T6925] hsr_slave_1: entered promiscuous mode [ 161.459639][ T6925] debugfs: 'hsr0' already exists in 'hsr' [ 161.465903][ T6925] Cannot create hsr debugfs directory [ 162.205523][ T1213] usb 1-1: USB disconnect, device number 14 [ 163.483510][ T5896] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 163.645523][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.657209][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.667316][ T5896] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.687838][ T5896] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.710439][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.719131][ T5896] usb 3-1: SerialNumber: syz [ 163.735033][ T5896] cdc_acm 3-1:1.0: skipping garbage [ 163.743617][ T7088] ip6gre1: entered allmulticast mode [ 163.790358][ T7094] netlink: 136 bytes leftover after parsing attributes in process `syz.3.303'. [ 163.826453][ T7094] net_ratelimit: 1 callbacks suppressed [ 163.826469][ T7094] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 163.924733][ T6925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.964656][ T6925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.977292][ T6925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.989208][ T6925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.020365][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.307'. [ 164.105831][ T1213] usb 3-1: USB disconnect, device number 4 [ 164.205265][ T5896] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 164.664749][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.708749][ T6925] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.726258][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.733433][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.741012][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 164.748769][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.760972][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.893026][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.900170][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.972911][ T5896] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 164.983421][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.992882][ T5896] usb 5-1: Product: syz [ 164.997067][ T5896] usb 5-1: Manufacturer: syz [ 165.012579][ T5896] usb 5-1: SerialNumber: syz [ 165.022313][ T5896] usb 5-1: config 0 descriptor?? [ 166.371588][ T30] audit: type=1326 audit(1762653258.697:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 166.525060][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 166.532825][ T5896] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 166.539854][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.559509][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 166.751079][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 166.756093][ T30] audit: type=1326 audit(1762653258.697:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 166.758129][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.196798][ T30] audit: type=1326 audit(1762653258.697:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 167.296450][ T5896] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 167.305279][ T30] audit: type=1326 audit(1762653258.697:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 167.332003][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.380239][ T5896] usb 1-1: config 0 descriptor?? [ 167.386550][ T30] audit: type=1326 audit(1762653258.697:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 167.480071][ T30] audit: type=1326 audit(1762653258.697:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 167.503319][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.559118][ T30] audit: type=1326 audit(1762653258.697:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 167.603584][ T30] audit: type=1326 audit(1762653258.697:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 167.652325][ T30] audit: type=1326 audit(1762653258.697:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 167.696027][ T30] audit: type=1326 audit(1762653258.697:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ed38f6c9 code=0x7ffc0000 [ 167.855602][ T5896] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 167.906093][ T6925] veth0_vlan: entered promiscuous mode [ 167.937057][ T6925] veth1_vlan: entered promiscuous mode [ 168.008006][ T7104] delete_channel: no stack [ 168.023854][ T5819] usb 5-1: USB disconnect, device number 16 [ 168.047992][ T7149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7149 comm=syz.0.310 [ 168.071223][ T7144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7144 comm=syz.0.310 [ 168.156576][ T6925] veth0_macvtap: entered promiscuous mode [ 168.174503][ T6925] veth1_macvtap: entered promiscuous mode [ 168.514310][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.528135][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.551542][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.633973][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.083353][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.092334][ T5896] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.111011][ T5819] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 169.131542][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.326397][ T5819] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 169.348764][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.487852][ T5819] usb 5-1: Product: syz [ 169.493201][ T5819] usb 5-1: Manufacturer: syz [ 169.497873][ T5819] usb 5-1: SerialNumber: syz [ 169.511105][ T5819] usb 5-1: config 0 descriptor?? [ 169.527207][ T5819] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 170.157557][ T5887] usb 1-1: USB disconnect, device number 15 [ 170.206146][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.270647][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.284673][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.301784][ T5819] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 170.337566][ T5819] usb 5-1: media controller created [ 170.423754][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.449775][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.458503][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.196029][ T5819] DVB: Unable to find symbol mt352_attach() [ 171.477959][ T5819] DVB: Unable to find symbol nxt6000_attach() [ 171.523582][ T5819] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 171.591551][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 171.626099][ T5819] dvb-usb: schedule remote query interval to 1000 msecs. [ 171.660935][ T5819] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 171.677215][ T5819] dvb-usb: bulk message failed: -22 (7/0) [ 171.690991][ T5819] dvb-usb: bulk message failed: -22 (7/0) [ 171.731093][ T5887] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.869498][ T5819] usb 5-1: USB disconnect, device number 17 [ 171.881357][ T5887] usb 6-1: device descriptor read/64, error -71 [ 172.462179][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.469821][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.481047][ T5887] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 172.490775][ T5819] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 172.650992][ T5887] usb 6-1: device descriptor read/64, error -71 [ 172.801122][ T5887] usb usb6-port1: attempt power cycle [ 173.122688][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.239421][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.300972][ T5887] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 173.331666][ T5887] usb 6-1: device descriptor read/8, error -71 [ 173.811147][ T5887] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 173.931716][ T5887] usb 6-1: device descriptor read/8, error -71 [ 174.069366][ T5887] usb usb6-port1: unable to enumerate USB device [ 174.133484][ T7218] veth1_vlan: left allmulticast mode [ 174.583058][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 174.583073][ T30] audit: type=1400 audit(1762653266.907:464): avc: denied { shutdown } for pid=7249 comm="syz.5.327" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.617805][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.640980][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.672455][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.707198][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.056628][ T1213] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.304948][ T30] audit: type=1400 audit(1762653267.627:465): avc: denied { map } for pid=7266 comm="syz.0.332" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 175.740403][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.821645][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 175.924333][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 175.933577][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.950959][ T9] usb 3-1: Product: syz [ 175.961256][ T9] usb 3-1: Manufacturer: syz [ 175.976053][ T9] usb 3-1: SerialNumber: syz [ 176.553805][ T7287] netlink: 52 bytes leftover after parsing attributes in process `syz.0.335'. [ 176.585839][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 176.597958][ T7287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.893959][ T30] audit: type=1400 audit(1762653268.957:466): avc: denied { setopt } for pid=7286 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 177.924927][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 179.043067][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 179.104129][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 179.193608][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 179.552846][ T7311] netlink: 'syz.2.344': attribute type 1 has an invalid length. [ 179.580947][ T1213] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 179.873101][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 179.982344][ T9] usb 3-1: USB disconnect, device number 6 [ 180.003375][ T1213] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 180.027994][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.143640][ T7317] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 180.163702][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.192481][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.205189][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.218514][ T1213] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.227992][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.301774][ T1213] usb 1-1: config 0 descriptor?? [ 180.326308][ T7309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.095523][ T1213] usbhid 1-1:0.0: can't add hid device: -71 [ 181.102338][ T1213] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 181.137442][ T1213] usb 1-1: USB disconnect, device number 16 [ 182.056100][ T7359] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.352'. [ 182.067320][ T7359] tmpfs: Bad value for 'mpol' [ 182.167181][ T7359] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.352'. [ 182.212493][ T7360] tmpfs: Bad value for 'mpol' [ 182.904836][ T30] audit: type=1400 audit(1762653275.227:467): avc: denied { listen } for pid=7382 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 183.545101][ T30] audit: type=1400 audit(1762653275.867:468): avc: denied { write } for pid=7395 comm="syz.5.360" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 183.710905][ T30] audit: type=1400 audit(1762653276.027:469): avc: denied { mount } for pid=7407 comm="syz.3.364" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 183.834747][ T30] audit: type=1400 audit(1762653276.117:470): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 185.304043][ T7435] FAULT_INJECTION: forcing a failure. [ 185.304043][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 185.317094][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.3.370 Not tainted syzkaller #0 PREEMPT(full) [ 185.317121][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.317133][ T7435] Call Trace: [ 185.317139][ T7435] [ 185.317147][ T7435] dump_stack_lvl+0x16c/0x1f0 [ 185.317181][ T7435] should_fail_ex+0x512/0x640 [ 185.317204][ T7435] ? __kmalloc_noprof+0xca/0x880 [ 185.317234][ T7435] should_failslab+0xc2/0x120 [ 185.317257][ T7435] __kmalloc_noprof+0xdd/0x880 [ 185.317283][ T7435] ? io_cache_alloc_new+0x45/0xf0 [ 185.317311][ T7435] ? io_cache_alloc_new+0x45/0xf0 [ 185.317330][ T7435] io_cache_alloc_new+0x45/0xf0 [ 185.317352][ T7435] io_msg_alloc_async+0x1c3/0x3a0 [ 185.317372][ T7435] io_sendmsg_prep+0x352/0x520 [ 185.317393][ T7435] io_submit_sqes+0x855/0x2710 [ 185.317440][ T7435] __do_sys_io_uring_enter+0xd69/0x1630 [ 185.317472][ T7435] ? __fget_files+0x20e/0x3c0 [ 185.317492][ T7435] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 185.317524][ T7435] ? fput+0x9b/0xd0 [ 185.317548][ T7435] ? ksys_write+0x1ac/0x250 [ 185.317566][ T7435] ? __pfx_ksys_write+0x10/0x10 [ 185.317594][ T7435] do_syscall_64+0xcd/0xfa0 [ 185.317615][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.317635][ T7435] RIP: 0033:0x7f67ed38f6c9 [ 185.317652][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.317670][ T7435] RSP: 002b:00007f67ee1f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 185.317689][ T7435] RAX: ffffffffffffffda RBX: 00007f67ed5e6090 RCX: 00007f67ed38f6c9 [ 185.317703][ T7435] RDX: 0000000000000969 RSI: 0000000000003498 RDI: 0000000000000007 [ 185.317715][ T7435] RBP: 00007f67ee1f1090 R08: 0000000000000000 R09: 0000000000000000 [ 185.317733][ T7435] R10: ffff000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.317745][ T7435] R13: 00007f67ed5e6128 R14: 00007f67ed5e6090 R15: 00007ffc051af7c8 [ 185.317775][ T7435] [ 185.513714][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.927582][ T30] audit: type=1326 audit(1762653278.247:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8458f6c9 code=0x7ffc0000 [ 186.286877][ T30] audit: type=1326 audit(1762653278.247:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8458f6c9 code=0x7ffc0000 [ 186.552789][ T5887] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 186.564069][ T30] audit: type=1326 audit(1762653278.277:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8458f6c9 code=0x7ffc0000 [ 186.593692][ T30] audit: type=1326 audit(1762653278.277:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8458f6c9 