last executing test programs: 2m4.402616966s ago: executing program 4 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) userfaultfd(0x80800) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pimreg0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @default, 0x1, 0x0, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x8914, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000003c0)=0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48c5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000002d00090027bdd160ca31ff030400000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xa0}}, 0x0) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m1.952086534s ago: executing program 4 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) close_range(r6, r4, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30d, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async, rerun: 32) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) (async, rerun: 64) r11 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) getsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf253400000008000300", @ANYRES32=r12, @ANYBLOB="f8475de20549e777cf254dda8ff1402ccf5bacb5bc5ba568d4478ffa74591d6f657dfeed344f478b9a076c6c552b85b8fb07a10c33b680f4b9e23736d9e9f59fcbcf19dfedb5f7c662633da2d7af3c9a05ba3882ae9119c17a30e3662f60d47d7918167f9bc08ef66e29d2ef364e81248488d128617a2d882fff2900"/136], 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 2m1.534638409s ago: executing program 4 (id=386): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x37ce, 0x3, 0x6361, 0x5, 0x2, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000004500)='./file1\x00', 0x321000, 0x150) 1m59.228130193s ago: executing program 4 (id=393): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000003, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x4004094) 1m57.270692335s ago: executing program 4 (id=401): timer_create(0x0, &(0x7f0000000080)={0x0, 0x8012, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 1m57.079966613s ago: executing program 4 (id=403): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x44, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x8880) 1m41.681641247s ago: executing program 32 (id=403): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x44, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x8880) 14.066599385s ago: executing program 5 (id=711): syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x10000, 0x3, 0x0, 0x717e387b, 0x44, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x109, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xfffffffb, 0x1ff, 0x14f0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8010) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000000)={0x1, 0x30000, 0xffffffff, 0x10, 0x10, 0x80, 0x2, 0x7, 0xffffffff, 0xc190, 0x100, 0x8, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x0, 0x7ff}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) 13.073656131s ago: executing program 5 (id=716): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x3, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{r3, r4+10000000}, {0x0, 0x989680}}, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 10.036183775s ago: executing program 5 (id=725): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332abd700000000000150000000c009900c70000003a00000024001d80200000801c000d801800030014000300fbff08e30500090003000100b2281000"], 0x44}}, 0x0) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) sched_getattr(r8, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 7.656641076s ago: executing program 1 (id=733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4200, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x4, 0xfffffff3, 0x4, 0xffffff81, 0x8e71, 0x61, 0x97}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000180)={0x3, 0x6, 0x0, 0x401, 0x3, 0x9}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x9, 0x3f, 0x8, 0x2, 0x0, 0x70bd26, 0x25dfdbfe}, 0x10}}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) 7.438241488s ago: executing program 1 (id=735): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7eff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2c}}, 0x20008000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) timer_create(0x2, &(0x7f00000018c0)={0x0, 0x1, 0x4, @thr={0x0, &(0x7f00000017c0)="0639bfa87d2e19ac9e11dbfcdd9c104e245b5844956bfe9bb83aaffe95b652424e01051d894e1d1ef676a8cb9bb7d5bc06a96a67c432e94be96bdd656e986825f43b78dbc729b61a8f2a93cba2235b4bc062835ccdc3412fa7c092a4f27ceaef674fb5948b6673cfeb7a807554ca19b5f20160da8f4da7f28a200b51ea529f81c240104b67565063cdcd08f1e503928994f63608c1febe61"}}, 0x0) (async) timer_create(0x2, &(0x7f00000018c0)={0x0, 0x1, 0x4, @thr={0x0, &(0x7f00000017c0)="0639bfa87d2e19ac9e11dbfcdd9c104e245b5844956bfe9bb83aaffe95b652424e01051d894e1d1ef676a8cb9bb7d5bc06a96a67c432e94be96bdd656e986825f43b78dbc729b61a8f2a93cba2235b4bc062835ccdc3412fa7c092a4f27ceaef674fb5948b6673cfeb7a807554ca19b5f20160da8f4da7f28a200b51ea529f81c240104b67565063cdcd08f1e503928994f63608c1febe61"}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) getpid() (async) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 5.970177485s ago: executing program 5 (id=737): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20004004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x80000000000000) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, 0x0) (async) syz_fuse_handle_req(r7, &(0x7f00000042c0)="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", 0x2000, 0x0) (async) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r9 = epoll_create1(0x0) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000200)={0xa000000a}) (async) finit_module(r10, 0x0, 0x3) 5.630490946s ago: executing program 1 (id=738): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) (async) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x7, 0xc, 0x0, 0x8000000000044000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030529bd70000000000000000000", @ANYRES64=r2, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0x40040800}, 0x0) (async) dup2(r1, r1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) (async) r5 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008024) (async) r6 = socket$kcm(0x29, 0x5, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3e, 0x0) (async) socket$netlink(0x10, 0x3, 0x5) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.62821582s ago: executing program 5 (id=739): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x5, 0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000ec13b2106d04f3082881001b030109024800010000000009046900000e0100002b4101", @ANYRESDEC], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@bridge_delneigh={0x24, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x0, r2, 0xba, 0xe0, 0x7}, [@NDA_IFINDEX={0x8, 0x8, r1}]}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) userfaultfd(0x1) 4.934095343s ago: executing program 2 (id=741): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000090000000000000000fcdbdf2108004b0013000000"], 0x18}, 0x1, 0x0, 0x0, 0x400a004}, 0x4040004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x16) msgget$private(0x0, 0x71e) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') mmap(&(0x7f00005a1000/0x2000)=nil, 0x2000, 0x1000007, 0x80010, 0xffffffffffffffff, 0xa5a85000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r6, 0x104, 0x4b264316b88a3841, 0x0, &(0x7f00000000c0)) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="03f517f6", @ANYRES16, @ANYBLOB="010027bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendmsg$inet(r7, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}], 0x50}, 0x4008804) 4.831873633s ago: executing program 1 (id=742): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) rmdir(&(0x7f00000001c0)='./file0\x00') sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0xffff}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0xffff}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x8002, &(0x7f0000006680)) r4 = socket$alg(0x26, 0x5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r5, 0x2f, 0x0, @val=@tcx}, 0x1c) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r5, 0x2f, 0x0, @val=@tcx}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000070000000000000800000000000000000000006100"], 0x0, 0x2d}, 0x12) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @val=@iter={&(0x7f0000000080)=@cgroup={0x4, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x10}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r6}, 0x3b) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) mprotect(&(0x7f00002b3000/0x1000)=nil, 0x1000, 0x1000008) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) accept4(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1d38, &(0x7f0000000640)={0x0, 0x5867, 0x1000, 0x40001, 0x2d0}, &(0x7f00000006c0), &(0x7f00000000c0)) (async) r7 = syz_io_uring_setup(0x1d38, &(0x7f0000000640)={0x0, 0x5867, 0x1000, 0x40001, 0x2d0}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0xffffffdc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x100847c0, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x6502, &(0x7f0000000040)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_setup(0x239f, &(0x7f0000000380)) 4.654002826s ago: executing program 3 (id=744): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000500000000000000000000000000139dda7076694b36e3f1f440e4f041bf976f3b74e416fdbc9e8d46a083077e44619975f1f254f6f67e56140452637fe58bea6488cecadf0df02c71e8fc0e23586ecae70d6a07aa5788f7064ddc6aff70b5e8f030dfd3458af9acc46c08785a6d80081c283d469f67ab04aceaf353f637dd51b79a428d12da31d3b519825f00605103af87cb9ef82631014eaa91d73a44907bf4f343a5ab0eda3dc08b549e260551d1f4488f9e9823800fb4d53d275e6fc4739c3527fc05ce1ee1b963de250174ae57a463acfd25ae2f0c8145aa2ff67c88c572c6b9b8270c9e2355139e715b"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x4, 0x12) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x90, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20048010}, 0x40) 4.356038506s ago: executing program 3 (id=745): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0xe) (async, rerun: 32) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x40000) r4 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3, 0x0) (async) r6 = socket$kcm(0x2, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) (async) write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="710505dc02060194fd02656a8acc97092bf1aab7062385e7139017e343f2635cca5d46b096662efdc96f36961d58105cbf32ff05fa162b3ed02ae3d228082ee35a157ecff661db04eb71b7e9ce56c765422f56011d6805f2559976c93d87fb9dc5b9199070b7b7b94cfc9ff9ddc9290ed3e5355ecaad4818c70c080709a1f9b2eef4b1ca3f23e493ec4618203b40d8ccb9e5483e8cf8584a1ba1d204fb675ecbcc729b50f8227d318590f312f212862d2886085f90d55d7c9761dd9fcacb4037359fdd920ea8c581aba864cdee3b902a8bc7fb71e0a33eb9a44c82896ee97d948dc763228fb26248063a27d1a106b57cd6bf4d07a45b2bd17ba36a543e9f3336246178163bc44164d9ff7a16a8b5dddb0e1354b56cb4"], 0x116) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r7 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) sched_setaffinity(r7, 0x8, &(0x7f0000000300)=0x3e) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) (async) r10 = socket(0x10, 0x2, 0x81) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) (async, rerun: 64) r11 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @p_u8=&(0x7f0000000100)=0x4}}) (async) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) 4.14850831s ago: executing program 3 (id=746): r0 = socket(0x2a, 0x2, 0x0) getpeername$packet(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0xa8e41, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000240)={0x31}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) timer_create(0x4, &(0x7f0000000080)={0x0, 0x34, 0x2, @thr={&(0x7f0000000040)="32c9fa8273f895b832b1badbdfd819995e6054563d2cef8fac8fade884c58cb914d93d50cef1c6550fcb98e0424b16a4e964fc2a2e", &(0x7f0000000140)="ea9bb1e951d01574482a7a485f9926c6b5c609c56772266545d81b01a9ed4c652cad4f8bd63b3ab9b812120f5653fcb997c570bfd65c5742c48352660e69e6c25c0bf72ec0b01bef6ceaf85acfb6570199a334a2da3029739df17de13421f778ebf02229513d2eed7d3924494b898d56e1d665dd892a32984b47155349ad55829f3549c7f70ecacf4f46980be70c7c"}}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000240)={{r4, r5+10000000}}, &(0x7f0000000280)) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) 4.049829291s ago: executing program 2 (id=747): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900674c00000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000100000000000000000000000000800000000000000000000000000000000090000000000000001000000000000800000000000000b00090000000000000000000000000000000000000000000000ed010000000000000300000000000000000000000000000001010003000000004b9105609e84db3e5dfde87c12975bc7b69e387609c56cfe0fc6653b9ebb8f2f6bde0ea3e11cde786f7f6718f5c78bdeb9dfd5d5a5187139852c38f09e973eebaaf77e4027a4c4e8cd6b955dca0b86fba6314d69686324eb164386fc38d29cc0f5e673542cd3cc30fa879a09942e680e8ba8d258166c3c7eeb1361f6ce6d"], 0xb8}}, 0x810) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) recvfrom$llc(r1, &(0x7f0000000340)=""/219, 0xdb, 0x40000002, &(0x7f0000000140)={0x1a, 0x0, 0xe, 0x2, 0xdb, 0x60, @broadcast}, 0x10) setsockopt(r0, 0xb, 0x81, &(0x7f00000004c0)="093e0763f3000000", 0x8) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x5, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) write$tun(r3, &(0x7f0000000440)={@void, @void, @mpls={[{0x7}, {0x8}, {0xffe01, 0x0, 0x1}, {0x1}, {0x6a, 0x0, 0x1}], @generic="0d31f7247294f1c00305cf8fa38feccf0dee8f16cc5407d2fbb0986bfcbd97932bceb8795638d879d349c9e031edb656d94edb7bdb84ade8c3e75d2c66"}}, 0x51) keyctl$setperm(0x5, 0x0, 0xc008400) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa0086dd6000000000140600fc02000000000000000000000000000100000000000000000000ffffac1414bb00034e22", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB='k\x00'], 0x0) 3.933837509s ago: executing program 3 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffd000/0x1000)=nil, 0x3) (async) faccessat(0xffffffffffffffff, 0x0, 0x102) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) r8 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000000)="e1", 0x1}], 0x1) (async) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) (async) recvmmsg(r7, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 3.800304112s ago: executing program 2 (id=749): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xfffc, 0x0, 0x1, 0x7, 0x8104, 0x9}) 3.63655524s ago: executing program 3 (id=750): r0 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000076d000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000358000/0x4000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0xfe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x7]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0, 0x2fc}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) 3.488183955s ago: executing program 2 (id=752): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) clock_settime(0x8d71ca88fffffffd, 0x0) 3.463250578s ago: executing program 0 (id=753): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f3066baf80cb8b58eb48aef66bafc0cec0fe72d16da0000c4c37d054e0000b93c090000b80000c0feba000000000f30df180f20583e650f01c9660fdcd42e0f78dc", 0x4e}], 0x1, 0x90, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.51627448s ago: executing program 5 (id=754): r0 = epoll_create1(0x80000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2004}) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x40000004) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000006c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x185281, 0x0) syz_usb_connect$uac1(0x0, 0x99, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = io_uring_setup(0xf06, &(0x7f0000000480)={0x0, 0x824e, 0x20, 0x1, 0x96}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x109081, 0x64) syz_fuse_handle_req(r5, &(0x7f0000006380)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x28, 0xffffffffffffffda, 0x1bae, {{0x6, 0xfffffffffffffffd, 0x1, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r8, 0x5, &(0x7f0000000200)={0x1}) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000048601, 0x0) 2.168114052s ago: executing program 2 (id=755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) close(r3) socket$l2tp6(0xa, 0x2, 0x73) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000040)) 2.086802513s ago: executing program 0 (id=756): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000f80)={0x16, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0x90) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) timer_create(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 1.668896091s ago: executing program 0 (id=757): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', '', [], 0xa, 'O'}, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) (async) recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x20, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd431}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async, rerun: 64) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) (async) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x68844) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000c001) r7 = dup2(r5, r5) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r8) unshare(0x6a040000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r9, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 1.607937087s ago: executing program 3 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_usbip_server_init(0x2) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc, &(0x7f0000000600), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRESOCT=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002800000eb907cb4a5aa7e6a32b730156c54fd4970a2414539b21968dd30a80349f6854f159012b2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES16=r3], 0x58, 0xbc8c59d6d13d0fc}, 0x200008c4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, &(0x7f00000000c0)={0x2, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000440)=@x86={0x4, 0x5, 0x10, 0x0, 0x8000, 0xda, 0x7, 0x9, 0x8, 0x1, 0x5, 0x6, 0x0, 0x454f, 0xfffffff9, 0x7e, 0x1, 0xbd, 0x7, '\x00', 0x80, 0x10}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x28, 0x11, 0x5, 0x3, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x200, 0x12002}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x880) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x8, 0x0, 0xc, 0x204, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) read$msr(r4, &(0x7f000004b680)=""/102392, 0x18ff8) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={{}, {0x1, 0x3}, [], {0x4, 0x4}, [{0x8, 0x1}], {0x10, 0x1}, {0x20, 0x2}}, 0x2c, 