last executing test programs: 2m43.788031637s ago: executing program 3 (id=2206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000580)="270502001c0014000600032fb96db4f7babe05000700810005008100a5567e1c280a6fcc18fc", 0x26}], 0x1}, 0x30040805) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xfa, 0x3, 0x81}) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x24000801}, 0x2000084c) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0200000001"], 0x48) (async) fsmount(0xffffffffffffffff, 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 2m43.583820162s ago: executing program 3 (id=2207): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) sysinfo(0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x2108, r0}, 0x0) 2m40.08727074s ago: executing program 3 (id=2215): r0 = syz_io_uring_setup(0x4f3, &(0x7f0000000240)={0x0, 0x486e, 0x8, 0x2, 0x10000340}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x50, 0x0, 0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000040)='./bus\x00', 0x20, 0x6400, 0x1}) io_uring_enter(r0, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 2m39.851773709s ago: executing program 3 (id=2218): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000200008030000000000000061"], 0x0, 0x52}, 0x28) 2m39.704096878s ago: executing program 3 (id=2219): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x81, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r4 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x8, 0xfffffff9, 0x265}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) 2m38.744762245s ago: executing program 3 (id=2225): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000008a0559f338be"], 0x40) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sync() sync() process_vm_readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)=""/170, 0xaa}, {&(0x7f0000000100)=""/70, 0x46}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)}], 0x4, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/190, 0xbe}], 0x4, 0x0) 2m21.801713885s ago: executing program 32 (id=2225): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000008a0559f338be"], 0x40) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sync() sync() process_vm_readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)=""/170, 0xaa}, {&(0x7f0000000100)=""/70, 0x46}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)}], 0x4, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/190, 0xbe}], 0x4, 0x0) 1m46.169357776s ago: executing program 4 (id=2370): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000280)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000c5) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000840)=@o_path={&(0x7f00000004c0)='./bus/file0\x00'}, 0x18) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r6, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x12000, 0x108) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000000880)=""/4096, 0x1000) 1m42.179633249s ago: executing program 4 (id=2377): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000040)={{0x0, 0xb}, 'port1\x00', 0x0, 0x21000, 0x1, 0x5dea653b, 0x2, 0x0, 0x8, 0x0, 0x0, 0x2}) sendmsg$nl_generic(r3, 0x0, 0x400c4) r5 = gettid() getpgrp(r5) fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) io_setup(0x4, &(0x7f0000000600)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r7, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000000)="ff07000000000000", 0x400000}]) socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="ed7634"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m38.194527314s ago: executing program 4 (id=2396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f00000001c0)) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000200)={0x4, "fa02791d2a69a2610f02000000000000001100010000000800"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x8, 0x4, {{0xd, 0x4, 0x0, 0x7, 0x34, 0x65, 0x0, 0xe3, 0x29, 0x0, @private=0xa010102, @multicast2, {[@lsrr={0x83, 0x1f, 0x17, [@private=0xa010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, @local, @multicast1, @private=0xa010100, @local]}, @noop]}}}}}) (async, rerun: 64) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000000)=0xffffffff, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) 1m37.874093714s ago: executing program 4 (id=2398): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x482, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x111c00) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x1, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, &(0x7f0000000340), 0x2, 0x0, &(0x7f0000000180)=[{}, {}], 0x9, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(r2, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) fallocate(r4, 0x3, 0x0, 0x5345) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m37.2946684s ago: executing program 4 (id=2399): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r2, 0x10, 0x101}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1m35.135033299s ago: executing program 4 (id=2405): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x107001, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000006a0013"], 0x0, 0x26}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="9e0800000000000000da9315d60200000089e727c7"], 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) 1m34.808716833s ago: executing program 33 (id=2405): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x107001, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000006a0013"], 0x0, 0x26}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="9e0800000000000000da9315d60200000089e727c7"], 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) 10.322770839s ago: executing program 2 (id=2657): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x1, 0x0, 0xfffffffe, 0x49}, 0xfffffffffffffd5a) socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x4f3, &(0x7f0000000240)={0x0, 0x486e, 0x8, 0x2, 0x10000340}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r4 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x50, 0x0, 0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000040)='./bus\x00', 0x20, 0x6400, 0x1}) io_uring_enter(r1, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 9.157752706s ago: executing program 2 (id=2660): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001540)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001540)=0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@local, 0x4e22, 0x0, 0x4e20, 0x2, 0xa, 0x80, 0x80, 0x0, r1, r2}, {0x7fffffff, 0x8, 0x6c4, 0xd, 0x7, 0x6, 0x10, 0x2}, {0x7fffffff, 0xba, 0x5, 0x9}, 0xd, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x4d6, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x4, 0x0, 0x8, 0x0, 0x8, 0x7}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048890}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0800000000000000000000860a00000000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) syz_open_dev$usbfs(&(0x7f00000001c0), 0x3, 0x513601) (async) syz_open_dev$usbfs(&(0x7f00000001c0), 0x3, 0x513601) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r5, r6, 0x0) (async) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f00000003c0)="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", &(0x7f0000000180)=""/246, &(0x7f0000000280)="d97d85755b00897b34c866d21d4e6567bba8163104506f76b5801e4f06cb7844e3ae9080c4381eea5e84fc67a0359e93f5bf94ee45ad619e7b31897a9030708d1ed1e16f7dad3d41dc3bbb0301030de2b16617ec500c5022d170114940cf8000fc6fbbfa0587747c6da40b9bbf29e9ea5651caa8e9f9e9cf0582b8c2cf3853974f9148fdf39e6e598a66afc67762f50a72353fa7c061a1099461607d70771034cec1a366301cc5a1aaa3122969f8a6b0187cee1742d834", &(0x7f00000013c0)="80db87d130bed0a42c100c38e659a4d898aa04e0279d47ad97c8bda00f65020ae28bc83709a68e3d9f5496c3979d4f8dcb310da60d8f65e9d418e01526a61edb4dfea0f4503b16c197166be92d826821b94cafadf55ec068f360cfa200429bb24c69347aa107e98d2b2a7d9b73dc2cccd7f194b8742e25ef099127d4adeddd7526d30090bc76aeada21c2094", 0x6, r4}, 0x38) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f00000003c0)="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", &(0x7f0000000180)=""/246, &(0x7f0000000280)="d97d85755b00897b34c866d21d4e6567bba8163104506f76b5801e4f06cb7844e3ae9080c4381eea5e84fc67a0359e93f5bf94ee45ad619e7b31897a9030708d1ed1e16f7dad3d41dc3bbb0301030de2b16617ec500c5022d170114940cf8000fc6fbbfa0587747c6da40b9bbf29e9ea5651caa8e9f9e9cf0582b8c2cf3853974f9148fdf39e6e598a66afc67762f50a72353fa7c061a1099461607d70771034cec1a366301cc5a1aaa3122969f8a6b0187cee1742d834", &(0x7f00000013c0)="80db87d130bed0a42c100c38e659a4d898aa04e0279d47ad97c8bda00f65020ae28bc83709a68e3d9f5496c3979d4f8dcb310da60d8f65e9d418e01526a61edb4dfea0f4503b16c197166be92d826821b94cafadf55ec068f360cfa200429bb24c69347aa107e98d2b2a7d9b73dc2cccd7f194b8742e25ef099127d4adeddd7526d30090bc76aeada21c2094", 0x6, r4}, 0x38) 8.864033007s ago: executing program 2 (id=2661): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5c) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf2504000000050004000200000005000400020000000900010073797a30000000000b666233f8331fd9a2bc4cba57551f2267c9678594ecf02151e91006f22fc673f49a263bf4ace7522a87b49e13bf5f0bc900c047519b20dc7ae9e7cf05f8b055218ad31eebc81e2de03af262b6bef6a6d6aaade20d9d3f4465c30807073fd74fd1f3bd18fcdac3f4719a5129d4a1a5535eb25a577fa9d54833720b9b20533835c0c42cd247283571333eabaa046976113924f9329c18"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000fe01000002000000020000004422e100", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000085000000020000000200"/28], 0x50) syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 8.655521323s ago: executing program 0 (id=2662): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x7, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000200000034d0001000000008500000087000000aaad06d5584d5f2b00000000ae8fc77ec084a052e696d4dd238de0ce8d71b443ae963f9cf9584672cbf3758ae2a31450e76e176c8d2919d430d974c9d21136d8f325069fd921d2f48994a1bbe6580b8b1ce081aedabd312c90516171f54f0f02ddcef6fff3e10867b34ddf20a258a33ebdb74efd13e6cb22cdeba2c7d06997afc550d31188aae39a61b1ccfbf81d07d694ccfd793a1b2695403c78d3017ad8b0cf0d8a8ed7a45542663e2f5bdd8f7bce4a2c416393e2f66ab01849ef63c97cdccd6d52829ae11cf54b08e70538b62383d20e2af375b7d36a5337a5e489bb96b13820ddd8070f5b889897d351043c5ffe12b996c163a9175c6711562c43d371292717280374c4e66b70ebd38091631b821253b7211869919dd57f825b764b"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94) r2 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x1f9}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x6a, &(0x7f0000000680)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYBLOB="964982113d3a93aec33b6f853e01eb818f28f6f4d8b221a75d749885bece124e826e523ae112401e56d3f358cefc18264b7988c1926f34bc03feb76405c7899e6384d7faf9d8c3ffd3ccaecd130615c71bf7b1508a9f946050bcc7ab5ec118076ed91d997b8cf7cf0f0c048b4024b1052c180765e2c37e416f29b2502a55ebf6bec2b3b3727121e20f707ee8d6eb5d014a8dd8d6c8db570edffb822ab376b04b08c1748a54fe31d16ee41caa897336545145b68ae99058dab92d69ca5d99273de00ba8cb93c0b62db18d846696c5f761a92848e30cbd5f17c5116a7e32d40653cd"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000003c0)={r3, &(0x7f0000000140)='-\xb4\\\x91\x00', 0x92142, &(0x7f00000002c0)={@_ha_fsid={[0x9, 0x3]}, {0x401, 0x8, 0x8, 0x8}}, 0xe, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000380)=0x2}) ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000000440)=0x87) io_uring_enter(0xffffffffffffffff, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f0000048040)=""/102392, 0x18ff8) read$msr(r6, &(0x7f00000001c0)=""/234, 0xea) io_uring_enter(0xffffffffffffffff, 0x3dfc, 0x0, 0x4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075ad4020ba0d0050d4470102030109021200010000000009043c0300ea6a63e8d72eb380b1c4be3f5153633e59d56912387e86bdcebd17f7082feba6e96152544311a3a990d64616f5f5bffaaf685e4f1d8e3871517bbfc71ce1b7c1f4899e8ba39b560cdb853e362b5f719e73779f712a955f6812132e4beb97ed9ac4b4e28948618ba1b09d772745be3245a1541b060e5a88e3003efd8445c46d49d2813b33e6e97c420bc0def4ac6f280bdfb164ef592e0cb457427f20956c"], 0x0) 8.544222048s ago: executing program 2 (id=2663): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1f}, {0x6}, {}, {0x9}, {}, {}, {0x9}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x20}, {0x0, 0xfc}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x8a}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffffff00], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}, {}, 0x88}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 7.207542864s ago: executing program 2 (id=2666): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x20a43, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x300, 0x70bd2c, 0x4000000, {0x0, 0x0, 0x0, r3, {0x6, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x7, 0x8001, 0x0, 0x1, 0x8001, 0x401, 0x1}}, {0x6, 0x2, [0x2009]}}, {{0x1c, 0x1, {0x1, 0x0, 0x2, 0x2, 0x1, 0x3, 0xfffffff9, 0x5}}, {0xe, 0x2, [0x4, 0x54b, 0x1, 0x4, 0x5]}}]}]}, 0x78}}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000378f8668755269ed30e8d86f", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) 6.535718109s ago: executing program 5 (id=2667): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x71) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.300405452s ago: executing program 6 (id=2668): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000001808030000000000000061"], 0x0, 0x52}, 0x28) 5.607806011s ago: executing program 6 (id=2669): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000009740)=[{{&(0x7f0000000d40)=@can, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000dc0)=""/24, 0x18}], 0x1}, 0x46a9}, {{&(0x7f0000000e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/41, 0x29}, {0x0}, {0x0}, {&(0x7f0000003400)=""/103, 0x67}], 0x5, &(0x7f0000003540)=""/184, 0xb8}, 0x3}, {{&(0x7f0000004900)=@in6, 0x80, 0x0}, 0x9}, {{&(0x7f0000005d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000006dc0)=""/46, 0x2e}, 0x3}, {{&(0x7f0000006e00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000007100)=[{0x0}, {&(0x7f00000070c0)=""/31, 0x1f}], 0x2}, 0xffff}, {{&(0x7f0000007180)=@caif=@dbg, 0x80, &(0x7f00000093c0), 0x0, &(0x7f0000009440)=""/230, 0xe6}, 0x6}], 0x6, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) 5.478323382s ago: executing program 1 (id=2670): ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x1, 0x40, 0x5, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000fff800000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) getpid() sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.234320395s ago: executing program 1 (id=2671): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x81, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x8, 0xfffffff9, 0x265}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) 4.663521636s ago: executing program 5 (id=2672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4.659164544s ago: executing program 1 (id=2673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x5, 