code=0x7ffc0000 [ 186.765858][ T5887] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 186.810827][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.974982][ T30] audit: type=1326 audit(1762653278.397:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8458f6c9 code=0x7ffc0000 [ 187.000518][ T5887] usb 5-1: config 0 descriptor?? [ 187.155056][ T7457] audit: audit_backlog=65 > audit_backlog_limit=64 [ 187.807933][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 187.818538][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.828200][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 187.857013][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 187.865135][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.880976][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 187.911686][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 187.911702][ T30] audit: type=1326 audit(1762653280.237:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8458f6c9 code=0x7ffc0000 [ 187.957298][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 187.978468][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 187.997920][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 188.005777][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 188.079176][ T30] audit: type=1326 audit(1762653280.237:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8458f6c9 code=0x7ffc0000 [ 188.105362][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 188.128523][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 188.145538][ T1213] hid-generic 00A0:0006:0081.0006: unknown main item tag 0x0 [ 188.222309][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 188.527692][ T7472] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.538810][ T30] audit: type=1326 audit(1762653280.267:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8458f6c9 code=0x7ffc0000 [ 188.539995][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.562054][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.588914][ T1213] hid-generic 00A0:0006:0081.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 188.613607][ T7471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.651946][ T7476] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.658799][ T30] audit: type=1326 audit(1762653280.267:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdf8458f6c9 code=0x7ffc0000 [ 188.665930][ T9] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 188.682075][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.698244][ T7471] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 188.711630][ T7476] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 188.731542][ T7471] audit: backlog limit exceeded [ 188.771201][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 188.796733][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 188.805924][ T9] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 188.826096][ T9] usb 6-1: Product: syz [ 188.845076][ T9] usb 6-1: Manufacturer: syz [ 188.872197][ T9] usb 6-1: SerialNumber: syz [ 188.902542][ T9] usb 6-1: config 0 descriptor?? [ 189.436875][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 189.446507][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 189.456573][ T9] gs_usb 6-1:0.0: Configuring for 249 interfaces [ 189.633569][ T5887] usb 5-1: USB disconnect, device number 18 [ 189.865507][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 190.106338][ T9] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 190.167181][ T9] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 190.234021][ T9] usb 6-1: USB disconnect, device number 7 [ 191.550948][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 191.880932][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 192.249947][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.260967][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.270002][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.438525][ T9] usb 5-1: config 0 descriptor?? [ 192.934606][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 192.934622][ T30] audit: type=1400 audit(1762653285.257:734): avc: denied { read write } for pid=7519 comm="syz.4.387" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.999178][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 193.012433][ T30] audit: type=1400 audit(1762653285.267:735): avc: denied { open } for pid=7519 comm="syz.4.387" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.052606][ T30] audit: type=1400 audit(1762653285.377:736): avc: denied { map_create } for pid=7524 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.076463][ T30] audit: type=1400 audit(1762653285.397:737): avc: denied { map_read map_write } for pid=7524 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.557565][ T30] audit: type=1400 audit(1762653292.864:738): avc: denied { ioctl } for pid=7537 comm="syz.0.391" path="socket:[15183]" dev="sockfs" ino=15183 ioctlcmd=0x8b18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.880118][ T30] audit: type=1400 audit(1762653293.194:739): avc: denied { write } for pid=7519 comm="syz.4.387" name="iowarrior0" dev="devtmpfs" ino=2972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 194.001220][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.007670][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.837794][ T7555] fuse: Unknown parameter 'user_i00000000000000000000' [ 194.871669][ T30] audit: type=1400 audit(1762653294.204:740): avc: denied { create } for pid=7554 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.980620][ T30] audit: type=1400 audit(1762653294.264:741): avc: denied { read } for pid=7552 comm="syz.0.395" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 195.011214][ T30] audit: type=1400 audit(1762653294.264:742): avc: denied { open } for pid=7552 comm="syz.0.395" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 195.071483][ T30] audit: type=1400 audit(1762653294.264:743): avc: denied { ioctl } for pid=7552 comm="syz.0.395" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 195.097233][ T1213] usb 5-1: USB disconnect, device number 19 [ 196.071117][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 196.077208][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 196.083500][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 196.089506][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 198.097791][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 198.097808][ T30] audit: type=1400 audit(1762653297.424:761): avc: denied { create } for pid=7598 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.123228][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.288064][ T30] audit: type=1400 audit(1762653297.474:762): avc: denied { setopt } for pid=7598 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.333940][ T30] audit: type=1326 audit(1762653297.514:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd21d8f6c9 code=0x7ffc0000 [ 198.377537][ T7608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.391406][ T7608] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 198.399271][ T7608] audit: backlog limit exceeded [ 198.410984][ T30] audit: type=1326 audit(1762653297.514:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd21d8f6c9 code=0x7ffc0000 [ 198.436377][ T7607] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 198.623362][ T30] audit: type=1326 audit(1762653297.514:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7efd21d8f6c9 code=0x7ffc0000 [ 198.647012][ T30] audit: type=1326 audit(1762653297.514:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd21d8f6c9 code=0x7ffc0000 [ 198.671753][ T7607] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 198.697229][ T30] audit: type=1326 audit(1762653297.514:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd21d8f6c9 code=0x7ffc0000 [ 199.330969][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 199.643216][ T7636] delete_channel: no stack [ 200.524027][ T7640] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 201.491078][ T9] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 201.524003][ T5876] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 201.536536][ T7656] xt_cgroup: invalid path, errno=-2 [ 201.750995][ T5876] usb 4-1: device descriptor read/64, error -71 [ 201.827451][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.870556][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 201.936523][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 202.003648][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.038895][ T9] usb 5-1: config 0 descriptor?? [ 202.077889][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 202.105152][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 202.127792][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 202.150962][ T5876] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 202.171705][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 202.189934][ T9] usb 5-1: media controller created [ 202.198282][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.243572][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 202.259250][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 202.278303][ T7640] dibusb: i2c wr: len=61 is too big! [ 202.278303][ T7640] [ 202.290257][ T7640] netlink: 'syz.4.414': attribute type 6 has an invalid length. [ 202.298507][ T7640] netlink: 'syz.4.414': attribute type 7 has an invalid length. [ 202.333370][ T7632] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.522505][ T7632] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 202.696570][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 202.726405][ T7640] netlink: 'syz.4.414': attribute type 8 has an invalid length. [ 202.776908][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 202.789608][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 202.872974][ T7632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.911378][ T7632] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 202.943112][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 202.966998][ T9] dvb-usb: error while querying for an remote control event. [ 203.096089][ T7675] input: syz1 as /devices/virtual/input/input12 [ 203.301308][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 203.321698][ T9] dvb-usb: error while querying for an remote control event. [ 203.566384][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 203.566416][ T30] audit: type=1400 audit(1762653302.884:851): avc: denied { shutdown } for pid=7674 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.791781][ T30] audit: type=1400 audit(1762653302.894:852): avc: denied { setopt } for pid=7674 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.919052][ T7632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.950952][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 203.960968][ T7632] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 203.966904][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'. [ 203.978909][ T9] dvb-usb: error while querying for an remote control event. [ 203.981171][ T30] audit: type=1400 audit(1762653303.264:853): avc: denied { create } for pid=7681 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.027635][ T30] audit: type=1400 audit(1762653303.354:854): avc: denied { mount } for pid=7681 comm="syz.0.423" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 204.056128][ T30] audit: type=1400 audit(1762653303.384:855): avc: denied { setopt } for pid=7681 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.108293][ T30] audit: type=1400 audit(1762653303.434:856): avc: denied { read write } for pid=7684 comm="syz.5.422" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.139285][ T30] audit: type=1400 audit(1762653303.464:857): avc: denied { open } for pid=7684 comm="syz.5.422" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.139424][ T7632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.175987][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 204.239778][ T9] dvb-usb: error while querying for an remote control event. [ 204.239855][ T7632] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 204.290131][ T30] audit: type=1400 audit(1762653303.594:858): avc: denied { mount } for pid=7686 comm="syz.0.424" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 204.346382][ T5876] usb 5-1: USB disconnect, device number 21 [ 204.388051][ T30] audit: type=1400 audit(1762653303.594:859): avc: denied { mounton } for pid=7686 comm="syz.0.424" path="/102/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 204.401907][ T5876] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 204.460967][ T7697] netlink: 64 bytes leftover after parsing attributes in process `syz.0.425'. [ 204.483731][ T30] audit: type=1400 audit(1762653303.654:860): avc: denied { setopt } for pid=7684 comm="syz.5.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.772219][ T7632] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.785510][ T7632] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 207.167389][ T7752] sg_write: data in/out 768/168 bytes for SCSI command 0x96-- guessing data in; [ 207.167389][ T7752] program syz.5.431 not setting count and/or reply_len properly [ 211.366058][ T9] libceph: connect (1)[c::]:6789 error -101 [ 211.491288][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 211.723398][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 211.723483][ T30] audit: type=1400 audit(1762653311.054:876): avc: denied { read write } for pid=7821 comm="syz.4.441" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 211.808646][ T7816] ceph: No mds server is up or the cluster is laggy [ 211.837649][ T30] audit: type=1400 audit(1762653311.054:877): avc: denied { open } for pid=7821 comm="syz.4.441" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 212.498024][ T7829] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 212.514498][ T30] audit: type=1400 audit(1762653311.844:878): avc: denied { write } for pid=7824 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.571157][ T5896] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 212.796395][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.796817][ T7834] syzkaller1: entered promiscuous mode [ 212.804969][ T5896] usb 1-1: not running at top speed; connect to a high speed hub [ 212.829036][ T5896] usb 1-1: config 121 has an invalid interface number: 143 but max is 0 [ 212.839754][ T7834] syzkaller1: entered allmulticast mode [ 212.847789][ T5896] usb 1-1: config 121 has no interface number 0 [ 212.856398][ T5896] usb 1-1: config 121 interface 143 has no altsetting 0 [ 212.878289][ T5896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=11.86 [ 212.895581][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.914074][ T5896] usb 1-1: Product: syz [ 212.924483][ T5896] usb 1-1: Manufacturer: syz [ 212.935764][ T5896] usb 1-1: SerialNumber: syz [ 213.241257][ T5896] usb 1-1: USB disconnect, device number 17 [ 213.290255][ T30] audit: type=1400 audit(1762653312.614:879): avc: denied { ioctl } for pid=7835 comm="syz.5.445" path="socket:[17639]" dev="sockfs" ino=17639 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 213.321856][ T30] audit: type=1400 audit(1762653312.614:880): avc: denied { write } for pid=7835 comm="syz.5.