0x2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fbdbdf250f0000001c001b8004000300040003000400020004000200040002000400020008001b8004000300040005010400e200086546f411000000080026006c0900000400160108007e000100000008000d00f2660000396660cc00f3976e49e8fb89144f8a2bd009b51619478323b78b59d9ff925f0f68921affa6e601e345ce"], 0x64}, 0x1, 0x0, 0x0, 0x24048880}, 0x40000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x18, 0x1a, 0x147, &(0x7f0000000300)="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"}) 1.516015861s ago: executing program 0 (id=759): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x50, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x18801}, 0x4050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB="68000000000000004b0000000000000020000000001100"/32], 0x20, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000840)=@urb_type_iso={0x0, {0xc}, 0x6, 0x0, &(0x7f0000000380)="681a7dbd74d8297f7d420b23474df730e5deb8763e446bda3123f6647888a0dac7cfc10b7efbd7a98dcc62fc1408888c9c5d2b28b7bd08bb5302aeef9bd6106acb3a4e3b9348616b6859db0ecef2124a39500da8304327ebba7723720e3d12ba61d1d4ac83e8bf016fe0c35089792c6e43872c5a43ed928a6f47840ce2cc529ce647345ec848945c4dff5c5c4704", 0x8e, 0x6, 0x316, 0x50, 0x4, 0x0, &(0x7f0000000440)="44a370655447f1ec5878779f5f3242eaa88ddb2e329699c9b60e5cedefe66e834e2d42bb4df57ce0e816e689d3f054239eee03c459bcb417c4bcc6f2917472a0b7eb4a14", [{0x3, 0x8, 0x9}, {0x6, 0x1cbcce52, 0x2}, {0x7a95, 0x0, 0x4}, {0x6, 0x0, 0xa6c}, {0x5, 0x0, 0x4}, {0x0, 0x1, 0x16}, {0x5, 0x8}, {0x9ed0, 0x40, 0x3a}, {0x10000, 0x8, 0x2}, {0x2, 0x9d65, 0xfffffffd}, {0x4, 0xb, 0x14}, {0x2, 0x9, 0x1}, {0x4, 0x4, 0xff}, {0xa6a0, 0xdd, 0x3}, {0x8, 0x5, 0x6}, {0x0, 0x4, 0xf500000}, {0x9ba8, 0x7, 0x9}, {0x1, 0x8, 0x101}, {0x8272dcb, 0x3, 0x3}, {0xa85, 0x6, 0x7ff}, {0x3, 0x80000001, 0x1000}, {0x8000, 0x81, 0x2}, {0x1, 0x6, 0x2}, {0xe, 0x6, 0x1}, {0x1, 0x1ff, 0x8}, {0x4, 0xd, 0x6}, {0xb96, 0x5, 0x2}, {0x7, 0x8, 0x2}, {0x301c, 0x0, 0x2}, {0x731, 0x8, 0xff}, {0xcab, 0x4, 0xbc}, {0x4, 0x8000, 0xff}, {0x8, 0xfffffeff, 0x2}, {0xffff71b6, 0x7ff}, {0x1, 0x0, 0x9696}, {0x3, 0xbc, 0xfe76}, {0x7, 0x2, 0x6}, {0x10001, 0xc, 0x4}, {0xffff, 0x5, 0x63ab}, {0xab4, 0x6, 0x3}, {0x4, 0x2, 0xddc}, {0x0, 0x0, 0xd9}, {0x7, 0x3ff, 0x1}, {0x2, 0x10, 0xffffff7f}, {0x7, 0x4, 0x5}, {0x0, 0x8, 0x7f}, {0x4, 0x101, 0xb}, {0xc9, 0x3, 0x8001}, {0x4, 0x8, 0x3}, {0xc72, 0x5, 0x5}, {0x182, 0x9, 0xf}, {0x6, 0x8, 0x6}, {0x4, 0x8001, 0xe}, {0x4, 0x8001, 0x5}, {0x628cd1d1, 0x10001}, {0x6, 0x10000, 0xbb6}, {0x4, 0x80000001}, {0x1, 0x5, 0xfffffffc}, {0x57e0, 0x0, 0x7}, {0x7ff, 0x2, 0x4}, {0x0, 0x3, 0x112}, {0x40, 0x7, 0x7}, {0xc, 0xd27, 0x28}, {0xb, 0x6ac5, 0x7}, {0x6, 0x6, 0x3}, {0x6, 0x6, 0x21f}, {0x1ff, 0x1, 0xff16}, {0x0, 0x5, 0x7}, {0x4, 0xfffffff6, 0xa54}, {0x6, 0x7, 0x3}, {0x9e56, 0xe}, {0x72, 0x7, 0x1}, {0x8001, 0x26d, 0x33d6}, {0x7, 0x8}, {0x2, 0x7ff, 0x90}, {0xfff, 0x5, 0x4}, {0xfff, 0x8, 0x4}, {0x5, 0x6, 0x8}, {0x9, 0x5, 0x4}, {0x1ff, 0x7, 0xfffffff5}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000005cc0)=[{{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f00000005c0)="a034799581307f10a395abdd34bcfd9aefc4d8ca8cf1abe2f8424c65fa3be9918e0e6db5796241c83fd8d09092d811890d7a6cdf1588e30abe6b732ec406d727956447ab5d274262847ce3a5dcd190cd36a876bf73d8c615", 0x58}, {&(0x7f0000000640)="4c32d494400ff4766b17cb4afa", 0xd}, {&(0x7f0000000740)="3d53aa5d111adf4111879c0c5e6e71b52c0dabb9946766051fa175c6dfe7f6f0bdf2662a750034ff86386b5ea05ffba568c8ddce050e60a02a8a7c22be9dfb0904461b1e69ed8c4c723cc900b3decf236d1466ef", 0x54}, {&(0x7f0000000c40)="78fd6c558251d43d68a21359be99fce7c6e4e2caabb0c7b40b1805513ce3090c0b107207f6a8839edd23a80120e22c88c6a770522d7efe49a265ec166b9aac2e0282816de15bdc8d3494982d82e2ff318f727cd529a93a81ee7ba9c020a6439ffc0120a247908d4519b9f4b58bcaf386a2087093831d5f2ea3a5d7ce6cc8aeddc099015c81ee0b91c52ff31877593b41b06f622725d764f0a8561f0cbdb983171541626714643345ccd639f22d1b22337efa73de43aa77e31b9eb3da587b81df5fc593ef58540c694f9986cb2a7296245bb07d0b3239dc9cf6e5de31f5e21cfad566", 0xe2}, {&(0x7f0000000d40)="49b324ea2739029c6aebe52e5f29eee043a5f44e26f9dc6c1aae59646f5ece966d2bfe8a535fca38d768cb57dcafd55f42a351b3f1774bd472209856423bf022636895ca71bd5507e763c541313482f968f6931537bb4dc037dcef2d9553bec6fb9b5daaea164f421d5a9d0eaf2a42c5c199e128cb8b0d1bc81c4ae4010b2c22e166d53fb4d5cfa78ecd8656fb5dbc934a347eb1ecc3605567a6e313fb6d774fb15619c5573707037634da1a5107929a7f677cf7e1e55e71188db4d7319fe138c86d0fcedd131ca7ad7d5be2a1320d4a0da67fabc7112384bb2990e8f85cb5a782824773ae76c56466f5edbf744d76fa16", 0xf1}, {&(0x7f0000000e40)="14a05ef3bfd6ddcfb9d7bf6eb7b6bf42d3b66eff2c8a93ba483fc2449ddbc0701dfccd42ab5e6250462a74e85b18fa32a1d056ee87faf06bec0c6b2c04dfe02b98fe195f9f3e6debf85275b54638940ea658a2c1d4a7201e8eae9a90815e0efd924e8c5b164704efcbad57419764ff975b53d9b7adc42961695f5471a5cbbfcbbe51058154ffd39b7a04ac939aff01833c2449a717afe3", 0x97}, {&(0x7f0000000f00)="b6dcea9572ee440612b3b19bd997c802546516e811a259ede34281f06d8b834d9af54efbf97fb26ea3a2afa5375c9bbee8ee760d9c11900e674070491d275407c88a724a5b8b789d34c3ea4c7a5c02447a9dd852c0399f7c9cee7742cc98598be0d206b126ed4b7ce38d1343b687c0d0ce6506a785b08b2c18b82e01874c31e0fc96d2a85e1561df742882449fd41cb0532677e3a897aa0f29e965dedc5cc3256e1e603e3498e67c29d16f6659b6fedb64c0396d2f7ab164288bf5c39a1d680484af91e32f79edd74e84dd", 0xcb}, {&(0x7f0000001000)="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", 0x1000}], 0x8, &(0x7f0000000680)}}, {{&(0x7f0000002080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002180)=[{&(0x7f00000007c0)="03d7072be78e2049352db0cf27e93c393455f9f822f170f91dc736801af3dbee5a428ba9ab79acfdd7bfd06bd49b987291", 0x31}, {&(0x7f0000002100)="7504b7eeb21db89985af1643a2f0ae7f08ee1a9f51d2606b8ac7afa0187afec5d17a15304fd1b6b17165eaef9cdcf44959934f229aa2c7", 0x37}, {&(0x7f0000003300)="c272e4578f1988257bac82ab0dd08375d5623e4cabd571cd2c212b4bf5ca2422f6b5aea61561a32b9462cbc0f0e61bd4e026e351416e969288001694383ee0cdcafc4e261cf50c8609113bcf3b1656c4c7adf0e3800ba1741ba630fc3f832c979f5df11d3e685c0613283c67734051ca54d9f4a5143ecb4285e85b20be52510fa37be2fad65a4c04eb1f40fae9e561dc15d69a824e7edd1c7d78462ab01d74955e450ce59455", 0xa6}], 0x3, 0x0, 0x0, 0x801}}, {{0xfffffffffffffffe, 0x0, &(0x7f00000032c0)=[{&(0x7f00000021c0)="c3fd83385c0e364d0b632f94c3e70ea4698011bcdcef99eb9f5bc0f4f064fb9b69368786f562d6fbe001e8f8800679bc27fdb44dae0901195b73f8c95b6c752e08f8944ac214588d9f1ba1e9083e6b7888e3f418c3050d4623cc2105cda787dd3219e9b732b6347eea9acb5732649991470ae807eb9470c39993114a781c4d02fffcab3b99b9048de111969c95d48c6d4d0ef64aff506affb85eb775220e5d370eafa27e86b63acb5309a128a227a37972e13a71f3c8288a02e16210cb0941bfc70ec08ecf051f612da4012e54da13c10087143e399118006255f0699b5ab1b20464342850d7c162c532df4e831c2d41e7", 0xf1}, {&(0x7f00000022c0)="b4f46a5ff77021d3ff1a5afcc2f854fcb76556d2e472ff44c59c77170421f4e09bffff19e011de577a696ff62f4195153a592bc723a7fb82035dcb0a4fb782ee327a7f79dbccd5564e0175fcc88a9e417f237030d16ff5d1808df852f85029ff3e3959402a7dcf508585bb206f0e791c0d453263a382e0333bad462fda71e7746e2cb5a57f2f01fed8bcc5ab56243f6dfcfdb4069c025e2bfd59432292104f7061365fc6457d81a661bc5ead04a7c8b8462341488c5da28c26800205d2aa431c720b53fe68ef1f0751cf89a694c7650d783681c50ab1d3e0f8e877a7fcde2224c0d3dd278d143222788907c491277050786de712f985476163b821e8321f581017ab194c0c70ab8b4c5adbfdadbc45e093456fe8966c74d9c2b237139647a86a4059560551ec611ae4176fd7838ee8a380b47afddeb28cf488c93a25a8a1a68004d7351f107d3a4ba59dff92e107c1445317d10f9364f151030462e5d6e34e8d5a757bcc6890f096e5cf7ebc4f7c88850e758665a459119337942925a081ca550ca731d2be6476d1983749b06562f7ddd6452896a6672782045279eca90b71ed77fd17107995ccba9772874c1a275a1285bac3ffe2e7668ae5cc35e691f8bf8bbe54696514ad626f34ad5e341fbb6275d3a7893d993447516beb61d0b07dce50a1e9fa1a591bfb4bfc46eb77a3a81abcdec560be3824b0c7f605f655d3887270a1e36c9f70b0fa6a70c0ef2f97d49ddec651766d55ad994eb2f0d44edee72d39a8bcd072c9f87d40e20371fe2256d6787060bb83a9531bb5f5f8d96f5e97cd223599b5dd53cf1b274f3a7b3f8adcc9f657c53afb51f0ccbd68d2dfe73d29287639be76c97fb537f16b5e0024de2adf05f2b1475f3e68d5b6335ce682de445c24850d8f677783b18cfca68a5966369704af376e5579bae77a2f63419867e7502a5756bf04627bbe76837a4e4177474cf011e82ee9806e664c4790c5809c4426994bdefbed7cb137ec10a0eca5f40a15cdd1f1b70de7f5e19e1c7adc39a60630d1a2884c096d9b321f0d3097b7f4efeacb4e56ef961db746f9a540697e87f2187bf23d8ba63bbacb118454b3fbfc9b41b993e22bf9fd123d21eb72c6c2dadbf110ea1a4fde5c74b5ea1e3b96681643f4a56f2a82da249dd976285aaa6edc447b974b4d874897dc75943ffdbd6b96cfe845901cabae639b307fe07022ae5ee3ece0a17112466cfd7b181843d08ca48309bcbba9a70d36f38efaa3a272966c8695205f48b6994ca082bacea2336a11c7e8ddd9000b6e190377395637cc32fa0db69cdce5567fd2b4068d182ff623a0292ca4422965526854ccc27ae55f2424c5d4a7658cb4967a70054b1cc64c14fc25ca350ed2439f468e456f8039c68d26be60217402c375715ec779d5662a429b9de30616cb1ef270941d3671861c40c265dd61c96667682bea71de6b2c8c84a5e2059d36b53d6d8da245b0deba3b44f3bc27ff0dfd4740a7608171cf4aa7e57d3d51c4b77457e812a3c620d67f0c47e5e494968f6945dbf61fe9d5bc14d24d16f601595cab0bc06d48a46c99365291f3093f8929fcbc1c5f5e06a040d0a0b983fcc2b33218de67f4054c2e08ed92ae74d1bcb2798c1c7005b33371fd15a194ed42fe05801acc60ec675577b2a7119101dfe91d768ede5f3d352bc673d276560fc4040e6117e0a86f9e726e5ff817334cc89f6662b8f2e408a04538207b0a3e4f04cbc758adebf3fe502738a703492b5959494f429e39ba23f71a41150b932cc3bec30f59e3573d3058d8f7dc16fe922aebc83a5dd5cf816e2f0ba0b1c0c893880f56ee49f750e7d79237b96e31ad29c8cc7b507b31a3b91fc58e5550ca5f2f4e0989f8f0c40a2f3588fe9eecac834debad0ef34d037dc48344c3d3506d370037d0afe3ed7e0062933d188e16269259402f72f397e852477a385a29c14c314f2d35c2d36b54f6b92e9c7ff21206927b95740caccd81f63bdca9f06a6a9f56a8f269772bdcfb67400ede295ccca7837ed968da49520763633c61fc95747012a861e925793a223c41fb6db40c379580d53afca4a67f745d4ca6ebb78bb22f85bbb655855b0f09c528d8979ae8da921176c4e4242a100f463793810af5dadb6d5bf2413622504e0c53be9b317079e23d8d397a5aa0f4b06229f237e5f126d2399ebb568f0a63c32837d53bf1868611e5ed595db6bc7afe8dca58dddd537fbb45a94e92018a23bfd1ea4764340f8f165886eeae2bfdfab43a7c8dfd01d30417ef1eebcfb424bf6cf6ee59a17b355a6daefa661432784a54e72b4d041c84bba2aa373b45cca8a9d456e0eabfe838e3fc91240b5434cfd0b2949d19b00e4f3cbaec0fb8e639c321256a09dfa2c9c6ea76e73c8c87ff069521d65e60f7b4e6709ef59a74dac136f55ec8d0ace1cd95cbc70106b1a0724e76f63e9c9f010df4dcd84f03d2fcafd6be5edc5152f219c07844def98d7207ffe72c7acbdc0b0897fd7c27feb9c3e9a545dc6f329fe9f9bd9cec6d6f3adb5eacb12ead4a88ea62a542ef384d513d88bcb7d458d2c864a545e93d0586675abdf2c355a730d81a731101904f34f224240f6966f18c1b7f168557c8e69f0397e244285c7af4e162a64a1a22431c44b2be84e051f26ad566f4dde903a9190ab30911f98eed651d65422cf522003609bc027c709a3cbfbd84bd8ab568cc7204b79648da4d8e75a579153903422cdf2e954c2594dbe2ca25174ffafcbf07d8bdc6da86c79eeaee4ea2761a3421771f0c3c6bed859584699c7985ca0c03f836c9e7ce591f47a64308060a8fe2fc162e3b7474dea36cb06d381ff320fb6f53e478dea87d58b599b8fb425d8460ceedd162059ee4fa4f6c88aa0668d43f81fa0066930c3cada840ac949b7e6e2daf94ce58605499cfed6fa8b73df69a3bc3c57249f6e308301421febd7fef58756ef9bcdcedb6ccfb887e80c772034ea412061418174f341faf9e840e2574f061c524d8e039ba329235b0389013d31f2c58b07c969f52b234437be5a1bb571bb023a165709abe6dd522c6c2a00febc83eda105a94c0787d7afd65949c9bd83d45fb121a040541b908ab37d6dada88a5505bc81a8e599247d9ce576fc826ea5411ebdef3a771eb99f2bd8d448fc9d7d088e31bdd333fb5b5416cc1d16eb8fe406db63b347b9590782d75279003f03fed8b7321228270434591380ac91d466f30dae77e0ccbb1a2c9a3c2be785bc50947fa470a7a58620c3305d1adcd7f5eecd873351b6fda28ca029a7578ec8e623149352eb6456fcbaecb8f0d8a0faac531d3728ac7976ff9cda1660c6674f0d73f689d5468862ee4ec9df975545a8bd00a01cacb10c0d701bc95118fe23e6d07e311ddce355eb43ee66b60407f3823f2b8160f65a502ba1f5b0a878c15434947014158b5aa09c02d8c81c37c529edd1421ec598e0f027fb8cfe2e36c8a8013b22130062c9a15b2e64a6a1682a019388124a3c793770dcd4ddd7399cc392dd6bc04d457bb05e8a7b183e527e022aba9d2f6cdf38919259a36bc254f7d2b7f552c42b4a83a283feb11de6ac5bbeacd09182a4230b7534fb7cf95d82173022fe16d416bf0e2c03bd3a53869688db10c1ad1e03e69716617b6c34f91c9893b49460529f9db6b6be456a982e94a40b881f398f114454c5df2b9e3a952373f7ac22f9ee62c42c66f3f7617762656ffc562b64e5ba0368a25ca8cccc8e6ed66fefe61f3a44a82c4cc7753e43d693d513b76d9eb7510c1719d8dbe08d7b559d0e937761a8cf3dad5d8eff99d278c1ea98bd2c3399f76af527186f676fa870941fc1a10e062c5ff60a22719cfedee9181f099a688a382f52a057b4e6d18dc9fc6bb312c0ca150fb78100eac20ff11b614b1dae82dd7b4f8f9207583651e5807eda2c3ba959b35a803e3aee512b33723b512c81a2d6a88afba542d452dcbe616fc92c5a792bd7a9ef8d2e2a84a166fa678e2ca56cbc15257ced667adbe3e2a27f6d241d6f2a26821854f9a576c7991fe8a5ba901444597af179fe77ae621af5e72d1bb7232867c88666edf62fd293a8a410998099ecec114c1d23af119e11ae815772027c09556e841047e2c9800cdb89a337d5c4dcc177f9d33a7a01de7d8dfb63dcad90b35ab3f78b60c596dd367c2e3e093fca7eeff7ea16d47e8c73f8d98851d7caa03a13ccb17d8a06ae314f3fd5d9c88ea1ae12c9110207929d564fe7e74bf5ea18a9a80512a89b9b934d8791d1fffde23e522b0b5a17bca2d072a879ecb58fb22e96e306aa203e1a30fe6e1d55a8b80d7dc81f4c3b7066266b5f496a3ae35257b3c5d70b54ad006148f97e168b615ca46cc35850e16059f2f86bdaf3bdfa6b9875aa0190e5cb77d1930a3650a4aa17c13cdc096f13baae9d01491c90e2a09b0d644f8eed1d8568af85850e66b4940dbd49c75b634dbb626aff7d54aad8c71ea054b09bfa4d4fda5e029824aa89a2292f208fefec74f59bb427c29c957f3e479838647a883eb818a502206311997373062ca207bf79c6a70f002bf0ba73da60f31e3d430c5eee1e35e5fed968c5ee8d4ca05a3d8c6f1e2656d32ca0159fb5bfd7c8f6564f15d87735e673fa150baea994a179a5bf1eeb848c291ea324a065675f9afd9fc868d90756855934930299e1b34c2601e82dc28f9579d96f023d2749c6139a2805565df1f3154a486189447dcae1ebf539bbac51e742d6c36a823e841d7e71d31fe1e25b1bf2f9874c4ecba8ee65f0f98132fd23ae23789ab53ad0d5c11ae026999d5e990fc844bb57e20f224de40cda8a926069bb7c43e67e2fd0ee76d911714af06be5e70c5677cc39057c7b6c79e618e7a3caa641e54aa407adbf88595701f8417e9b127bb0d2854b39ce6bec81ef6bf22d2fb7171d264a3eb53a963e947a8e2667ccc6e193d494db0d5b0ad00a4e8f29829d3fc4079d6ab047f0f945f5b8b1acb6f0ffd6e00829c8c79b84b49a7e40125042891453f1e578d84c4a57fc2dad3a8fa11b596f9ac152a99531de7ae579ef3d4793ca8e22cce4ea6481fd6fe2b365b7d92dd6c90944ebf5b5fb74366339075df08f5965322fad7f2e966489f107e24737f534ca68955a7020b27fa98d2d379e953b9eab636401ce7dd775590793a1610754ac8195e05de2ee53993a2c521a0385046f11aef63b4466d603cb082f3792d1a2a4ea5a71ef8c855b4a317252ab4a6ede52e75a25b6949df2256e1acbd46f755db08845ff4e2f7eec6452b625a2e00bac5b8841c525d63722ab7b6efcf16accb54c1583eaee3c62745d89f7b84988c2cc44364ebd6be9bdbfbb7bf48bdef3e09fc7f8a2170ce977117925e23db7386b28b273758758106fc3f92f12ad083b0554b977659b68ebee78ec5fab9773e19eb1475a1a1eabc3acb36f118744680d633d8293f6f8ab622704ec2aec51c19c0eac5a76eea8faabdd7ef1ca7589118e93e6f3437a3dce5703c0001a491fe366c35113d7ef18fac1dfbbb00f71e6064ef52a84c33e760de381c9fd874135662106812e0b93d317a7a8f1fdb14f72b00bf6aa4eb773283ab90f48c1f8f4c3cb998a14797854eca063aa03dd1d415445066661c7da2398f16f7303f32eef5db9081da8d64b3d70c023f089dc8afc53844bffc3e116e033d448142b3f7606016d6b1648f92293b3cbccb33b95cec4f8242f7fcf22cbf277b2e8651a399184dc2f99aa2285029ca9b4cc61c0688b2e33ac424ad6e984f8b0b1267c5c55d89b14ca27f21c61efc1a440a3721d0d56ddc1ff40b870451bfef", 0x1000}], 0x2, &(0x7f0000005640)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r3, r3, r6, r3, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r5]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0xa0, 0x4000080}}, {{&(0x7f0000005700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005880)=[{&(0x7f0000005780)="9fe0404177ce2546ac6e693339befd4a17d620a6ca0b7ccaa0bf9756ff947cc6ab7b4784b190f6dc25c4970887921de1283c0d03a33e4a23397637e0d28b22293a9b0a8ae502ab13dac7ea1affc614534bf8078880a4295729d0710e8b80", 0x5e}, {&(0x7f0000005800)="11383b436bf5478bf80c0dad95bcb79764f4160884eeebf8579de8aa38d83040a80ea9a6455ff62b28c05bda2913a80d568bf7639baec4f96b9cd81ac7e72859c3294654d47e15649b744c672027113e61d34a7fc88a18eb1473434801e4bc137e4048c90c619104014d8ad2371342dbce99f1edfbfb0ddd770c1d", 0x7b}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="9392f2411003000000"], 0x18, 0xc010}}, {{&(0x7f0000005900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005a00)=[{&(0x7f0000005980)="f927af56d46af826cb32f97a04a12a840bc5f786b49b6d81c67bccf877502e2ad92e56cbb9c7a768ee58f4bb084229a47eda6b3e9b1184005a4b3845e1768b317fd9aee1a35156", 0x47}], 0x1, &(0x7f0000005c00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r1, r6, r4, r6, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0, 0x4000000}}], 0x5, 0x68040) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$inet(0x2, 0x6, 0x0) socket(0x10, 0x803, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) 1.398985395s ago: executing program 1 (id=760): socket$inet_mptcp(0x2, 0x1, 0x106) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000b80), 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x26da8e97, 0xffffffffffffffff}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) read(r3, &(0x7f0000000a40)=""/141, 0x8d) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x800, 0x0, 'syz0\x00', 0xa7d}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffffffffbfff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0f, 0x0, 0x0, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3e56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000001, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdir(&(0x7f0000000100)='./control\x00', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 499.919657ms ago: executing program 1 (id=761): openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x81, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0xfff1, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfe4b, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x58, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a9119", 0x6) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, 0x0) accept$alg(r6, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x248, 0xc0, 0x1b0, 0xc0, 0x248, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000022c0), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x8, 0x3, 0x1}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[], 0x1}}, @common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x1, @remote, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x1, 0x3}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_to_team\x00', 'caif0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x60}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x1, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffb, 0xffffffff}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "94dc", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904", @ANYBLOB="868f"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r9, &(0x7f0000000280)={0x2020}, 0x2020) 100.154633ms ago: executing program 0 (id=762): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='percpu_free_percpu\x00', r0}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75706461746520642b6661756c7420747275737465643a4207d5d73fd9b445d1631d28d9226d02c99a00"/52], 0x20, 0xfffffffffffffffd) (async, rerun: 64) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 64) creat(&(0x7f0000000280)='./file0\x00', 0x61) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 64) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 53.512879ms ago: executing program 2 (id=763): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xfffffffffffffea6) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000440)=""/125, 0x7d}], 0x2, &(0x7f00000004c0)=""/85, 0x55}, 0x4}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3ffffffffffffce, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000180)={'c6xdigio\x00', [0x4f27, 0x4, 0x100003, 0x2, 0x5, 0xcc9, 0x1, 0x7, 0x5, 0x0, 0xefb, 0x1000, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x81, 0x40000007, 0x99, 0xcaa7, 0x0, 0x7b71, 0x8, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000000540)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r9, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES64=r8], 0x68}, 0x1, 0x0, 0x0, 0xc0000}, 0x40080) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000441300"/20, @ANYRES32=0x0, @ANYRESDEC=r3], 0x5c}, 0x1, 0x0, 0x0, 0x6090}, 0x26040810) 0s ago: executing program 0 (id=764): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r3, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4}, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc7"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x10402, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x9}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_l2cap(r6, &(0x7f0000000300)={0x1f, 0x8757, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x1}, 0xe) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c20000000e577ca5a84f0800451000300080000000019078ac1e0001ac1414aa030090781206183f25fc00000067001c0007000064010101e000000292e380499d657807b1f372392d9e524f371a570efdf6bc3b4cdf5f1fad16732af7557840525d79bd502741c0a787ee07aa9953f06a5bf8562f344ba8946a78191ee5a0f66198a979151c778bf7f740e7d05262c8e07c0070e761760a2a76b4d63cfe3c8dbd169c534563ed6a8e86ab65f9425f4a72187a7a768686db4cbd95c10b72e3958644dace9528dd8635b58c2f9a5d66bc51f1de83a268b4c7a896fb8238c8ae0f6cb0a15e141621d70e6e93b7df27dedad37767ccc5c9c8cfa8c6943b2b7e13eb537d60d43be5dbedd10d6faf01e1d9f4abf089a8a161fda92bd3d6deee489038cd0b14787897cab752da47f16c35d2c8ab584b8a14112de543a58f"], 0x0) kernel console output (not intermixed with test programs): 180.403703][ T8749] lo speed is unknown, defaulting to 1000 [ 180.410817][ T8749] lo speed is unknown, defaulting to 1000 [ 180.417802][ T8749] lo speed is unknown, defaulting to 1000 [ 180.424772][ T8749] lo speed is unknown, defaulting to 1000 [ 180.433567][ T30] audit: type=1400 audit(1757445007.058:428): avc: denied { getopt } for pid=8752 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 180.755696][ T5861] usb 2-1: config index 0 descriptor too short (expected 249, got 27) [ 180.764719][ T5861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.775448][ T5861] usb 2-1: config 0 has no interfaces? [ 180.781090][ T5861] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 180.790368][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.803512][ T5861] usb 2-1: config 0 descriptor?? [ 181.814185][ T8773] lo speed is unknown, defaulting to 1000 [ 182.709469][ T30] audit: type=1400 audit(1757445009.378:429): avc: denied { module_request } for pid=8843 comm="syz.3.408" kmod="net-pf-10-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 182.732174][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.764147][ T8851] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 182.897679][ T8857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'. [ 183.081497][ T6018] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 183.515465][ T6018] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.527232][ T6018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.569444][ T6018] usb 1-1: Product: syz [ 183.583934][ T6018] usb 1-1: Manufacturer: syz [ 183.598698][ T6018] usb 1-1: SerialNumber: syz [ 183.619608][ T6018] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 183.672458][ T30] audit: type=1400 audit(1757445010.338:430): avc: denied { firmware_load } for pid=5861 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 183.698473][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.040556][ T8863] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.135856][ T5929] usb 2-1: USB disconnect, device number 20 [ 184.153803][ T5861] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.799452][ T5929] usb 1-1: USB disconnect, device number 25 [ 184.940049][ T1206] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 185.196777][ T1206] usb 2-1: Using ep0 maxpacket: 16 [ 185.210068][ T5861] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 185.220154][ T5861] ath9k_htc: Failed to initialize the device [ 185.221941][ T1206] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.430369][ T30] audit: type=1400 audit(1757445011.968:431): avc: denied { ioctl } for pid=8906 comm="syz.3.417" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 185.456364][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.634367][ T5929] usb 1-1: ath9k_htc: USB layer deinitialized [ 185.640631][ T1206] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.651229][ T1206] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.658991][ T1206] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 185.668111][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.680458][ T1206] usb 2-1: config 0 descriptor?? [ 185.785008][ T30] audit: type=1400 audit(1757445012.078:432): avc: denied { name_connect } for pid=8906 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 185.838873][ T30] audit: type=1400 audit(1757445012.098:433): avc: denied { listen } for pid=8906 comm="syz.3.417" lport=48918 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.318746][ T1206] hid (null): invalid report_size 34040 [ 186.338231][ T1206] hid (null): unknown global tag 0xc [ 186.347723][ T30] audit: type=1400 audit(1757445013.008:434): avc: denied { connect } for pid=8944 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.379088][ T6060] tipc: Subscription rejected, illegal request [ 186.390288][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.398964][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.407063][ T1206] hid (null): unknown global tag 0xde [ 186.432788][ T1206] hid (null): bogus close delimiter [ 186.438096][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 186.452282][ T30] audit: type=1400 audit(1757445013.088:435): avc: denied { setopt } for pid=8944 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 186.481764][ T1206] hid (null): invalid report_count -723372659 [ 186.495843][ T1206] hid_parser_main: 72 callbacks suppressed [ 186.495860][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.521308][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.528275][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.535978][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.544335][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.564427][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.598434][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.605546][ T30] audit: type=1400 audit(1757445013.268:436): avc: denied { mount } for pid=8944 comm="syz.3.421" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 186.634403][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.650305][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.665306][ T1206] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 186.820759][ T1206] cougar 0003:060B:500A.000C: unexpected long global item [ 186.828359][ T1206] cougar 0003:060B:500A.000C: parse failed [ 186.834449][ T1206] cougar 0003:060B:500A.000C: probe with driver cougar failed with error -22 [ 186.849114][ T1206] usb 2-1: USB disconnect, device number 21 [ 187.667677][ T30] audit: type=1400 audit(1757445014.298:437): avc: denied { connect } for pid=8982 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.064316][ T8994] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 188.098426][ T8994] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 188.154026][ T8974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.166123][ T8974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.180751][ T8999] syz.0.428: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 188.299924][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.0.428 Not tainted syzkaller #0 PREEMPT(full) [ 188.299946][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.299955][ T8999] Call Trace: [ 188.299959][ T8999] [ 188.299963][ T8999] dump_stack_lvl+0x16c/0x1f0 [ 188.299981][ T8999] warn_alloc+0x248/0x3a0 [ 188.299995][ T8999] ? __pfx_warn_alloc+0x10/0x10 [ 188.300010][ T8999] ? __vcalloc_noprof+0x4d/0x80 [ 188.300022][ T8999] ? __vmalloc_node_noprof+0xad/0xf0 [ 188.300039][ T8999] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 188.300054][ T8999] ? __pfx___mutex_trylock_common+0x10/0x10 [ 188.300075][ T8999] ? __vcalloc_noprof+0x4d/0x80 [ 188.300089][ T8999] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.300105][ T8999] ? __pfx___mutex_lock+0x10/0x10 [ 188.300122][ T8999] ? __vcalloc_noprof+0x4d/0x80 [ 188.300132][ T8999] __vmalloc_node_noprof+0xad/0xf0 [ 188.300147][ T8999] ? __vcalloc_noprof+0x4d/0x80 [ 188.300159][ T8999] __vcalloc_noprof+0x4d/0x80 [ 188.300171][ T8999] kvm_set_memslot+0xee3/0x1380 [ 188.300187][ T8999] ? kasan_save_track+0x14/0x30 [ 188.300199][ T8999] kvm_set_memory_region+0xebc/0x1680 [ 188.300218][ T8999] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 188.300238][ T8999] kvm_vm_ioctl+0x151b/0x4000 [ 188.300253][ T8999] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 188.300272][ T8999] ? kasan_quarantine_put+0x10a/0x240 [ 188.300282][ T8999] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.300296][ T8999] ? find_held_lock+0x2b/0x80 [ 188.300308][ T8999] ? tomoyo_path_number_perm+0x295/0x580 [ 188.300325][ T8999] ? tomoyo_path_number_perm+0x18d/0x580 [ 188.300339][ T8999] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 188.300352][ T8999] ? futex_wake+0x1ad/0x530 [ 188.300367][ T8999] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.300388][ T8999] ? hook_file_ioctl_common+0x145/0x410 [ 188.300402][ T8999] ? selinux_file_ioctl+0x180/0x270 [ 188.300416][ T8999] ? selinux_file_ioctl+0xb4/0x270 [ 188.300431][ T8999] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 188.300442][ T8999] __x64_sys_ioctl+0x18b/0x210 [ 188.300468][ T8999] do_syscall_64+0xcd/0x4c0 [ 188.300492][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.300503][ T8999] RIP: 0033:0x7fea6078ebe9 [ 188.300512][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.300522][ T8999] RSP: 002b:00007fea61668038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.300532][ T8999] RAX: ffffffffffffffda RBX: 00007fea609c6090 RCX: 00007fea6078ebe9 [ 188.300538][ T8999] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000006 [ 188.300544][ T8999] RBP: 00007fea60811e19 R08: 0000000000000000 R09: 0000000000000000 [ 188.300550][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.300556][ T8999] R13: 00007fea609c6128 R14: 00007fea609c6090 R15: 00007ffde67a0588 [ 188.300569][ T8999] [ 188.300579][ T8999] Mem-Info: [ 188.647186][ T8999] active_anon:8880 inactive_anon:0 isolated_anon:0 [ 188.647186][ T8999] active_file:4472 inactive_file:49941 isolated_file:0 [ 188.647186][ T8999] unevictable:2817 dirty:255 writeback:0 [ 188.647186][ T8999] slab_reclaimable:12072 slab_unreclaimable:105245 [ 188.647186][ T8999] mapped:31723 shmem:1359 pagetables:1215 [ 188.647186][ T8999] sec_pagetables:0 bounce:0 [ 188.647186][ T8999] kernel_misc_reclaimable:0 [ 188.647186][ T8999] free:1295464 free_pcp:14341 free_cma:0 [ 188.692541][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.704976][ T8999] Node 0 active_anon:35520kB inactive_anon:0kB active_file:17888kB inactive_file:199560kB unevictable:9732kB isolated(anon):0kB isolated(file):0kB mapped:126892kB dirty:1020kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12456kB pagetables:4732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.736844][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.770347][ T8999] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.803160][ T8999] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.809935][ T5861] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 188.831939][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.835809][ T8999] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 188.857019][ T8999] Node 0 DMA32 free:1273216kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35492kB inactive_anon:0kB active_file:17888kB inactive_file:198248kB unevictable:9732kB writepending:1020kB present:3129332kB managed:2539340kB mlocked:8196kB bounce:0kB free_pcp:39260kB local_pcp:15328kB free_cma:0kB [ 188.889944][ T5964] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 188.921346][ T8999] lowmem_reserve[]: 0 0 1 1 1 [ 188.926107][ T8999] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 188.956584][ T8999] lowmem_reserve[]: 0 0 0 0 0 [ 188.961921][ T8999] Node 1 Normal free:3893292kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18880kB local_pcp:6016kB free_cma:0kB [ 188.999128][ T8999] lowmem_reserve[]: 0 0 0 0 0 [ 189.004523][ T5861] usb 2-1: device descriptor read/64, error -71 [ 189.007546][ T8999] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 189.020503][ T5964] usb 4-1: device descriptor read/64, error -71 [ 189.027040][ T8999] Node 0 DMA32: 1724*4kB (UME) 942*8kB (UM) 324*16kB (UM) 137*32kB (ME) 83*64kB (UME) 110*128kB (UME) 74*256kB (M) 19*512kB (UM) 13*1024kB (UME) 10*2048kB (UME) 285*4096kB (UM) = 1273216kB [ 189.060018][ T8999] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 189.074229][ T8999] Node 1 Normal: 167*4kB (UE) 46*8kB (UME) 38*16kB (UME) 64*32kB (UME) 27*64kB (UME) 6*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3893292kB [ 189.094743][ T8999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.104597][ T8999] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 189.118987][ T8999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.132195][ T8999] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 189.144141][ T8999] 55769 total pagecache pages [ 189.148807][ T8999] 0 pages in swap cache [ 189.153295][ T8999] Free swap = 124996kB [ 189.157487][ T8999] Total swap = 124996kB [ 189.162947][ T8999] 2097051 pages RAM [ 189.167893][ T8999] 0 pages HighMem/MovableOnly [ 189.173951][ T8999] 430254 pages reserved [ 189.178217][ T8999] 0 pages cma reserved [ 189.250726][ T5861] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 189.300037][ T5964] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 189.364046][ T30] audit: type=1400 audit(1757445016.038:438): avc: denied { write } for pid=9016 comm="syz.0.430" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 189.389907][ T5861] usb 2-1: device descriptor read/64, error -71 [ 189.424480][ T30] audit: type=1400 audit(1757445016.038:439): avc: denied { open } for pid=9016 comm="syz.0.430" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 189.439947][ T5964] usb 4-1: device descriptor read/64, error -71 [ 189.450372][ T30] audit: type=1400 audit(1757445016.088:440): avc: denied { mounton } for pid=9016 comm="syz.0.430" path="/syzcgroup/net/syz0/cgroup.procs" dev="cgroup" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 189.484731][ T5908] kernel read not supported for file /input/event1 (pid: 5908 comm: kworker/1:3) [ 189.626431][ T5964] usb usb4-port1: attempt power cycle [ 189.632658][ T5861] usb usb2-port1: attempt power cycle [ 190.362469][ T5964] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 190.401093][ T5964] usb 4-1: device descriptor read/8, error -71 [ 190.449420][ T5861] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 190.494151][ T5861] usb 2-1: device descriptor read/8, error -71 [ 190.681755][ T30] audit: type=1400 audit(1757445017.348:441): avc: denied { accept } for pid=9037 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.719977][ T5964] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 190.739939][ T5861] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 190.748180][ T5964] usb 4-1: device descriptor read/8, error -71 [ 190.770404][ T5861] usb 2-1: device descriptor read/8, error -71 [ 190.861271][ T5964] usb usb4-port1: unable to enumerate USB device [ 190.881312][ T5861] usb usb2-port1: unable to enumerate USB device [ 191.276807][ T9046] ipvlan2: entered promiscuous mode [ 191.430826][ T9051] netlink: 'syz.1.435': attribute type 21 has an invalid length. [ 191.438628][ T9051] netlink: 156 bytes leftover after parsing attributes in process `syz.1.435'. [ 192.533314][ T30] audit: type=1400 audit(1757445019.208:442): avc: denied { name_bind } for pid=9066 comm="syz.0.438" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 192.719375][ T5964] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 193.110324][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 193.117984][ T5964] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 193.129187][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.140152][ T5964] usb 3-1: Product: syz [ 193.144296][ T5964] usb 3-1: Manufacturer: syz [ 193.176183][ T5964] usb 3-1: SerialNumber: syz [ 193.194708][ T5964] usb 3-1: config 0 descriptor?? [ 193.230228][ T7882] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 193.424355][ T5964] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.460118][ T7882] usb 1-1: Using ep0 maxpacket: 16 [ 193.469014][ T7882] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 193.486868][ T7882] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 193.496725][ T7882] usb 1-1: New USB device found, idVendor=134c, idProduct=0004, bcdDevice=29.97 [ 193.511322][ T7882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.860579][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.867071][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.967790][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.010885][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.081796][ T5901] usb 1-1: USB disconnect, device number 26 [ 194.563416][ T5964] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 194.732826][ T5964] usb 3-1: USB disconnect, device number 29 [ 194.847132][ T9136] netlink: 256 bytes leftover after parsing attributes in process `syz.0.447'. [ 196.828809][ T30] audit: type=1400 audit(1757445023.498:443): avc: denied { append } for pid=9152 comm="syz.3.451" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.093161][ T6057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.243599][ T30] audit: type=1400 audit(1757445023.798:444): avc: denied { setopt } for pid=9152 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.320645][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.332367][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.339924][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.347475][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.354884][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.365664][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.372917][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.380322][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.387772][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.395229][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.433299][ T6057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.895453][ T6057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.418835][ T9169] lo speed is unknown, defaulting to 1000 [ 198.478516][ T6057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.718617][ T30] audit: type=1400 audit(1757445025.378:445): avc: denied { setattr } for pid=9211 comm="syz.0.457" path="socket:[17391]" dev="sockfs" ino=17391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.743031][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.430899][ T30] audit: type=1400 audit(1757445026.098:446): avc: denied { create } for pid=9262 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 199.689595][ T9245] mkiss: ax0: crc mode is auto. [ 199.702232][ T5852] Bluetooth: hci2: command tx timeout [ 199.710782][ T5929] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 199.818993][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 199.907729][ T6057] bridge_slave_1: left allmulticast mode [ 199.914310][ T6057] bridge_slave_1: left promiscuous mode [ 199.920944][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.979991][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 200.093008][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.108998][ T6057] bridge_slave_0: left allmulticast mode [ 200.565958][ T6057] bridge_slave_0: left promiscuous mode [ 200.575417][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.610392][ T5929] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.642531][ T30] audit: type=1400 audit(1757445027.308:447): avc: denied { getopt } for pid=9347 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.642720][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.712558][ T30] audit: type=1400 audit(1757445027.358:448): avc: denied { create } for pid=9347 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 200.770033][ T5929] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 200.789597][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.829258][ T5929] usb 3-1: config 0 descriptor?? [ 200.869090][ T5929] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 200.999923][ T5915] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 201.169898][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 201.201116][ T5915] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.210439][ T5915] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 201.219624][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.230423][ T5915] usb 4-1: config 0 descriptor?? [ 201.379075][ T9369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.447482][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.492213][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.522442][ T6057] bond0 (unregistering): Released all slaves [ 201.547452][ T9359] bridge_slave_0: left allmulticast mode [ 201.556014][ T9359] bridge_slave_0: left promiscuous mode [ 201.564411][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.577876][ T9359] bridge_slave_1: left allmulticast mode [ 201.585471][ T9359] bridge_slave_1: left promiscuous mode [ 201.634025][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.647546][ T9359] bond0: (slave bond_slave_0): Releasing backup interface [ 201.657171][ T9359] bond0: (slave bond_slave_1): Releasing backup interface [ 201.670440][ T9359] team0: Port device team_slave_0 removed [ 201.678662][ T9359] team0: Port device team_slave_1 removed [ 201.685980][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.696081][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.704313][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.709894][ T6018] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 201.711963][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.744326][ T9360] team0: Mode changed to "loadbalance" [ 201.758413][ T6057] tipc: Left network mode [ 201.770641][ T5852] Bluetooth: hci2: command tx timeout [ 201.872952][ T6018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.886640][ T6018] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 201.897687][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.905512][ T6018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.913865][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.923213][ T9169] bridge_slave_0: entered allmulticast mode [ 201.931349][ T9169] bridge_slave_0: entered promiscuous mode [ 201.937987][ T6018] usb 2-1: config 0 descriptor?? [ 201.968064][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.985010][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.993305][ T9169] bridge_slave_1: entered allmulticast mode [ 202.001464][ T9169] bridge_slave_1: entered promiscuous mode [ 202.074159][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.120996][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.194634][ T9169] team0: Port device team_slave_0 added [ 202.211082][ T30] audit: type=1400 audit(1757445028.888:449): avc: denied { read write } for pid=9352 comm="syz.3.463" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 202.239465][ T30] audit: type=1400 audit(1757445028.888:450): avc: denied { open } for pid=9352 comm="syz.3.463" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 202.263479][ T30] audit: type=1400 audit(1757445028.888:451): avc: denied { ioctl } for pid=9352 comm="syz.3.463" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 202.343993][ T9169] team0: Port device team_slave_1 added [ 202.365203][ T6018] pantherlord 0003:0810:0001.000D: item fetching failed at offset 5/7 [ 202.393233][ T30] audit: type=1400 audit(1757445028.888:452): avc: denied { map } for pid=9352 comm="syz.3.463" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 202.424538][ T6018] pantherlord 0003:0810:0001.000D: parse failed [ 202.442101][ T6018] pantherlord 0003:0810:0001.000D: probe with driver pantherlord failed with error -22 [ 202.508279][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.525932][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.575615][ T6018] usb 2-1: USB disconnect, device number 26 [ 202.586482][ T30] audit: type=1400 audit(1757445029.238:453): avc: denied { append } for pid=9367 comm="syz.1.464" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 202.599851][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.640020][ T30] audit: type=1400 audit(1757445029.308:454): avc: denied { connect } for pid=9514 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 202.941514][ T30] audit: type=1400 audit(1757445029.358:455): avc: denied { write } for pid=9514 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.036063][ T5929] usb 3-1: USB disconnect, device number 30 [ 203.111201][ T6057] hsr_slave_0: left promiscuous mode [ 203.175895][ T6057] hsr_slave_1: left promiscuous mode [ 203.176318][ T30] audit: type=1400 audit(1757445029.848:456): avc: denied { remount } for pid=9352 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.187336][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.253152][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.268805][ T9566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.466'. [ 203.291334][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.298866][ T9566] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.307766][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.366964][ T6057] veth1_macvtap: left promiscuous mode [ 203.388977][ T30] audit: type=1400 audit(1757445030.058:457): avc: denied { read } for pid=9564 comm="syz.2.466" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 203.422094][ T6057] veth0_macvtap: left promiscuous mode [ 203.429314][ T30] audit: type=1400 audit(1757445030.058:458): avc: denied { open } for pid=9564 comm="syz.2.466" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 203.433650][ T6057] veth1_vlan: left promiscuous mode [ 203.453283][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.467166][ T9566] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.501557][ T5915] hid_parser_main: 72 callbacks suppressed [ 203.501574][ T5915] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 203.538137][ T5915] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.550025][ T6057] veth0_vlan: left promiscuous mode [ 203.850755][ T5852] Bluetooth: hci2: command tx timeout [ 203.970011][ T5964] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 204.316352][ T5964] usb 3-1: config 0 has an invalid interface number: 158 but max is 0 [ 204.325793][ T5964] usb 3-1: config 0 has no interface number 0 [ 204.339215][ T5964] usb 3-1: config 0 interface 158 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 204.350755][ T5964] usb 3-1: config 0 interface 158 has no altsetting 0 [ 204.351076][ T5915] usb 4-1: USB disconnect, device number 37 [ 204.362852][ T5964] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= e.8c [ 204.381834][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.398180][ T5964] usb 3-1: Product: syz [ 204.418212][ T5964] usb 3-1: Manufacturer: syz [ 204.444148][ T5964] usb 3-1: SerialNumber: syz [ 204.459703][ T5964] usb 3-1: config 0 descriptor?? [ 204.816472][ T9614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.837090][ T9614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.864583][ T6057] team0 (unregistering): Port device team_slave_1 removed [ 204.964365][ T6057] team0 (unregistering): Port device team_slave_0 removed [ 205.930074][ T5852] Bluetooth: hci2: command tx timeout [ 205.976645][ T9631] could not allocate digest TFM handle hmac(sha1-neon) [ 206.337596][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.365685][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.397673][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.445807][ T5964] usb 3-1: USB disconnect, device number 31 [ 206.824039][ T9169] hsr_slave_0: entered promiscuous mode [ 206.835707][ T9169] hsr_slave_1: entered promiscuous mode [ 206.848259][ T9169] debugfs: 'hsr0' already exists in 'hsr' [ 206.855722][ T9169] Cannot create hsr debugfs directory [ 206.978415][ T9696] dlm: no local IP address has been set [ 206.987048][ T9696] dlm: cannot start dlm midcomms -107 [ 209.480331][ T9790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 209.557196][ T9791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.575524][ T9791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.664107][ T9791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.722250][ T9791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.840650][ T30] audit: type=1400 audit(1757445036.498:459): avc: denied { getattr } for pid=9801 comm="syz.0.483" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 210.428335][ T6057] IPVS: stop unused estimator thread 0... [ 210.799271][ T9169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.674404][ T9169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.832706][ T9169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.906088][ T9169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.929916][ T30] audit: type=1400 audit(1757445038.598:460): avc: denied { write } for pid=9801 comm="syz.0.483" path="socket:[19638]" dev="sockfs" ino=19638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.115151][ T30] audit: type=1400 audit(1757445038.788:461): avc: denied { create } for pid=9871 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.186971][ T30] audit: type=1400 audit(1757445038.838:462): avc: denied { name_bind } for pid=9853 comm="syz.3.490" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 212.223728][ T9877] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 212.542410][ T9877] UDF-fs: Scanning with blocksize 512 failed [ 212.548651][ T9877] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 212.613145][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.628743][ T9877] UDF-fs: Scanning with blocksize 1024 failed [ 212.635162][ T9877] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 212.643555][ T9877] UDF-fs: Scanning with blocksize 2048 failed [ 212.674370][ T9877] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 212.696944][ T9879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.726363][ T30] audit: type=1400 audit(1757445039.298:463): avc: denied { listen } for pid=9876 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.731230][ T9877] UDF-fs: Scanning with blocksize 4096 failed [ 212.855247][ T30] audit: type=1400 audit(1757445039.298:464): avc: denied { setopt } for pid=9876 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.156810][ T30] audit: type=1400 audit(1757445039.808:465): avc: denied { write } for pid=9871 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.196263][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.226441][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.234161][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.347815][ T30] audit: type=1400 audit(1757445039.808:466): avc: denied { nlmsg_write } for pid=9871 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.370577][ T30] audit: type=1400 audit(1757445039.938:467): avc: denied { execmem } for pid=9888 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 213.902389][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.909476][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.962624][ T9169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.004788][ T9169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.201759][ T30] audit: type=1400 audit(1757445040.878:468): avc: denied { write } for pid=9909 comm="syz.0.496" lport=39281 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 214.337699][ T1206] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 214.521217][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.528023][ T9933] syz_tun: entered allmulticast mode [ 214.548167][ T9933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'. [ 214.549898][ T1206] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 214.605043][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.620027][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.632178][ T9931] syz_tun: left allmulticast mode [ 214.642210][ T1206] usb 4-1: config 0 descriptor?? [ 214.662575][ T1206] usbhid 4-1:0.0: can't add hid device: -22 [ 214.668541][ T1206] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 215.570870][ T9961] netlink: 56 bytes leftover after parsing attributes in process `syz.0.501'. [ 215.638284][ T9966] can0: slcan on ttyS3. [ 217.127111][ T9985] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 217.146890][ T9966] can0 (unregistered): slcan off ttyS3. [ 217.158926][ T9966] Falling back ldisc for ttyS3. [ 217.305925][ T9169] veth0_vlan: entered promiscuous mode [ 217.339482][ T9169] veth1_vlan: entered promiscuous mode [ 217.359971][ T5964] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 217.454809][ T9169] veth0_macvtap: entered promiscuous mode [ 217.507012][ T9169] veth1_macvtap: entered promiscuous mode [ 217.611109][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 217.620580][ T5964] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 193, changing to 7 [ 217.632317][ T5964] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid maxpacket 18038, setting to 1024 [ 217.653988][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.661401][ T5964] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 217.676792][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.711653][ T5964] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.743435][ T6057] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.756877][ T5964] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 217.811529][ T6057] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.832981][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.848753][ T6057] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.866946][ T5964] usb 3-1: config 0 descriptor?? [ 217.876598][ T6057] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.319201][ T5861] usb 4-1: USB disconnect, device number 38 [ 218.387984][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.420425][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.050589][ T30] audit: type=1400 audit(1757445045.648:469): avc: denied { bind } for pid=10013 comm="syz.3.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 219.133072][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.151548][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.653088][ T30] audit: type=1400 audit(1757445046.328:470): avc: denied { mounton } for pid=9169 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 219.955253][T10038] bridge1: entered promiscuous mode [ 220.151168][ T5964] usbhid 3-1:0.0: can't add hid device: -71 [ 220.157801][ T5964] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 220.173033][ T5964] usb 3-1: USB disconnect, device number 32 [ 221.311988][T10068] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 222.421354][T10075] 9pnet_fd: Insufficient options for proto=fd [ 222.680929][T10094] netlink: 68 bytes leftover after parsing attributes in process `syz.5.516'. [ 222.972009][T10137] lo speed is unknown, defaulting to 1000 [ 224.310420][ T30] audit: type=1400 audit(1757445050.908:471): avc: denied { shutdown } for pid=10091 comm="syz.5.