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 213.520946][ T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 213.683588][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 213.694197][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 213.708765][ T10] usb 6-1: string descriptor 0 read error: -22 [ 213.715607][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.726056][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.803686][ T30] audit: type=1400 audit(1762653313.134:881): avc: denied { create } for pid=7841 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 213.943229][ T7846] sp0: Synchronizing with TNC [ 213.977431][ T30] audit: type=1400 audit(1762653313.294:882): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 214.030419][ T7846] sp0: Found TNC [ 214.105761][ T7845] mmap: syz.0.448 (7845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.206890][ T30] audit: type=1400 audit(1762653313.534:883): avc: denied { ioctl } for pid=7835 comm="syz.5.445" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17140 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.235798][ T10] cdc_ncm 6-1:1.0: bind() failure [ 214.251705][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 214.258543][ T10] cdc_ncm 6-1:1.1: bind() failure [ 214.272177][ T10] usb 6-1: USB disconnect, device number 8 [ 215.041168][ T30] audit: type=1400 audit(1762653314.364:884): avc: denied { connect } for pid=7852 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.215762][ T30] audit: type=1400 audit(1762653314.444:885): avc: denied { setopt } for pid=7852 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.740328][ T30] audit: type=1400 audit(1762653316.044:886): avc: denied { create } for pid=7867 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.017631][ T30] audit: type=1400 audit(1762653316.054:887): avc: denied { write } for pid=7867 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.310959][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 217.444059][ T7885] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 217.460056][ T30] audit: type=1400 audit(1762653316.784:888): avc: denied { write } for pid=7881 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.470922][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 217.498416][ T30] audit: type=1400 audit(1762653316.824:889): avc: denied { read } for pid=7881 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.505921][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 217.527411][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.535769][ T24] usb 5-1: Product: syz [ 217.539936][ T24] usb 5-1: Manufacturer: syz [ 217.561423][ T24] usb 5-1: SerialNumber: syz [ 217.583326][ T24] usb 5-1: config 0 descriptor?? [ 217.594627][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 218.281849][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.456'. [ 218.548059][ T30] audit: type=1400 audit(1762653317.874:890): avc: denied { append } for pid=7896 comm="syz.0.462" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.575111][ T7898] loop6: detected capacity change from 0 to 524288000 [ 218.669072][ T30] audit: type=1400 audit(1762653317.994:891): avc: denied { sys_module } for pid=7896 comm="syz.0.462" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 218.872711][ T24] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 218.880368][ T24] se401 5-1:0.0: probe with driver se401 failed with error -110 [ 218.947269][ T30] audit: type=1400 audit(1762653318.274:892): avc: denied { mounton } for pid=7902 comm="syz.5.463" path="/33/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.701308][ T30] audit: type=1400 audit(1762653318.974:893): avc: denied { accept } for pid=7909 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.757307][ T30] audit: type=1400 audit(1762653318.994:894): avc: denied { write } for pid=7909 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.900024][ T30] audit: type=1400 audit(1762653319.054:895): avc: denied { read } for pid=7909 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 220.233179][ T7917] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 220.786523][ T9] usb 5-1: USB disconnect, device number 22 [ 220.798457][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 220.945352][ T7919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.069226][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 221.112523][ T7922] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 221.310271][ T7927] bridge_slave_0: left allmulticast mode [ 221.316259][ T7927] bridge_slave_0: left promiscuous mode [ 221.354154][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.502731][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.543366][ T7927] bond0: (slave bond_slave_0): Releasing backup interface [ 221.572651][ T7927] bond0: (slave bond_slave_1): Releasing backup interface [ 221.662052][ T7927] team0: Port device team_slave_0 removed [ 221.707663][ T7927] team0: Port device team_slave_1 removed [ 221.719176][ T7927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.727488][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.755055][ T7927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.763211][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.813112][ T7927] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.190640][ T7919] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 222.209449][ T7919] bond1 (unregistering): Released all slaves [ 222.385509][ T7925] netlink: 'syz.4.468': attribute type 2 has an invalid length. [ 222.393321][ T7925] netlink: 160 bytes leftover after parsing attributes in process `syz.4.468'. [ 223.966961][ T30] audit: type=1400 audit(1762653323.254:896): avc: denied { create } for pid=7939 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 224.000698][ T30] audit: type=1400 audit(1762653323.254:897): avc: denied { write } for pid=7939 comm="syz.0.472" path="socket:[18616]" dev="sockfs" ino=18616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 224.034958][ T30] audit: type=1400 audit(1762653323.264:898): avc: denied { read } for pid=7939 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 224.060030][ T7948] syz.0.472 