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.294795][T10216] netlink: 'syz.3.517': attribute type 21 has an invalid length. [ 225.302682][T10216] netlink: 128 bytes leftover after parsing attributes in process `syz.3.517'. [ 225.373081][T10231] batadv0: entered promiscuous mode [ 225.381702][T10231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.489917][ T1206] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 225.521202][T10216] netlink: 'syz.3.517': attribute type 4 has an invalid length. [ 225.552159][T10216] netlink: 3 bytes leftover after parsing attributes in process `syz.3.517'. [ 225.670704][ T1206] usb 1-1: device descriptor read/64, error -71 [ 225.680175][ T5964] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 225.859907][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 225.930117][ T1206] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 225.958660][ T5964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.969317][ T5964] usb 2-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 225.988953][ T5964] usb 2-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64 [ 226.009916][ T5964] usb 2-1: config 1 interface 0 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.043597][ T5964] usb 2-1: config 1 interface 0 has no altsetting 0 [ 226.060296][ T1206] usb 1-1: device descriptor read/64, error -71 [ 226.061692][ T5964] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 226.075833][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.079870][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 226.084055][ T5964] usb 2-1: Product: syz [ 226.095498][ T5964] usb 2-1: Manufacturer: syz [ 226.105610][ T5964] usb 2-1: SerialNumber: syz [ 226.126481][T10223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 226.251177][ T1206] usb usb1-port1: attempt power cycle [ 226.269924][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 226.299929][ T5915] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 226.336828][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.356991][ T5964] usb 2-1: USB disconnect, device number 27 [ 226.474092][ T5915] pvrusb2: Hardware description: Terratec Grabster AV400 [ 226.496167][ T5915] pvrusb2: ********** [ 226.505844][ T5915] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 226.521847][ T5915] pvrusb2: Important functionality might not be entirely working. [ 226.529647][ T5915] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 226.552157][ T5915] pvrusb2: ********** [ 226.789905][ T1206] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 227.090597][ T1206] usb 1-1: device descriptor read/8, error -71 [ 227.146365][ T30] audit: type=1804 audit(1757445053.818:472): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.520" name="/newroot/3/file1" dev="fuse" ino=1 res=1 errno=0 [ 227.184709][ T2334] pvrusb2: Invalid write control endpoint [ 227.235621][ T2334] pvrusb2: Invalid write control endpoint [ 227.262433][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 227.274130][ T30] audit: type=1800 audit(1757445053.818:473): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.520" name="/" dev="fuse" ino=1 res=0 errno=0 [ 227.321140][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 227.370031][ T1206] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 227.434351][ T6018] usb 6-1: USB disconnect, device number 2 [ 227.481708][ T1206] usb 1-1: device descriptor read/8, error -71 [ 227.489918][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 227.527281][ T30] audit: type=1800 audit(1757445053.818:474): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.520" name="/" dev="fuse" ino=1 res=0 errno=0 [ 227.620065][ T2334] pvrusb2: Device being rendered inoperable [ 227.650994][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 227.672716][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 227.708167][ T2334] pvrusb2: Attached sub-driver cx25840 [ 227.725369][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 227.874501][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 227.959941][ T1206] usb usb1-port1: unable to enumerate USB device [ 228.469032][T10391] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.527'. [ 228.478397][ T30] audit: type=1400 audit(1757445055.138:475): avc: denied { ioctl } for pid=10377 comm="syz.5.527" path="socket:[20543]" dev="sockfs" ino=20543 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.639965][ T5929] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 228.680193][ T5964] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 228.849905][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 228.862315][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 228.863825][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.878005][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.887786][ T5964] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 228.896274][ T5964] usb 3-1: config 0 has no interface number 0 [ 228.907863][ T5964] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 228.916166][ T5929] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.922397][ T5964] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 228.928395][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.937508][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.962451][ T5929] usb 1-1: Product: syz [ 228.969914][ T5929] usb 1-1: Manufacturer: syz [ 228.976831][ T5964] usb 3-1: Product: syz [ 228.980678][ T5929] usb 1-1: SerialNumber: syz [ 228.992214][ T5964] usb 3-1: Manufacturer: syz [ 229.000449][ T5964] usb 3-1: SerialNumber: syz [ 229.014354][ T5964] usb 3-1: config 0 descriptor?? [ 229.407082][ T5929] usb 1-1: 0:2 : does not exist [ 229.826854][T10375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.840110][T10375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.871007][ T5929] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 229.948520][ T5929] usb 1-1: USB disconnect, device number 31 [ 230.017500][T10195] udevd[10195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.344580][ T5964] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 230.409324][ T5964] usb 3-1: USB disconnect, device number 33 [ 230.445531][T10431] binder: 10427:10431 ioctl c0306201 200000000080 returned -14 [ 230.498578][T10441] binder: BINDER_SET_CONTEXT_MGR already set [ 230.542263][T10441] binder: 10427:10441 ioctl 4018620d 200000000040 returned -16 [ 231.199934][ T30] audit: type=1400 audit(1757445057.838:476): avc: denied { setopt } for pid=10442 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.618544][ T30] audit: type=1400 audit(1757445057.838:477): avc: denied { read } for pid=10442 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.015214][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 232.042923][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 232.118686][ T30] audit: type=1400 audit(1757445058.788:478): avc: denied { wake_alarm } for pid=10472 comm="syz.1.535" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 232.183890][T10481] lo speed is unknown, defaulting to 1000 [ 232.309951][ T5915] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 232.851904][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 232.865928][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.875655][ T5915] usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 232.892831][ T5915] usb 1-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64 [ 232.899977][ T5901] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 232.909854][ T5915] usb 1-1: config 1 interface 0 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.933443][ T5915] usb 1-1: config 1 interface 0 has no altsetting 0 [ 232.952860][ T30] audit: type=1400 audit(1757445059.628:479): avc: denied { nlmsg_write } for pid=10479 comm="syz.5.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 232.955353][ T5915] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.069614][ T30] audit: type=1400 audit(1757445059.718:480): avc: denied { audit_write } for pid=10479 comm="syz.5.537" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 233.123443][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.141224][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 233.166612][ T30] audit: type=1107 audit(1757445059.718:481): pid=10479 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 233.176996][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.278512][ T5915] usb 1-1: Product: syz [ 233.278531][ T5915] usb 1-1: Manufacturer: syz [ 233.278544][ T5915] usb 1-1: SerialNumber: syz [ 233.292393][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 233.303834][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 233.314081][T10467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.373858][ T5901] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 233.385576][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.410198][ T5901] usb 2-1: Product: syz [ 233.529369][ T5901] usb 2-1: Manufacturer: syz [ 233.534234][ T5901] usb 2-1: SerialNumber: syz [ 233.550116][ T5901] usb 2-1: config 0 descriptor?? [ 233.633528][T10540] ubi31: attaching mtd0 [ 233.646629][T10540] ubi31: scanning is finished [ 233.651638][T10540] ubi31: empty MTD device detected [ 234.047295][ T5901] adutux 2-1:0.0: Could not retrieve serial number [ 234.056421][ T5915] usb 1-1: USB disconnect, device number 32 [ 234.075012][ T5901] adutux 2-1:0.0: probe with driver adutux failed with error -5 [ 234.119083][T10540] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 234.126892][T10540] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 234.134238][T10540] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 234.141318][T10540] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 234.148743][T10540] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 234.155575][T10540] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 234.163627][T10540] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3740846203 [ 234.173669][T10540] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 234.195515][T10546] ubi31: background thread "ubi_bgt31d" started, PID 10546 [ 234.311973][T10485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.346762][T10485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.419135][T10485] netlink: 60 bytes leftover after parsing attributes in process `syz.1.535'. [ 234.540407][T10562] input: syz1 as /devices/virtual/input/input11 [ 234.557221][T10562] input: failed to attach handler leds to device input11, error: -6 [ 234.746399][T10560] SELinux: policydb string ù does not match my string SE Linux [ 234.819940][T10560] SELinux: failed to load policy [ 234.856870][ T30] audit: type=1400 audit(1757445061.528:482): avc: denied { execute } for pid=10558 comm="syz.2.542" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 234.977097][T10560] tmpfs: Unknown parameter 'nr_inodes8' [ 235.268237][T10591] ipvlan2: entered allmulticast mode [ 235.295632][T10591] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 235.549001][ T1206] usb 2-1: USB disconnect, device number 28 [ 235.719957][ T30] audit: type=1400 audit(1757445062.368:483): avc: denied { map } for pid=10618 comm="syz.0.550" path="socket:[20826]" dev="sockfs" ino=20826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 236.339928][ T5915] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 236.640513][ T5915] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 236.909875][ T5915] usb 6-1: config 0 has no interface number 0 [ 236.915989][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.149913][ T5915] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 237.169883][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 237.718670][ T5915] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 237.733248][ T5915] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 237.744065][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.758616][ T5915] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.767654][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.779785][ T5915] usb 6-1: config 0 descriptor?? [ 237.785544][T10624] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.950141][T10624] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 238.693355][ T5915] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 238.826882][ T5915] usb 6-1: USB disconnect, device number 3 [ 239.190076][T10636] Set syz1 is full, maxelem 65536 reached [ 239.277851][ T5915] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 239.426535][ T30] audit: type=1400 audit(1757445066.098:484): avc: denied { getopt } for pid=10668 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 239.588122][ T30] audit: type=1400 audit(1757445066.098:485): avc: denied { ioctl } for pid=10671 comm="syz.5.555" path="socket:[20839]" dev="sockfs" ino=20839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 239.651285][ T30] audit: type=1400 audit(1757445066.148:486): avc: denied { mount } for pid=10672 comm="syz.1.554" name="/" dev="hugetlbfs" ino=20842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 239.775957][ T30] audit: type=1400 audit(1757445066.448:487): avc: denied { mount } for pid=10694 comm="syz.2.557" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 239.825978][ T5915] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 239.842734][T10701] lo speed is unknown, defaulting to 1000 [ 239.890482][ T5964] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 240.001966][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.014321][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.024245][ T5915] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 240.039991][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.040016][ T5964] usb 1-1: Using ep0 maxpacket: 8 [ 240.053226][ T6018] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 240.056972][ T5915] usb 6-1: config 0 descriptor?? [ 240.077273][ T5964] usb 1-1: config 5 has an invalid interface number: 52 but max is 1 [ 240.095952][ T5964] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 240.121747][ T5964] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 240.135633][ T5964] usb 1-1: config 5 has no interface number 0 [ 240.156656][ T5964] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 240.184194][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.196222][ T5964] usb 1-1: Product: syz [ 240.201036][ T5964] usb 1-1: Manufacturer: syz [ 240.205855][ T5964] usb 1-1: SerialNumber: syz [ 240.363693][ T6018] usb 3-1: Using ep0 maxpacket: 16 [ 240.370782][ T6018] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.391236][ T6018] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 240.401082][ T6018] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.416899][ T6018] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 240.429135][ T6018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.449942][ T30] audit: type=1400 audit(1757445067.108:488): avc: granted { setsecparam } for pid=10683 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 240.471269][ T5964] cytherm 1-1:5.52: Cypress thermometer device now attached [ 240.492120][ T6018] usb 3-1: Product: syz [ 240.496284][ T6018] usb 3-1: Manufacturer: syz [ 240.511508][ T5964] usb 1-1: USB disconnect, device number 33 [ 240.518021][ T5964] cytherm 1-1:5.52: Cypress thermometer now disconnected [ 240.540190][ T6018] usb 3-1: SerialNumber: syz [ 240.580496][T10695] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 240.593547][ T30] audit: type=1400 audit(1757445067.108:489): avc: granted { setsecparam } for pid=10683 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 240.730454][ T30] audit: type=1400 audit(1757445067.368:490): avc: denied { execute } for pid=10728 comm="syz.3.559" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.798012][ T5915] usbhid 6-1:0.0: can't add hid device: -71 [ 240.835170][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 240.891856][T10695] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 240.919638][ T30] audit: type=1400 audit(1757445067.548:491): avc: denied { execute } for pid=10694 comm="syz.2.557" name="file0" dev="ramfs" ino=20882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 240.979983][ T5915] usb 6-1: USB disconnect, device number 4 [ 241.105220][T10786] bond1: (slave geneve2): making interface the new active one [ 241.180608][T10786] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 241.241477][ T2944] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 241.310009][ T30] audit: type=1400 audit(1757445067.548:492): avc: denied { execute_no_trans } for pid=10694 comm="syz.2.557" path="/file0" dev="ramfs" ino=20882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 241.349890][ T2944] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 241.564021][ T30] audit: type=1400 audit(1757445067.948:493): avc: denied { read write } for pid=5843 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.734545][ T49] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 241.803802][T10757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.818635][ T49] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 242.233781][ T6018] usblp0: Disabling reads from problematic bidirectional printer [ 242.391225][ T6018] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 242.517672][ T6018] usb 3-1: USB disconnect, device number 34 [ 242.580336][ T6018] usblp0: removed [ 243.230010][ T5964] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 243.552823][ T5964] usb 1-1: config 16 has an invalid interface number: 19 but max is 0 [ 243.649889][ T5964] usb 1-1: config 16 has no interface number 0 [ 243.846073][ T5964] usb 1-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 243.926896][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.149114][ T5964] usb 1-1: Product: syz [ 244.230193][ T5964] usb 1-1: Manufacturer: syz [ 244.312825][ T5964] usb 1-1: SerialNumber: syz [ 244.488369][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 244.488384][ T30] audit: type=1400 audit(1757445071.158:688): avc: denied { read write } for pid=5860 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.653866][ T30] audit: type=1400 audit(1757445071.158:689): avc: denied { read write open } for pid=5860 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.678800][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.732380][ T30] audit: type=1400 audit(1757445071.158:690): avc: denied { ioctl } for pid=5860 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.839400][T10873] netlink: 'syz.5.568': attribute type 1 has an invalid length. [ 244.889127][T10873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.568'. [ 244.913590][ T30] audit: type=1400 audit(1757445071.298:691): avc: denied { ioctl } for pid=10851 comm="syz.0.565" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.928754][ T5964] usb 1-1: USB disconnect, device number 34 [ 245.008811][T10195] udevd[10195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.026154][ T30] audit: type=1326 audit(1757445071.328:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf6df85ba7 code=0x7ffc0000 [ 245.101501][ T30] audit: type=1326 audit(1757445071.328:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf6df2adb9 code=0x7ffc0000 [ 245.249939][ T30] audit: type=1326 audit(1757445071.328:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf6df85ba7 code=0x7ffc0000 [ 245.304662][ T30] audit: type=1326 audit(1757445071.328:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf6df2adb9 code=0x7ffc0000 [ 245.327832][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.442841][ T30] audit: type=1326 audit(1757445071.328:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf6df85ba7 code=0x7ffc0000 [ 245.467768][ T30] audit: type=1326 audit(1757445071.328:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf6df2adb9 code=0x7ffc0000 [ 246.180012][ T6018] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 246.355065][ T6018] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 246.563463][ T6018] usb 4-1: config 0 has no interface number 0 [ 246.573746][ T6018] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 246.591635][ T6018] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.612531][ T6018] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 246.622380][ T6018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.651267][ T6018] usb 4-1: Product: syz [ 246.661718][ T6018] usb 4-1: Manufacturer: syz [ 246.672556][ T6018] usb 4-1: SerialNumber: syz [ 246.716742][T10925] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.724021][T10925] IPv6: NLM_F_CREATE should be set when creating new route [ 246.731228][T10925] IPv6: NLM_F_CREATE should be set when creating new route [ 246.738407][T10925] IPv6: NLM_F_CREATE should be set when creating new route [ 246.837465][ T6018] usb 4-1: config 0 descriptor?? [ 246.849340][T10917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 246.870504][ T6018] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 246.903916][ T6018] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 246.949915][ T5901] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 247.094774][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 247.111024][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 247.121320][ T5901] usb 1-1: config 109 has an invalid interface number: 47 but max is 0 [ 247.136138][ T5901] usb 1-1: config 109 has no interface number 0 [ 247.159087][ T5901] usb 1-1: config 109 interface 47 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 247.255670][ T5901] usb 1-1: config 109 interface 47 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 247.295921][ T5915] usb 4-1: USB disconnect, device number 39 [ 247.318244][ T5901] usb 1-1: config 109 interface 47 altsetting 3 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 247.324621][ T5915] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 247.472521][ T5915] cyberjack 4-1:0.69: device disconnected [ 247.502356][ T5901] usb 1-1: config 109 interface 47 altsetting 3 has a duplicate endpoint with address 0x87, skipping [ 247.594870][ T5901] usb 1-1: config 109 interface 47 has no altsetting 0 [ 247.611653][ T5901] usb 1-1: New USB device found, idVendor=11d9, idProduct=1003, bcdDevice=f6.a4 [ 247.622370][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.630577][ T5901] usb 1-1: Product: syz [ 247.634780][ T5901] usb 1-1: Manufacturer: syz [ 247.639343][ T5901] usb 1-1: SerialNumber: syz [ 247.867328][ T5901] usb 1-1: USB disconnect, device number 35 [ 248.174532][T10985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.222601][T10975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.199435][T11005] netlink: 'syz.5.587': attribute type 39 has an invalid length. [ 249.250389][ T5915] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 249.438574][ T5915] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 249.460572][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.486062][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 249.497371][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.497619][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 249.497629][ T30] audit: type=1400 audit(1757445076.178:916): avc: denied { read write open } for pid=5860 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.508848][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 458, setting to 64 [ 249.563026][ T5915] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 249.657478][ T30] audit: type=1400 audit(1757445076.228:917): avc: denied { ioctl } for pid=5860 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.684459][T11022] macvlan2: entered promiscuous mode [ 249.729959][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 249.743159][ T5915] usb 4-1: Product: syz [ 249.752189][ T5915] usb 4-1: Manufacturer: syz [ 249.755556][T11022] macvlan2: entered allmulticast mode [ 249.761133][T10998] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.771081][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 249.786061][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 249.791813][ T30] audit: type=1400 audit(1757445076.238:918): avc: denied { ioctl } for pid=10993 comm="syz.3.585" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.821004][ T5915] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 249.826897][ T5915] cdc_wdm 4-1:1.0: Unknown control protocol [ 249.914325][T11022] gretap0: entered allmulticast mode [ 249.922072][ T30] audit: type=1400 audit(1757445076.268:919): avc: denied { read write } for pid=9169 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.367206][ T1206] usb 4-1: USB disconnect, device number 40 [ 250.431785][ T30] audit: type=1400 audit(1757445076.268:920): avc: denied { open } for pid=9169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.456758][ T30] audit: type=1400 audit(1757445076.268:921): avc: denied { ioctl } for pid=9169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.483390][ T30] audit: type=1400 audit(1757445076.288:922): avc: denied { create } for pid=11007 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.895096][ T30] audit: type=1400 audit(1757445076.328:923): avc: denied { getopt } for pid=11007 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.560386][ T30] audit: type=1400 audit(1757445076.328:924): avc: denied { prog_load } for pid=11007 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 251.579461][ T30] audit: type=1400 audit(1757445076.328:925): avc: denied { bpf } for pid=11007 comm="syz.0.588" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 251.838123][T11034] Set syz1 is full, maxelem 65536 reached [ 253.561063][T11089] lo speed is unknown, defaulting to 1000 [ 253.571829][T11098] input: syz1 as /devices/virtual/input/input12 [ 254.250991][ T6018] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 254.490076][ T6018] usb 4-1: Using ep0 maxpacket: 8 [ 254.550269][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 254.550305][ T30] audit: type=1400 audit(1757445081.218:1132): avc: denied { ioctl } for pid=11151 comm="syz.1.608" path="socket:[22259]" dev="sockfs" ino=22259 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.702425][ T30] audit: type=1400 audit(1757445081.218:1133): avc: denied { write } for pid=11151 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.718727][ T6018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.745064][ T6018] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 254.757167][ T30] audit: type=1400 audit(1757445081.308:1134): avc: denied { read } for pid=11151 comm="syz.1.608" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.781786][ T6018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.849263][ T30] audit: type=1400 audit(1757445081.308:1135): avc: denied { read open } for pid=11151 comm="syz.1.608" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.892813][ T6018] usb 4-1: config 0 descriptor?? [ 254.950575][ T30] audit: type=1400 audit(1757445081.318:1136): avc: denied { read write } for pid=11151 comm="syz.1.608" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.113645][ T30] audit: type=1400 audit(1757445081.318:1137): avc: denied { open } for pid=11151 comm="syz.1.608" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.168094][T11182] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.181875][ T6056] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.209888][ T30] audit: type=1400 audit(1757445081.338:1138): avc: denied { ioctl } for pid=11151 comm="syz.1.608" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.214182][ T6056] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 255.252483][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.259077][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.343406][T11187] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 255.347661][ T6018] hid-multitouch 0003:0EEF:72C4.000F: unknown main item tag 0x0 [ 255.435108][ T6018] hid-multitouch 0003:0EEF:72C4.000F: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 255.580733][T11132] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 255.606753][ T6018] usb 4-1: USB disconnect, device number 41 [ 255.661011][T11207] fido_id[11207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 255.802218][T11224] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 255.858024][T11224] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 256.440332][ T5901] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 256.763181][T11243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.839890][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 256.856136][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.859082][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 256.868391][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.886451][ T5901] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 256.903397][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.911565][ T5901] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 256.921042][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.950588][ T5901] usb 2-1: config 0 descriptor?? [ 257.477625][ T5901] hid (null): unknown global tag 0xe [ 257.528878][T11266] netlink: 240 bytes leftover after parsing attributes in process `syz.0.623'. [ 258.950166][ T1206] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 258.989916][ T5915] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 259.120076][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 259.127468][ T1206] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 259.139248][ T1206] usb 1-1: config 254 has no interface number 0 [ 259.169871][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 259.177267][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.194699][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.409499][ T1206] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 259.426910][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 259.440721][ T5915] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 259.450976][ T1206] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 259.472040][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.480219][ T1206] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.492800][ T1206] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 259.510108][ T5915] usb 4-1: config 0 descriptor?? [ 259.627100][ T30] kauditd_printk_skb: 368 callbacks suppressed [ 259.627115][ T30] audit: type=1400 audit(1757445086.298:1495): avc: denied { ioctl } for pid=11309 comm="syz.3.631" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.634073][ T1206] usb 1-1: config 254 interface 235 has no altsetting 0 [ 259.873318][ T1206] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 259.882643][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.891109][ T1206] usb 1-1: Product: syz [ 259.895748][ T1206] usb 1-1: Manufacturer: syz [ 259.900709][ T1206] usb 1-1: SerialNumber: syz [ 259.945422][ T30] audit: type=1400 audit(1757445086.548:1496): avc: denied { ioctl } for pid=11308 comm="syz.0.632" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.087954][T11310] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 260.110779][ T30] audit: type=1400 audit(1757445086.558:1497): avc: denied { read write } for pid=9169 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.122322][ T5908] usb 2-1: USB disconnect, device number 29 [ 260.187975][ T30] audit: type=1400 audit(1757445086.558:1498): avc: denied { open } for pid=9169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.344768][T11310] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 260.403956][ T5915] hid (null): bogus close delimiter [ 260.409221][ T5915] hid (null): invalid report_count -723372659 [ 260.429506][ T30] audit: type=1400 audit(1757445086.558:1499): avc: denied { ioctl } for pid=9169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.456180][ T30] audit: type=1400 audit(1757445086.658:1500): avc: denied { execmem } for pid=11332 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 260.481820][ T1206] usbtest 1-1:254.235: Linux gadget zero [ 260.996790][ T30] audit: type=1400 audit(1757445086.658:1501): avc: denied { read append } for pid=11332 comm="syz.5.634" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 261.024016][T11315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.043221][T11315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.049765][ T1206] usbtest 1-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 261.062332][ T30] audit: type=1400 audit(1757445086.658:1502): avc: denied { open } for pid=11332 comm="syz.5.634" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 261.122448][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 261.144303][ T30] audit: type=1400 audit(1757445086.658:1503): avc: denied { ioctl } for pid=11332 comm="syz.5.634" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 261.250208][ T1206] usb 1-1: USB disconnect, device number 36 [ 261.259266][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 261.272491][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 261.279509][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 261.329202][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 261.331745][ T30] audit: type=1400 audit(1757445086.758:1504): avc: denied { ioctl } for pid=11308 comm="syz.0.632" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 261.346432][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 262.035256][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 262.046790][T11392] random: crng reseeded on system resumption [ 262.151749][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 262.165337][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 262.180482][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 262.192743][T11393] qnx6: unable to read the first superblock [ 262.204720][T11393] futex_wake_op: syz.3.639 tries to shift op by 144; fix this program [ 262.270162][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 262.287819][ T5915] cougar 0003:060B:500A.0011: unknown main item tag 0x0 [ 262.336256][ T5915] cougar 0003:060B:500A.0011: unexpected long global item [ 262.558646][T11406] lo speed is unknown, defaulting to 1000 [ 262.565409][T11406] lo speed is unknown, defaulting to 1000 [ 262.576184][T11406] lo speed is unknown, defaulting to 1000 [ 262.639962][T11406] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 262.818665][T11406] lo speed is unknown, defaulting to 1000 [ 262.832765][T11406] lo speed is unknown, defaulting to 1000 [ 262.847347][T11406] lo speed is unknown, defaulting to 1000 [ 262.861395][T11406] lo speed is unknown, defaulting to 1000 [ 262.875690][T11406] lo speed is unknown, defaulting to 1000 [ 262.937111][ T5915] cougar 0003:060B:500A.0011: parse failed [ 262.959449][ T5915] cougar 0003:060B:500A.0011: probe with driver cougar failed with error -22 [ 263.030183][ T5901] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 263.037863][ T5915] usb 4-1: USB disconnect, device number 42 [ 263.284237][ T5901] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 263.309256][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.395532][ T5901] usb 2-1: Product: syz [ 263.418963][ T5901] usb 2-1: Manufacturer: syz [ 263.427322][ T5901] usb 2-1: SerialNumber: syz [ 263.449234][ T5901] usb 2-1: config 0 descriptor?? [ 264.094749][T11445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.148756][T11445] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 264.182384][T11445] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 264.640925][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 264.640941][ T30] audit: type=1400 audit(1757445091.138:1760): avc: denied { create } for pid=11459 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.666586][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.719502][ T30] audit: type=1400 audit(1757445091.138:1761): avc: denied { create } for pid=11459 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.741718][ T30] audit: type=1400 audit(1757445091.138:1762): avc: denied { execmem } for pid=11459 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 264.762052][ T30] audit: type=1400 audit(1757445091.318:1763): avc: denied { read write } for pid=5843 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.815402][ T30] audit: type=1400 audit(1757445091.318:1764): avc: denied { open } for pid=5843 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.841547][ T30] audit: type=1400 audit(1757445091.318:1765): avc: denied { ioctl } for pid=5843 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.872150][ T30] audit: type=1400 audit(1757445091.388:1766): avc: denied { create } for pid=11464 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.874102][T11467] netlink: 'syz.0.653': attribute type 3 has an invalid length. [ 264.903727][ T30] audit: type=1400 audit(1757445091.388:1767): avc: denied { create } for pid=11464 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.162253][ T30] audit: type=1400 audit(1757445091.388:1768): avc: denied { bind } for pid=11464 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.182122][ T30] audit: type=1400 audit(1757445091.388:1769): avc: denied { setopt } for pid=11464 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.203702][T11467] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.653'. [ 265.759985][ T5901] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 265.833298][ T5901] asix 2-1:0.0: probe with driver asix failed with error -71 [ 265.880969][ T5901] usb 2-1: USB disconnect, device number 30 [ 266.082404][T11484] warning: `syz.5.654' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 266.108571][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 266.509660][T11501] ip6erspan0: entered promiscuous mode [ 266.589910][ T5915] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 266.878271][T11537] fuse: Bad value for 'user_id' [ 266.883507][T11537] fuse: Bad value for 'user_id' [ 266.979882][ T5908] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 267.161694][T11512] netlink: 16 bytes leftover after parsing attributes in process `syz.5.658'. [ 267.590214][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 