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 224.432530][ T30] audit: type=1400 audit(1762653323.364:899): avc: denied { ioctl } for pid=7946 comm="syz.5.474" path="socket:[17881]" dev="sockfs" ino=17881 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 225.735661][ T30] audit: type=1400 audit(1762653325.064:900): avc: denied { write } for pid=7966 comm="syz.4.477" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 225.794257][ T7969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.850120][ T30] audit: type=1400 audit(1762653325.174:901): avc: denied { read write } for pid=7970 comm="syz.4.479" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 225.873203][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.879939][ T30] audit: type=1400 audit(1762653325.174:902): avc: denied { open } for pid=7970 comm="syz.4.479" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 225.902973][ T30] audit: type=1400 audit(1762653325.184:903): avc: denied { ioctl } for pid=7970 comm="syz.4.479" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 225.927360][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.432928][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.439212][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.875492][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.881837][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.991242][ T31] INFO: task kworker/0:3:1213 blocked for more than 143 seconds. [ 353.998994][ T31] Not tainted syzkaller #0 [ 354.004014][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.012730][ T31] task:kworker/0:3 state:D stack:23000 pid:1213 tgid:1213 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 354.024803][ T31] Workqueue: events rfkill_sync_work [ 354.030110][ T31] Call Trace: [ 354.033540][ T31] [ 354.036473][ T31] __schedule+0x1190/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 354.041005][ T31] ? find_held_lock+0x2b/0x80 [ 354.049134][ T30] audit: type=1400 audit(1762653453.374:904): avc: denied { write } for pid=5797 comm="syz-executor" path="pipe:[4866]" dev="pipefs" ino=4866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 354.050916][ T31] ? __lock_acquire+0xae1/0x1c90 [ 354.088060][ T31] ? __pfx___schedule+0x10/0x10 [ 354.109139][ T31] ? find_held_lock+0x2b/0x80 [ 354.114896][ T31] ? schedule+0x2d7/0x3a0 [ 354.119256][ T31] schedule+0xe7/0x3a0 [ 354.123653][ T31] schedule_preempt_disabled+0x13/0x30 [ 354.129119][ T31] __mutex_lock+0x818/0x1060 [ 354.134822][ T31] ? rfkill_sync_work+0x1b/0x40 [ 354.139686][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 354.145288][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 354.151585][ T31] ? rfkill_sync_work+0x1b/0x40 [ 354.156447][ T31] ? rcu_is_watching+0x12/0xc0 [ 354.162887][ T31] rfkill_sync_work+0x1b/0x40 [ 354.167590][ T31] process_one_work+0x9cf/0x1b70 [ 354.176259][ T31] ? __pfx_process_one_work+0x10/0x10 [ 354.185045][ T31] ? assign_work+0x1a0/0x250 [ 354.189649][ T31] worker_thread+0x6c8/0xf10 [ 354.194488][ T31] ? __kthread_parkme+0x19e/0x250 [ 354.199524][ T31] ? __pfx_worker_thread+0x10/0x10 [ 354.204648][ T31] kthread+0x3c5/0x780 [ 354.208711][ T31] ? __pfx_kthread+0x10/0x10 [ 354.213368][ T31] ? rcu_is_watching+0x12/0xc0 [ 354.218132][ T31] ? __pfx_kthread+0x10/0x10 [ 354.222786][ T31] ret_from_fork+0x675/0x7d0 [ 354.227368][ T31] ? __pfx_kthread+0x10/0x10 [ 354.232013][ T31] ret_from_fork_asm+0x1a/0x30 [ 354.236786][ T31] [ 354.239886][ T31] INFO: task kworker/0:4:5887 blocked for more than 143 seconds. [ 354.247643][ T31] Not tainted syzkaller #0 [ 354.257451][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.266134][ T31] task:kworker/0:4 state:D stack:23400 pid:5887 tgid:5887 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 354.278218][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 354.284939][ T31] Call Trace: [ 354.288215][ T31] [ 354.291184][ T31] __schedule+0x1190/0x5de0 [ 354.295701][ T31] ? __lock_acquire+0xae1/0x1c90 [ 354.300638][ T31] ? __pfx___schedule+0x10/0x10 [ 354.305531][ T31] ? find_held_lock+0x2b/0x80 [ 354.310212][ T31] ? schedule+0x2d7/0x3a0 [ 354.314579][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 354.320923][ T31] schedule+0xe7/0x3a0 [ 354.324981][ T31] schedule_preempt_disabled+0x13/0x30 [ 354.330413][ T31] __mutex_lock+0x818/0x1060 [ 354.335020][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 354.341389][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 354.346407][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 354.352249][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 354.358577][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 354.364771][ T31] process_one_work+0x9cf/0x1b70 [ 354.369724][ T31] ? __pfx_process_one_work+0x10/0x10 [ 354.375144][ T31] ? assign_work+0x1a0/0x250 [ 354.379726][ T31] worker_thread+0x6c8/0xf10 [ 354.384375][ T31] ? __kthread_parkme+0x19e/0x250 [ 354.389405][ T31] ? __pfx_worker_thread+0x10/0x10 [ 354.394554][ T31] kthread+0x3c5/0x780 [ 354.398620][ T31] ? __pfx_kthread+0x10/0x10 [ 354.403280][ T31] ? rcu_is_watching+0x12/0xc0 [ 354.408044][ T31] ? __pfx_kthread+0x10/0x10 [ 354.412669][ T31] ret_from_fork+0x675/0x7d0 [ 354.417259][ T31] ? __pfx_kthread+0x10/0x10 [ 354.421922][ T31] ret_from_fork_asm+0x1a/0x30 [ 354.426721][ T31] [ 354.429757][ T31] INFO: task syz.2.413:7621 blocked for more than 143 seconds. [ 354.437338][ T31] Not tainted syzkaller #0 [ 354.442286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.450975][ T31] task:syz.2.413 state:D stack:25240 pid:7621 tgid:7621 ppid:5807 task_flags:0x400040 flags:0x00080002 [ 354.462914][ T31] Call Trace: [ 354.466174][ T31] [ 354.469080][ T31] __schedule+0x1190/0x5de0 [ 354.473700][ T31] ? rcu_is_watching+0x12/0xc0 [ 354.478463][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 354.484294][ T31] ? __lock_acquire+0x622/0x1c90 [ 354.489238][ T31] ? __pfx___schedule+0x10/0x10 [ 354.494113][ T31] ? find_held_lock+0x2b/0x80 [ 354.498784][ T31] ? schedule+0x2d7/0x3a0 [ 354.503126][ T31] schedule+0xe7/0x3a0 [ 354.507195][ T31] schedule_timeout+0x257/0x290 [ 354.512083][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 354.517457][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.522676][ T31] __wait_for_common+0x2fc/0x4e0 [ 354.527602][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 354.533019][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 354.538466][ T31] ? find_held_lock+0x2b/0x80 [ 354.543195][ T31] ? __flush_work+0x938/0xcc0 [ 354.547876][ T31] ? __flush_work+0x4d0/0xcc0 [ 354.552726][ T31] __flush_work+0x7d7/0xcc0 [ 354.557237][ T31] ? __pfx___might_resched+0x10/0x10 [ 354.562557][ T31] ? __pfx___flush_work+0x10/0x10 [ 354.567577][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 354.572897][ T31] ? __pfx___might_resched+0x10/0x10 [ 354.578187][ T31] __cancel_work_sync+0x10c/0x130 [ 354.583287][ T31] rfkill_unregister+0x95/0x2c0 [ 354.588138][ T31] nfc_unregister_device+0x94/0x330 [ 354.593354][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 354.599070][ T31] virtual_ncidev_close+0x4b/0xa0 [ 354.604106][ T31] __fput+0x402/0xb70 [ 354.608089][ T31] task_work_run+0x150/0x240 [ 354.612703][ T31] ? __pfx_task_work_run+0x10/0x10 [ 354.617804][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 354.623547][ T31] exit_to_user_mode_loop+0xec/0x130 [ 354.628826][ T31] do_syscall_64+0x426/0xfa0 [ 354.633553][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.639443][ T31] RIP: 0033:0x7fd4a0f8f6c9 [ 354.643882][ T31] RSP: 002b:00007fff033d5898 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 354.652311][ T31] RAX: 0000000000000000 RBX: 00007fd4a11e7da0 RCX: 00007fd4a0f8f6c9 [ 354.660259][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 354.668283][ T31] RBP: 00007fd4a11e7da0 R08: 000000000000021c R09: 0000001e033d5b8f [ 354.676303][ T31] R10: 00007fd4a11e7cb0 R11: 0000000000000246 R12: 0000000000030db5 [ 354.684328][ T31] R13: 00007fff033d5990 R14: ffffffffffffffff R15: 00007fff033d59b0 [ 354.692340][ T31] [ 354.695374][ T31] INFO: task syz.2.413:7632 blocked for more than 144 seconds. [ 354.703033][ T31] Not tainted syzkaller #0 [ 354.707958][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.716627][ T31] task:syz.2.413 state:D stack:25816 pid:7632 tgid:7621 ppid:5807 task_flags:0x400140 flags:0x00080003 [ 354.728578][ T31] Call Trace: [ 354.731879][ T31] [ 354.734804][ T31] __schedule+0x1190/0x5de0 [ 354.739293][ T31] ? check_path.constprop.0+0x24/0x50 [ 354.744722][ T31] ? __pfx___schedule+0x10/0x10 [ 354.749586][ T31] ? find_held_lock+0x2b/0x80 [ 354.754297][ T31] ? schedule+0x2d7/0x3a0 [ 354.758635][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 354.763255][ T31] schedule+0xe7/0x3a0 [ 354.767324][ T31] schedule_preempt_disabled+0x13/0x30 [ 354.772810][ T31] __mutex_lock+0x818/0x1060 [ 354.777396][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 354.782018][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 354.787039][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 354.792201][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 354.796793][ T31] ? mark_held_locks+0x49/0x80 [ 354.801577][ T31] nfc_dev_down+0x2d/0x2e0 [ 354.806008][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 354.811256][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 354.816972][ T31] rfkill_set_block+0x1fe/0x550 [ 354.822039][ T31] rfkill_fop_write+0x2c0/0x580 [ 354.826883][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 354.832265][ T31] ? __pfx_bpf_lsm_file_permission+0x10/0x10 [ 354.838237][ T31] ? security_file_permission+0x71/0x210 [ 354.843900][ T31] ? rw_verify_area+0xcf/0x6c0 [ 354.848662][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 354.854051][ T31] vfs_write+0x2a0/0x11d0 [ 354.858377][ T31] ? __pfx_vfs_write+0x10/0x10 [ 354.863180][ T31] ? find_held_lock+0x2b/0x80 [ 354.867858][ T31] ? __fget_files+0x204/0x3c0 [ 354.872813][ T31] ? __fget_files+0x20e/0x3c0 [ 354.877497][ T31] ksys_write+0x1f8/0x250 [ 354.881845][ T31] ? __pfx_ksys_write+0x10/0x10 [ 354.886691][ T31] do_syscall_64+0xcd/0xfa0 [ 354.891213][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.897112][ T31] RIP: 0033:0x7fd4a0f8f6c9 [ 354.901581][ T31] RSP: 002b:00007fd4a1daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.909990][ T31] RAX: ffffffffffffffda RBX: 00007fd4a11e6180 RCX: 00007fd4a0f8f6c9 [ 354.917991][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 354.925999][ T31] RBP: 00007fd4a1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.933984][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.942085][ T31] R13: 00007fd4a11e6218 R14: 00007fd4a11e6180 R15: 00007fff033d5738 [ 354.950067][ T31] [ 354.953137][ T31] INFO: task syz.3.421:7679 blocked for more than 144 seconds. [ 354.960672][ T31] Not tainted syzkaller #0 [ 354.965624][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.974313][ T31] task:syz.3.421 state:D stack:26152 pid:7679 tgid:7674 ppid:5815 task_flags:0x400140 flags:0x00080002 [ 354.986240][ T31] Call Trace: [ 354.989508][ T31] [ 354.992468][ T31] __schedule+0x1190/0x5de0 [ 354.996973][ T31] ? check_path.constprop.0+0x24/0x50 [ 355.002384][ T31] ? __pfx___schedule+0x10/0x10 [ 355.007274][ T31] ? find_held_lock+0x2b/0x80 [ 355.011963][ T31] ? schedule+0x2d7/0x3a0 [ 355.016295][ T31] ? rfkill_register+0x3a/0xb40 [ 355.021198][ T31] schedule+0xe7/0x3a0 [ 355.025291][ T31] schedule_preempt_disabled+0x13/0x30 [ 355.030741][ T31] __mutex_lock+0x818/0x1060 [ 355.035488][ T31] ? rfkill_register+0x3a/0xb40 [ 355.040350][ T31] ? __pfx___debug_object_init+0x10/0x10 [ 355.046016][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 355.051078][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 355.056428][ T31] ? __init_waitqueue_head+0xca/0x150 [ 355.061835][ T31] ? rfkill_register+0x3a/0xb40 [ 355.066696][ T31] ? rfkill_alloc+0x25b/0x330 [ 355.071397][ T31] rfkill_register+0x3a/0xb40 [ 355.076078][ T31] hci_register_dev+0x3cc/0xc60 [ 355.080985][ T31] hci_uart_tty_ioctl+0x7e2/0xc30 [ 355.086022][ T31] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 355.091669][ T31] tty_ioctl+0x700/0x1680 [ 355.096010][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 355.100851][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 355.107799][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 355.113401][ T31] ? selinux_file_ioctl+0x180/0x270 [ 355.118592][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 355.123730][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 355.128495][ T31] __x64_sys_ioctl+0x18e/0x210 [ 355.133278][ T31] do_syscall_64+0xcd/0xfa0 [ 355.137781][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.143698][ T31] RIP: 0033:0x7f67ed38f6c9 [ 355.148106][ T31] RSP: 002b:00007f67ee1e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.156551][ T31] RAX: ffffffffffffffda RBX: 00007f67ed5e6270 RCX: 00007f67ed38f6c9 [ 355.164564][ T31] RDX: 0000000400000009 RSI: 00000000400455c8 RDI: 0000000000000006 [ 355.172611][ T31] RBP: 00007f67ed411f91 R08: 0000000000000000 R09: 0000000000000000 [ 355.180574][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.188581][ T31] R13: 00007f67ed5e6308 R14: 00007f67ed5e6270 R15: 00007ffc051af7c8 [ 355.196586][ T31] [ 355.199601][ T31] [ 355.199601][ T31] Showing all locks held in the system: [ 355.207388][ T31] 1 lock held by khungtaskd/31: [ 355.212263][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 355.222148][ T31] 3 locks held by kworker/0:3/1213: [ 355.227337][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 355.237822][ T31] #1: ffffc9000457fd00 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 355.249585][ T31] #2: ffffffff90591b08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 355.259551][ T31] 2 locks held by getty/5570: [ 355.264243][ T31] #0: ffff8880354b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 355.274112][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 355.284290][ T31] 3 locks held by kworker/0:4/5887: [ 355.289473][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 355.299932][ T31] #1: ffffc90003087d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 355.312845][ T31] #2: ffffffff90591b08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 355.324264][ T31] 1 lock held by syz.2.413/7621: [ 355.329193][ T31] #0: ffff88805541b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 