267.623639][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.637824][ T5908] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 267.680527][ T5908] usb 3-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 267.694800][ T5908] usb 3-1: config 12 interface 0 has no altsetting 0 [ 267.704967][ T5908] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 267.786468][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.810040][ T5915] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 267.840820][ T5908] usb 3-1: Product: syz [ 267.856923][ T5908] usb 3-1: Manufacturer: syz [ 267.870390][ T5908] usb 3-1: SerialNumber: syz [ 267.984702][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.010318][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 268.028641][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 268.038979][ T5915] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 268.048801][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.119723][ T5915] usb 2-1: config 0 descriptor?? [ 268.140505][ T5861] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 268.167877][ T5915] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 268.179020][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.203129][ T5908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.212300][ T5908] usb 3-1: selecting invalid altsetting 0 [ 268.272161][ T5908] snd-usb-audio 3-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 268.307783][ T5908] usb 3-1: USB disconnect, device number 35 [ 268.312157][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 268.337443][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.360373][ T5901] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 268.370738][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.390368][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.410344][ T5861] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 268.419376][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.433861][ T5861] usb 1-1: config 0 descriptor?? [ 268.492046][ T6018] usb 2-1: USB disconnect, device number 32 [ 268.539902][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 268.560509][ T5901] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 268.569644][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.584006][ T5901] usb 4-1: Product: syz [ 268.601741][ T5901] usb 4-1: Manufacturer: syz [ 268.607354][ T5901] usb 4-1: SerialNumber: syz [ 268.619069][ T5901] usb 4-1: config 0 descriptor?? [ 268.628741][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.667'. [ 268.633287][ T5901] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 268.648171][T11603] bridge_slave_1: left allmulticast mode [ 268.654883][T11603] bridge_slave_1: left promiscuous mode [ 268.660752][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.672848][T11603] bridge_slave_0: left allmulticast mode [ 268.678692][T11603] bridge_slave_0: left promiscuous mode [ 268.685863][ T5861] usbhid 1-1:0.0: can't add hid device: -71 [ 268.686143][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.692200][ T5861] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 268.803851][ T5861] usb 1-1: USB disconnect, device number 37 [ 269.223576][T11627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.669'. [ 269.588330][T11627] lo speed is unknown, defaulting to 1000 [ 269.595775][T11627] lo speed is unknown, defaulting to 1000 [ 269.629954][ T5861] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 269.670979][ T30] kauditd_printk_skb: 277 callbacks suppressed [ 269.670992][ T30] audit: type=1400 audit(1757445096.348:2047): avc: denied { ioctl } for pid=11630 comm="syz.1.670" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.758026][ T30] audit: type=1400 audit(1757445096.348:2048): avc: denied { unmount } for pid=9169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 269.784398][ T5861] usb 1-1: device descriptor read/64, error -71 [ 269.822997][ T30] audit: type=1400 audit(1757445096.388:2049): avc: denied { ioctl } for pid=11615 comm="syz.0.668" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.850090][ T6018] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 269.872633][ T30] audit: type=1400 audit(1757445096.398:2050): avc: denied { read write } for pid=9169 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.898508][ T30] audit: type=1400 audit(1757445096.398:2051): avc: denied { read write open } for pid=9169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.927905][ T30] audit: type=1400 audit(1757445096.398:2052): avc: denied { ioctl } for pid=9169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.953905][ T30] audit: type=1400 audit(1757445096.458:2053): avc: denied { ioctl } for pid=11630 comm="syz.1.670" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.980545][ T30] audit: type=1400 audit(1757445096.458:2054): avc: denied { read write } for pid=5860 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.005066][ T30] audit: type=1400 audit(1757445096.458:2055): avc: denied { open } for pid=5860 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.029443][ T30] audit: type=1400 audit(1757445096.458:2056): avc: denied { ioctl } for pid=5860 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.148092][ T5915] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 270.201534][ T6018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.213786][ T6018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.224008][ T6018] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 270.280049][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.791374][ T5901] gspca_sonixj: reg_w1 err -71 [ 270.796335][ T5861] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 270.803990][ T6018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.818343][ T6018] usb 2-1: config 0 descriptor?? [ 270.834928][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.868427][ T5915] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 270.890851][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.922925][ T5915] usb 3-1: config 0 descriptor?? [ 271.014488][ T5901] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 271.040245][ T5901] usb 4-1: USB disconnect, device number 43 [ 271.069868][ T5861] usb 1-1: device descriptor read/64, error -71 [ 271.100495][ T6018] usbhid 2-1:0.0: can't add hid device: -71 [ 271.106462][ T6018] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 271.143801][ T6018] usb 2-1: USB disconnect, device number 33 [ 271.187745][ T5861] usb usb1-port1: attempt power cycle [ 271.259628][ T2944] Bluetooth: hci5: Frame reassembly failed (-84) [ 271.275530][ T2944] Bluetooth: hci5: Frame reassembly failed (-84) [ 271.290753][T11717] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 271.341927][T11718] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 271.366669][ T2944] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 271.374979][ T2944] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 271.388553][ T5915] hid_parser_main: 72 callbacks suppressed [ 271.388570][ T5915] sony 0003:054C:024B.0012: unknown main item tag 0x0 [ 271.402640][ T5915] sony 0003:054C:024B.0012: item fetching failed at offset 3/5 [ 271.425874][ T5915] sony 0003:054C:024B.0012: parse failed [ 271.431756][ T5915] sony 0003:054C:024B.0012: probe with driver sony failed with error -22 [ 272.917522][ T5861] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 273.291863][ T5856] Bluetooth: hci5: command 0x1003 tx timeout [ 273.314663][ T5852] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 273.331526][ T6018] usb 3-1: USB disconnect, device number 36 [ 273.419863][ T5861] usb 1-1: device not accepting address 40, error -71 [ 274.306509][ T6018] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 274.343807][T11756] SELinux: failed to load policy [ 274.609889][ T6018] usb 4-1: Using ep0 maxpacket: 8 [ 274.683009][ T6018] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 274.697607][ T6018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.714556][ T6018] usb 4-1: Product: syz [ 274.722778][ T6018] usb 4-1: Manufacturer: syz [ 274.727348][ T6018] usb 4-1: SerialNumber: syz [ 274.740124][ T5915] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 274.760306][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 274.760319][ T30] audit: type=1400 audit(1757445101.428:2293): avc: denied { ioctl } for pid=11773 comm="syz.5.683" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.762392][ T6018] usb 4-1: config 0 descriptor?? [ 274.821050][ T30] audit: type=1400 audit(1757445101.488:2294): avc: denied { read write } for pid=5860 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.965609][ T6018] esd_usb 4-1:0.0: sending version message failed [ 274.989483][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 275.081702][T11789] befs: (nbd2): No write support. Marking filesystem read-only [ 275.092088][T11789] block nbd2: Attempted send on invalid socket [ 275.098913][T11789] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.109014][T11789] befs: (nbd2): unable to read superblock [ 275.147425][T11789] fuse: Bad value for 'fd' [ 275.413502][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 275.465420][ T30] audit: type=1400 audit(1757445101.488:2295): avc: denied { read write open } for pid=5860 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.483764][ T6018] esd_usb 4-1:0.0: probe with driver esd_usb failed with error -22 [ 275.490497][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.810774][ T30] audit: type=1400 audit(1757445101.488:2296): avc: denied { ioctl } for pid=5860 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.842182][ T5915] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.852313][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.861567][ T30] audit: type=1400 audit(1757445101.528:2297): avc: denied { ioctl } for pid=11773 comm="syz.5.683" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.873773][T11794] overlay: ./file0 is not a directory [ 275.893616][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.893824][ T5915] usb 6-1: Product: syz [ 275.893841][ T5915] usb 6-1: Manufacturer: syz [ 275.893859][ T5915] usb 6-1: SerialNumber: syz [ 275.937710][ T5915] usb 6-1: config 0 descriptor?? [ 275.942819][ T30] audit: type=1400 audit(1757445101.598:2298): avc: denied { ioctl } for pid=11773 comm="syz.5.683" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.029555][ T5915] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 276.047439][ T5964] usb 4-1: USB disconnect, device number 44 [ 276.175797][ T30] audit: type=1400 audit(1757445101.608:2299): avc: denied { read write } for pid=6056 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.271451][ T30] audit: type=1400 audit(1757445101.608:2301): avc: denied { create } for pid=11782 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.407821][ T30] audit: type=1400 audit(1757445101.608:2300): avc: denied { open } for pid=6056 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.493558][ T30] audit: type=1400 audit(1757445101.608:2302): avc: denied { ioctl } for pid=6056 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.791612][T11821] Invalid option length (57448) for dns_resolver key [ 277.174299][ T5915] usb 6-1: USB disconnect, device number 5 [ 277.867987][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.420566][ T5964] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 279.435298][T11909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.480341][ T5915] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 279.509274][T11909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.659895][ T1206] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 279.752092][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.752122][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 279.752146][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.752175][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.752209][ T5915] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.752233][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.796405][ T5964] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 279.802365][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 279.802377][ T30] audit: type=1400 audit(1757445106.458:2525): avc: denied { read write } for pid=11879 comm="syz.3.697" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 279.857351][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.865514][ T5915] usb 1-1: config 0 descriptor?? [ 279.868432][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.878780][T11894] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.953702][ T5964] usb 2-1: config 0 descriptor?? [ 280.143410][ T1206] usb 6-1: config 5 has an invalid interface number: 187 but max is 0 [ 280.171700][ T1206] usb 6-1: config 5 has no interface number 0 [ 280.239600][ T1206] usb 6-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 280.329585][ T5915] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 280.332012][ T5964] kaweth 2-1:0.0: Firmware present in device. [ 280.345061][ T1206] usb 6-1: config 5 interface 187 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 280.359402][ T30] audit: type=1400 audit(1757445106.458:2526): avc: denied { open } for pid=11879 comm="syz.3.697" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 280.398359][ T5915] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 280.415472][ T1206] usb 6-1: config 5 interface 187 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.424521][ T5964] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 280.464948][ T1206] usb 6-1: config 5 interface 187 has no altsetting 0 [ 280.493965][ T5964] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 280.504734][ T30] audit: type=1400 audit(1757445106.458:2527): avc: denied { ioctl } for pid=11879 comm="syz.3.697" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 280.545292][ T30] audit: type=1400 audit(1757445106.548:2528): avc: denied { ioctl } for pid=11898 comm="syz.1.702" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.570160][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.584196][ T1206] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a [ 280.602656][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.613251][ T1206] usb 6-1: Product: syz [ 280.617862][ T1206] usb 6-1: Manufacturer: syz [ 280.635161][ T1206] usb 6-1: SerialNumber: syz [ 280.642817][ T5964] usb 2-1: USB disconnect, device number 34 [ 280.668487][ T30] audit: type=1400 audit(1757445106.578:2529): avc: denied { ioctl } for pid=11870 comm="syz.5.696" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.693356][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.772872][ T30] audit: type=1400 audit(1757445106.678:2530): avc: denied { ioctl } for pid=11898 comm="syz.1.702" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.906423][ T30] audit: type=1400 audit(1757445106.688:2531): avc: denied { ioctl } for pid=11870 comm="syz.5.696" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.937027][ T30] audit: type=1400 audit(1757445106.998:2532): avc: denied { ioctl } for pid=11893 comm="syz.0.700" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.413107][ T30] audit: type=1400 audit(1757445107.128:2533): avc: denied { read write } for pid=6056 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.624152][ T1206] usb 6-1: USB disconnect, device number 6 [ 281.801276][ T5908] usb 1-1: reset high-speed USB device number 42 using dummy_hcd [ 281.845422][T11960] bridge3: entered promiscuous mode [ 281.990590][ T30] audit: type=1400 audit(1757445107.128:2534): avc: denied { open } for pid=6056 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.659697][T11979] netlink: 'syz.2.706': attribute type 4 has an invalid length. [ 284.806888][T12017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.713'. [ 284.826360][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 284.826374][ T30] audit: type=1400 audit(1757445111.498:2720): avc: denied { create } for pid=12025 comm="syz.5.716" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.878018][ T30] audit: type=1400 audit(1757445111.528:2721): avc: denied { ioctl } for pid=12006 comm="syz.2.713" path="socket:[24734]" dev="sockfs" ino=24734 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.905106][ T30] audit: type=1400 audit(1757445111.528:2722): avc: denied { write } for pid=12006 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 284.936107][ T7882] usb 1-1: USB disconnect, device number 42 [ 284.947515][ T30] audit: type=1400 audit(1757445111.528:2723): avc: denied { create } for pid=12006 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.990671][ T30] audit: type=1400 audit(1757445111.528:2724): avc: denied { prog_load } for pid=12006 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 285.053434][ T30] audit: type=1400 audit(1757445111.528:2725): avc: denied { bpf } for pid=12006 comm="syz.2.713" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 285.080750][ T30] audit: type=1400 audit(1757445111.528:2726): avc: denied { perfmon } for pid=12006 comm="syz.2.713" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 285.104159][ T30] audit: type=1400 audit(1757445111.528:2727): avc: denied { prog_run } for pid=12006 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 285.128190][ T30] audit: type=1400 audit(1757445111.528:2728): avc: denied { bind } for pid=12006 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.184084][ T30] audit: type=1400 audit(1757445111.528:2729): avc: denied { node_bind } for pid=12006 comm="syz.2.713" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 285.205360][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.419872][ T7882] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 285.586339][ T7882] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 285.627338][ T7882] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.667290][ T7882] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.706479][ T7882] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.729868][ T7882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.897585][ T7882] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.335988][ T7882] usb 6-1: invalid MIDI out EP 0 [ 286.423868][ T7882] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 286.474241][T12037] delete_channel: no stack [ 286.477923][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.498158][ T7882] usb 6-1: USB disconnect, device number 7 [ 287.109695][T12097] overlayfs: failed to resolve './file0': -2 [ 287.455654][T12102] netlink: 96 bytes leftover after parsing attributes in process `syz.0.719'. [ 289.172020][T12121] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 