355.338969][ T31] 2 locks held by syz.2.413/7632: [ 355.344033][ T31] #0: ffffffff90591b08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 355.354178][ T31] #1: ffff88805541b100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 355.363198][ T31] 2 locks held by syz.3.421/7679: [ 355.368210][ T31] #0: ffff8880284790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 355.378039][ T31] #1: ffffffff90591b08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 355.388008][ T31] 2 locks held by syz-executor/7859: [ 355.393321][ T31] #0: ffff88807a3a3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 355.402747][ T31] #1: ffffffff90591b08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 355.412693][ T31] 2 locks held by syz-executor/7895: [ 355.417966][ T31] #0: ffff8880792ef118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 355.427409][ T31] #1: ffffffff90591b08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 355.437386][ T31] 3 locks held by syz.0.472/7948: [ 355.442433][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.450923][ T31] #1: ffff88805a356100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 [ 355.460475][ T31] #2: ffffffff90591b08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 355.470423][ T31] 1 lock held by syz.5.474/7947: [ 355.475381][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.483870][ T31] 1 lock held by syz.4.479/7971: [ 355.488799][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.497320][ T31] 1 lock held by syz-executor/7978: [ 355.502710][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.511216][ T31] 1 lock held by syz-executor/7979: [ 355.516395][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.524861][ T31] 1 lock held by syz-executor/7981: [ 355.530063][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.538525][ T31] 1 lock held by syz-executor/7983: [ 355.543739][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.552205][ T31] 1 lock held by syz-executor/7985: [ 355.557391][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.565854][ T31] 1 lock held by syz-executor/7991: [ 355.571074][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.579489][ T31] 1 lock held by syz-executor/7992: [ 355.584735][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.593259][ T31] 1 lock held by syz-executor/7995: [ 355.598428][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.606949][ T31] 1 lock held by syz-executor/7997: [ 355.612195][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.620619][ T31] 1 lock held by syz-executor/7999: [ 355.625855][ T31] #0: ffffffff8f074368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 355.634367][ T31] [ 355.636673][ T31] ============================================= [ 355.636673][ T31] [ 355.645101][ T31] NMI backtrace for cpu 0 [ 355.645114][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 355.645137][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.645146][ T31] Call Trace: [ 355.645152][ T31] [ 355.645158][ T31] dump_stack_lvl+0x116/0x1f0 [ 355.645189][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 355.645210][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 355.645237][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 355.645262][ T31] watchdog+0xf3f/0x1170 [ 355.645287][ T31] ? rcu_is_watching+0x12/0xc0 [ 355.645312][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.645333][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.645363][ T31] ? __kthread_parkme+0x19e/0x250 [ 355.645393][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.645415][ T31] kthread+0x3c5/0x780 [ 355.645435][ T31] ? __pfx_kthread+0x10/0x10 [ 355.645455][ T31] ? rcu_is_watching+0x12/0xc0 [ 355.645479][ T31] ? __pfx_kthread+0x10/0x10 [ 355.645499][ T31] ret_from_fork+0x675/0x7d0 [ 355.645516][ T31] ? __pfx_kthread+0x10/0x10 [ 355.645535][ T31] ret_from_fork_asm+0x1a/0x30 [ 355.645575][ T31] [ 355.645582][ T31] Sending NMI from CPU 0 to CPUs 1: [ 355.765288][ C1] NMI backtrace for cpu 1 [ 355.765304][ C1] CPU: 1 UID: 0 PID: 1054 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 355.765327][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.765340][ C1] Workqueue: events_unbound toggle_allocation_gate [ 355.765364][ C1] RIP: 0010:check_preemption_disabled+0x25/0xe0 [ 355.765387][ C1] Code: 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d f5 c5 40 08 65 8b 05 ea c5 40 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d <41> 5c e9 44 ed 02 00 9c 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 aa [ 355.765406][ C1] RSP: 0018:ffffc90003edf7f8 EFLAGS: 00000086 [ 355.765419][ C1] RAX: 0000000000000001 RBX: ffff8880b8539240 RCX: 000000000000000c [ 355.765431][ C1] RDX: 1ffff110170a724b RSI: ffffffff8bf06fc0 RDI: ffffffff8bf07000 [ 355.765444][ C1] RBP: 000000000002c92d R08: 0000000000000000 R09: 000000000002c92d [ 355.765456][ C1] R10: ffff88813ff1875f R11: 0000000000000001 R12: 0000000000000000 [ 355.765468][ C1] R13: ffff88813ff18000 R14: 00002aaaaaaac000 R15: 00002aaaaaaab000 [ 355.765481][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 355.765498][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.765511][ C1] CR2: 00007fec27f72bd0 CR3: 000000000e182000 CR4: 00000000003526f0 [ 355.765523][ C1] Call Trace: [ 355.765529][ C1] [ 355.765537][ C1] get_flush_tlb_info+0x192/0x2b0 [ 355.765566][ C1] flush_tlb_mm_range+0xbf/0x17a0 [ 355.765595][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.765619][ C1] ? trace_tlb_flush+0x100/0x160 [ 355.765645][ C1] ? switch_mm_irqs_off+0x53b/0x800 [ 355.765672][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 355.765701][ C1] ? __kvmalloc_node_noprof+0x157/0x9c0 [ 355.765721][ C1] __text_poke+0x471/0xb70 [ 355.765740][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 355.765764][ C1] ? __pfx___text_poke+0x10/0x10 [ 355.765784][ C1] ? __kvmalloc_node_noprof+0x157/0x9c0 [ 355.765805][ C1] smp_text_poke_batch_finish+0x652/0xdb0 [ 355.765832][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 355.765858][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 355.765889][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 355.765914][ C1] jump_label_update+0x376/0x550 [ 355.765939][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 355.765964][ C1] static_key_disable+0x1a/0x20 [ 355.765986][ C1] toggle_allocation_gate+0x145/0x280 [ 355.766006][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 355.766027][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 355.766055][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.766085][ C1] process_one_work+0x9cf/0x1b70 [ 355.766111][ C1] ? __pfx_process_one_work+0x10/0x10 [ 355.766135][ C1] ? assign_work+0x1a0/0x250 [ 355.766154][ C1] worker_thread+0x6c8/0xf10 [ 355.766180][ C1] ? __pfx_worker_thread+0x10/0x10 [ 355.766200][ C1] kthread+0x3c5/0x780 [ 355.766218][ C1] ? __pfx_kthread+0x10/0x10 [ 355.766236][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.766259][ C1] ? __pfx_kthread+0x10/0x10 [ 355.766277][ C1] ret_from_fork+0x675/0x7d0 [ 355.766293][ C1] ? __pfx_kthread+0x10/0x10 [ 355.766310][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.766344][ C1]