289.455424][T12132] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 289.464128][T12126] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 289.704917][ T7882] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 289.843254][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 289.843269][ T30] audit: type=1400 audit(1757445116.518:2962): avc: denied { create } for pid=12141 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 289.869831][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.892447][ T30] audit: type=1400 audit(1757445116.568:2963): avc: denied { ioctl } for pid=12129 comm="syz.2.732" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.919905][ T7882] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 290.128791][ T7882] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 290.238268][T12143] netlink: 'syz.5.725': attribute type 29 has an invalid length. [ 290.380524][ T7882] usb 3-1: can't read configurations, error -61 [ 290.409960][ T30] audit: type=1400 audit(1757445116.568:2964): avc: denied { read write } for pid=6056 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.448674][ T30] audit: type=1400 audit(1757445116.568:2965): avc: denied { open } for pid=6056 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.487142][ T30] audit: type=1400 audit(1757445116.568:2966): avc: denied { ioctl } for pid=6056 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.616660][ T30] audit: type=1400 audit(1757445116.598:2967): avc: denied { ioctl } for pid=12129 comm="syz.2.732" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.648566][ T30] audit: type=1400 audit(1757445116.748:2968): avc: denied { prog_load } for pid=12144 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 290.694733][T12141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.723127][ T7882] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 290.880045][ T30] audit: type=1400 audit(1757445116.748:2969): avc: denied { ioctl } for pid=12129 comm="syz.2.732" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.931366][ T7882] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 290.940512][ T7882] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 290.949394][ T7882] usb 3-1: can't read configurations, error -61 [ 290.962054][ T30] audit: type=1400 audit(1757445116.748:2970): avc: denied { create } for pid=12141 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 290.983615][ T30] audit: type=1400 audit(1757445116.758:2971): avc: denied { create } for pid=12141 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.983913][ T7882] usb usb3-port1: attempt power cycle [ 291.004008][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.450163][ T7882] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 291.712062][ T7882] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 291.728464][ T7882] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 291.765774][ T7882] usb 3-1: can't read configurations, error -61 [ 291.909948][ T7882] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 291.933048][ T7882] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 291.945774][ T7882] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 291.954343][ T7882] usb 3-1: can't read configurations, error -61 [ 291.986785][ T7882] usb usb3-port1: unable to enumerate USB device [ 292.059981][ T5964] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 292.209996][ T5964] usb 6-1: Using ep0 maxpacket: 16 [ 292.222182][ T5964] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 292.230512][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.241949][ T5964] usb 6-1: config 0 has no interface number 0 [ 292.311182][ T5964] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28 [ 292.327176][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3 [ 292.337390][ T5964] usb 6-1: Product: syz [ 292.343042][ T5964] usb 6-1: SerialNumber: syz [ 292.352187][ T5964] usb 6-1: config 0 descriptor?? [ 292.379178][ T5964] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 292.485003][T12188] misc userio: No port type given on /dev/userio [ 292.501443][ T5964] usb 6-1: No valid video chain found. [ 292.557153][T12189] : renamed from bridge_slave_0 (while UP) [ 293.842523][T12255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.751'. [ 293.867793][T12255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.751'. [ 294.151859][T12263] pim6reg: entered allmulticast mode [ 294.169918][T12261] pim6reg: left allmulticast mode [ 294.839868][ T5964] usb 6-1: USB disconnect, device number 8 [ 294.865986][ T30] kauditd_printk_skb: 256 callbacks suppressed [ 294.865998][ T30] audit: type=1400 audit(1757445121.538:3228): avc: denied { unlink } for pid=9169 comm="syz-executor" name="file0" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.943279][T12275] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 294.954039][ T30] audit: type=1400 audit(1757445121.598:3229): avc: denied { read write } for pid=9169 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.082033][ T30] audit: type=1400 audit(1757445121.598:3230): avc: denied { open } for pid=9169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.141244][ T30] audit: type=1400 audit(1757445121.598:3231): avc: denied { ioctl } for pid=9169 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.396611][ T30] audit: type=1400 audit(1757445121.618:3232): avc: denied { getopt } for pid=12257 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 295.529269][ T30] audit: type=1400 audit(1757445121.658:3233): avc: denied { create } for pid=12283 comm="syz.5.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.592165][ T30] audit: type=1400 audit(1757445121.668:3234): avc: denied { write } for pid=12283 comm="syz.5.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.694087][T12295] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 295.734202][ T30] audit: type=1400 audit(1757445121.708:3235): avc: denied { read } for pid=12283 comm="syz.5.754" dev="nsfs" ino=4026533389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 295.815196][T12301] dvmrp0: entered allmulticast mode [ 295.838164][ T30] audit: type=1400 audit(1757445121.708:3236): avc: denied { open } for pid=12283 comm="syz.5.754" path="net:[4026533389]" dev="nsfs" ino=4026533389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 295.867944][ T30] audit: type=1400 audit(1757445121.708:3237): avc: denied { create } for pid=12283 comm="syz.5.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 295.921481][T12306] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 295.927983][T12306] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 295.951211][T12306] vhci_hcd vhci_hcd.0: Device attached [ 296.130033][ T7882] vhci_hcd: vhci_device speed not set [ 296.190020][ T7882] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 296.528631][T12324] usb usb8: usbfs: process 12324 (syz.0.759) did not claim interface 0 before use [ 296.644196][T12324] netlink: 60 bytes leftover after parsing attributes in process `syz.0.759'. [ 296.697277][T12324] unsupported nlmsg_type 40 [ 297.106247][T12331] netlink: 116 bytes leftover after parsing attributes in process `syz.1.761'. [ 297.259874][T12308] vhci_hcd: connection reset by peer [ 297.272004][ T2944] vhci_hcd: stop threads [ 297.276349][ T2944] vhci_hcd: release socket [ 297.287818][ T2944] vhci_hcd: disconnect device [ 297.499416][ T5964] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 297.607899][T12347] comedi comedi3: c6xdigio: I/O port conflict (0x4f27,3) [ 297.615342][T12347] ================================================================== [ 297.623390][T12347] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 297.631361][T12347] Read of size 8 at addr ffff8880344a6c30 by task syz.2.763/12347 [ 297.639147][T12347] [ 297.641460][T12347] CPU: 1 UID: 0 PID: 12347 Comm: syz.2.763 Not tainted syzkaller #0 PREEMPT(full) [ 297.641482][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.641493][T12347] Call Trace: [ 297.641499][T12347] [ 297.641507][T12347] dump_stack_lvl+0x116/0x1f0 [ 297.641531][T12347] print_report+0xcd/0x630 [ 297.641551][T12347] ? __virt_addr_valid+0x81/0x610 [ 297.641575][T12347] ? __phys_addr+0xe8/0x180 [ 297.641600][T12347] ? sysfs_remove_file_ns+0x63/0x70 [ 297.641619][T12347] kasan_report+0xe0/0x110 [ 297.641639][T12347] ? sysfs_remove_file_ns+0x63/0x70 [ 297.641661][T12347] sysfs_remove_file_ns+0x63/0x70 [ 297.641681][T12347] driver_remove_file+0x4a/0x60 [ 297.641706][T12347] bus_remove_driver+0x224/0x2c0 [ 297.641727][T12347] driver_unregister+0x76/0xb0 [ 297.641751][T12347] comedi_device_detach_locked+0x12f/0xa50 [ 297.641778][T12347] comedi_device_detach+0x67/0xb0 [ 297.641799][T12347] comedi_device_attach+0x43d/0x900 [ 297.641824][T12347] do_devconfig_ioctl+0x1b1/0x710 [ 297.641851][T12347] ? __mutex_lock+0x1c5/0x1060 [ 297.641925][T12347] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 297.641963][T12347] ? find_held_lock+0x2b/0x80 [ 297.641988][T12347] comedi_unlocked_ioctl+0x165d/0x2f00 [ 297.642011][T12347] ? futex_wake+0x1ad/0x530 [ 297.642032][T12347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 297.642054][T12347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.642076][T12347] ? do_vfs_ioctl+0x128/0x14f0 [ 297.642104][T12347] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 297.642128][T12347] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 297.642159][T12347] ? hook_file_ioctl_common+0x145/0x410 [ 297.642181][T12347] ? selinux_file_ioctl+0x180/0x270 [ 297.642207][T12347] ? selinux_file_ioctl+0xb4/0x270 [ 297.642233][T12347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 297.642253][T12347] __x64_sys_ioctl+0x18b/0x210 [ 297.642281][T12347] do_syscall_64+0xcd/0x4c0 [ 297.642306][T12347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.642324][T12347] RIP: 0033:0x7fb8d0d8ebe9 [ 297.642340][T12347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.642358][T12347] RSP: 002b:00007fb8d1c0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.642376][T12347] RAX: ffffffffffffffda RBX: 00007fb8d0fc6180 RCX: 00007fb8d0d8ebe9 [ 297.642388][T12347] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 000000000000000b [ 297.642399][T12347] RBP: 00007fb8d0e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 297.642410][T12347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.642421][T12347] R13: 00007fb8d0fc6218 R14: 00007fb8d0fc6180 R15: 00007ffc45d0bde8 [ 297.642439][T12347] [ 297.642445][T12347] [ 297.908374][T12347] Allocated by task 12118: [ 297.912771][T12347] kasan_save_stack+0x33/0x60 [ 297.917442][T12347] kasan_save_track+0x14/0x30 [ 297.922105][T12347] __kasan_kmalloc+0xaa/0xb0 [ 297.926681][T12347] __kmalloc_noprof+0x223/0x510 [ 297.931515][T12347] io_cache_alloc_new+0x45/0xf0 [ 297.936357][T12347] __io_prep_rw+0x21d/0x1090 [ 297.940931][T12347] io_prep_rw+0x24/0x220 [ 297.945157][T12347] io_prep_readv+0x20/0xa0 [ 297.949555][T12347] io_submit_sqes+0x853/0x25c0 [ 297.954304][T12347] __do_sys_io_uring_enter+0xd6a/0x1630 [ 297.959837][T12347] do_syscall_64+0xcd/0x4c0 [ 297.964334][T12347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.970211][T12347] [ 297.972516][T12347] Freed by task 6018: [ 297.976474][T12347] kasan_save_stack+0x33/0x60 [ 297.981138][T12347] kasan_save_track+0x14/0x30 [ 297.985799][T12347] kasan_save_free_info+0x3b/0x60 [ 297.990814][T12347] __kasan_slab_free+0x60/0x70 [ 297.995563][T12347] kfree+0x2b4/0x4d0 [ 297.999451][T12347] __io_submit_flush_completions+0x122d/0x1690 [ 298.005590][T12347] io_fallback_req_func+0x219/0x6d0 [ 298.010775][T12347] process_one_work+0x9cc/0x1b70 [ 298.015700][T12347] worker_thread+0x6c8/0xf10 [ 298.020278][T12347] kthread+0x3c2/0x780 [ 298.024331][T12347] ret_from_fork+0x5d4/0x6f0 [ 298.028906][T12347] ret_from_fork_asm+0x1a/0x30 [ 298.033660][T12347] [ 298.035969][T12347] The buggy address belongs to the object at ffff8880344a6c00 [ 298.035969][T12347] which belongs to the cache kmalloc-256 of size 256 [ 298.050004][T12347] The buggy address is located 48 bytes inside of [ 298.050004][T12347] freed 256-byte region [ffff8880344a6c00, ffff8880344a6d00) [ 298.063695][T12347] [ 298.066002][T12347] The buggy address belongs to the physical page: [ 298.072390][T12347] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x344a6 [ 298.081134][T12347] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 298.089614][T12347] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 298.097139][T12347] page_type: f5(slab) [ 298.101105][T12347] raw: 00fff00000000040 ffff88801b841b40 dead000000000100 dead000000000122 [ 298.109663][T12347] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 298.118220][T12347] head: 00fff00000000040 ffff88801b841b40 dead000000000100 dead000000000122 [ 298.126867][T12347] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 298.135515][T12347] head: 00fff00000000001 ffffea0000d12981 00000000ffffffff 00000000ffffffff [ 298.144160][T12347] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 298.152799][T12347] page dumped because: kasan: bad access detected [ 298.159183][T12347] page_owner tracks the page as allocated [ 298.164866][T12347] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5854, tgid 5854 (syz-executor), ts 62738315611, free_ts 62737035298 [ 298.186203][T12347] post_alloc_hook+0x1c0/0x230 [ 298.190951][T12347] get_page_from_freelist+0x132b/0x38e0 [ 298.196470][T12347] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 298.202339][T12347] alloc_pages_mpol+0x1fb/0x550 [ 298.207166][T12347] new_slab+0x247/0x330 [ 298.211305][T12347] ___slab_alloc+0xcf2/0x1750 [ 298.215960][T12347] __slab_alloc.constprop.0+0x56/0xb0 [ 298.221314][T12347] __kmalloc_noprof+0x2f2/0x510 [ 298.226138][T12347] fib_create_info+0x53f/0x46b0 [ 298.230965][T12347] fib_table_insert+0x177/0x1c40 [ 298.235883][T12347] fib_magic+0x4d4/0x5c0 [ 298.240103][T12347] fib_add_ifaddr+0x16d/0x580 [ 298.244761][T12347] fib_netdev_event+0x38a/0x710 [ 298.249594][T12347] notifier_call_chain+0xb9/0x410 [ 298.254602][T12347] call_netdevice_notifiers_info+0xbe/0x140 [ 298.260477][T12347] __dev_notify_flags+0x12c/0x2e0 [ 298.265477][T12347] page last free pid 5854 tgid 5854 stack trace: [ 298.271773][T12347] __free_frozen_pages+0x7d5/0x10f0 [ 298.276951][T12347] __put_partials+0x165/0x1c0 [ 298.281618][T12347] qlist_free_all+0x4d/0x120 [ 298.286180][T12347] kasan_quarantine_reduce+0x195/0x1e0 [ 298.291615][T12347] __kasan_slab_alloc+0x69/0x90 [ 298.296443][T12347] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 298.301880][T12347] security_inode_alloc+0x3b/0x2b0 [ 298.306973][T12347] inode_init_always_gfp+0xce4/0x1030 [ 298.312320][T12347] alloc_inode+0x86/0x240 [ 298.316646][T12347] sock_alloc+0x40/0x280 [ 298.320869][T12347] __sock_create+0xc1/0x8d0 [ 298.325356][T12347] __sys_socket+0x14d/0x260 [ 298.329832][T12347] __x64_sys_socket+0x72/0xb0 [ 298.334485][T12347] do_syscall_64+0xcd/0x4c0 [ 298.338967][T12347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.344836][T12347] [ 298.347134][T12347] Memory state around the buggy address: [ 298.352737][T12347] ffff8880344a6b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.360775][T12347] ffff8880344a6b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.368807][T12347] >ffff8880344a6c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 298.376841][T12347] ^ [ 298.382442][T12347] ffff8880344a6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 298.390475][T12347] ffff8880344a6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.398508][T12347] ================================================================== [ 298.406823][T12347] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 298.413997][T12347] CPU: 1 UID: 0 PID: 12347 Comm: syz.2.763 Not tainted syzkaller #0 PREEMPT(full) [ 298.423255][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.433286][T12347] Call Trace: [ 298.436543][T12347] [ 298.439452][T12347] dump_stack_lvl+0x3d/0x1f0 [ 298.444027][T12347] vpanic+0x6e8/0x7a0 [ 298.447993][T12347] ? __pfx_vpanic+0x10/0x10 [ 298.452480][T12347] ? sysfs_remove_file_ns+0x63/0x70 [ 298.457655][T12347] panic+0xca/0xd0 [ 298.461361][T12347] ? __pfx_panic+0x10/0x10 [ 298.465760][T12347] ? sysfs_remove_file_ns+0x63/0x70 [ 298.470934][T12347] ? preempt_schedule_common+0x44/0xc0 [ 298.476371][T12347] ? preempt_schedule_thunk+0x16/0x30 [ 298.481727][T12347] check_panic_on_warn+0xab/0xb0 [ 298.486640][T12347] end_report+0x107/0x170 [ 298.490949][T12347] kasan_report+0xee/0x110 [ 298.495342][T12347] ? sysfs_remove_file_ns+0x63/0x70 [ 298.500521][T12347] sysfs_remove_file_ns+0x63/0x70 [ 298.505523][T12347] driver_remove_file+0x4a/0x60 [ 298.510357][T12347] bus_remove_driver+0x224/0x2c0 [ 298.515274][T12347] driver_unregister+0x76/0xb0 [ 298.520017][T12347] comedi_device_detach_locked+0x12f/0xa50 [ 298.525805][T12347] comedi_device_detach+0x67/0xb0 [ 298.530808][T12347] comedi_device_attach+0x43d/0x900 [ 298.535988][T12347] do_devconfig_ioctl+0x1b1/0x710 [ 298.540996][T12347] ? __mutex_lock+0x1c5/0x1060 [ 298.545739][T12347] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 298.551273][T12347] ? find_held_lock+0x2b/0x80 [ 298.555930][T12347] comedi_unlocked_ioctl+0x165d/0x2f00 [ 298.561367][T12347] ? futex_wake+0x1ad/0x530 [ 298.565847][T12347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 298.571633][T12347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.577503][T12347] ? do_vfs_ioctl+0x128/0x14f0 [ 298.582249][T12347] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 298.587260][T12347] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 298.594095][T12347] ? hook_file_ioctl_common+0x145/0x410 [ 298.599618][T12347] ? selinux_file_ioctl+0x180/0x270 [ 298.604807][T12347] ? selinux_file_ioctl+0xb4/0x270 [ 298.609913][T12347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 298.615702][T12347] __x64_sys_ioctl+0x18b/0x210 [ 298.620457][T12347] do_syscall_64+0xcd/0x4c0 [ 298.624947][T12347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.630819][T12347] RIP: 0033:0x7fb8d0d8ebe9 [ 298.635217][T12347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.654806][T12347] RSP: 002b:00007fb8d1c0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.663201][T12347] RAX: ffffffffffffffda RBX: 00007fb8d0fc6180 RCX: 00007fb8d0d8ebe9 [ 298.671157][T12347] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 000000000000000b [ 298.679114][T12347] RBP: 00007fb8d0e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 298.687064][T12347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.695014][T12347] R13: 00007fb8d0fc6218 R14: 00007fb8d0fc6180 R15: 00007ffc45d0bde8 [ 298.702973][T12347] [ 298.706145][T12347] Kernel Offset: disabled [ 298.710441][T12347] Rebooting in 86400 seconds..