0xe54, 0x26, @dev={0xfe, 0x80, '\x00', 0x17}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x7b91, 0x9}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x80000001, 0x18}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045a8002c0000000073069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cd0000890780ffd00000000"], 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fanotify_init(0x202, 0x0) 4.403741979s ago: executing program 0 (id=2674): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000001200)={0x2020}, 0x105c) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x16c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x84, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x194}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) io_setup(0x7, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') readlinkat(r6, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000280)=""/144, 0x90) r7 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) shmctl$SHM_STAT(r7, 0xd, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, 0x0, &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 4.374376046s ago: executing program 6 (id=2675): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'\x00', 0x0}) (async) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000340)={@rand_addr, 0x0}, &(0x7f0000000380)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0x0, 0x7}}}, 0x24}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)={0x444, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x22ac}}}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 3.947338326s ago: executing program 6 (id=2676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async, rerun: 32) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f000044b000/0x4000)=nil, 0x4000, 0xb635773f04ebbeea, 0x10010, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) listen(r0, 0x4) dup2(r6, 0xffffffffffffffff) (async, rerun: 64) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) connect$inet(r7, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd700000000000010000001c000180060001020200000008000300ac14141c080006000300ed00"], 0x30}}, 0x40004) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0700000000000000000001800500020001000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 3.569646441s ago: executing program 6 (id=2677): syz_open_dev$dri(0x0, 0x40100001, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="129f4f012157d1104705016870f3f100c716ef0092a2a305"], 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000), 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x406, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f00002ad000/0x1000)=nil, 0x1000, 0x2000005, 0x50, r0, 0x9a538000) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x190ec) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) sched_setscheduler(r6, 0x1, &(0x7f0000000000)=0x38b) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) r7 = gettid() syz_pidfd_open(r7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x7, {0x0, 0x0, 0x2}}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f0000000340)="cfa8fe71b9e8c101de1bfd4a22c6296c4e0bfdf31071ca7f42561386777e5a7e7ee4f735294ff293bba6ac6a9e558c073621cf6ea913591c1df0297751e5d7d5e2b11dae3682f7b2a05f8671d8a3d8e8720deead79c99dfb4cef3d7340b69c855920dbc9b8372a4fe71fcb84c51db7ee8ae219a3c0922b7f6fe1", &(0x7f00000003c0)=""/182, &(0x7f0000000480)="6b42bb71a091be7ca6626b0f7d712a6d59627529c7987214ad3800b96d9c25f9869e924d60499abe9b7ccbc390f769560e3310d458b7dffe0c5a801b1b8dab3095c16139a6a1cf8185b4707dd0ae2661bdf589272c2e5fd6da193fc228948e3298a96b940380774e5bb6c6c4e5c7be337efd36393a86ab320df392c5927e7e0553f05f195c327d5f4181baa60cba9652d01e5ed1069d22936cd4eb33", &(0x7f0000000040)="faa9fa6ff31937", 0x8, r5, 0x4}, 0x38) read$msr(r8, &(0x7f0000019600)=""/102400, 0x19000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004805, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000600)="ebe65c0df5b2b8a8c2b30dc753afd08784f6fdbb5f55c3cadd4e9566bd697e6755115994a6b81bfb7593b4924b39d0e018b7ef4f50110cb5fc4c002d10dbd335d7762ce114191e6ffb6d2f6572d6bf43ff929bc7c51927dc27a6427c56ad308eeb166cfbfbe58298003322aa684ed293181281014586351cfff32976063f4f64b61c008eca5c92d9589e761a53a7cc918675daa065", 0x95}, {&(0x7f00000006c0)="ae53ef8f6e2549dfdef0806d3e1221097a0abedea865689b6bf3a5815da6c1fc04cd32e22211283ee6c961bbb63412e1d8dcb0e9da60ca4997a1163a4331e14b24625d2b3adafb0b69746f2da9ba8f45", 0x50}], 0x2, 0x1, 0x5) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) 3.50922458s ago: executing program 1 (id=2678): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/228, 0xe4}, {&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/134, 0x86}], 0x4, &(0x7f0000000340)=""/234, 0xea}, 0x6}, {{&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x5}, 0xb1}, {{&(0x7f0000001840)=@rc, 0x80, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/240, 0xf0}, {&(0x7f00000019c0)=""/109, 0x6d}], 0x2}, 0x5}, {{&(0x7f0000001a80)=@rc={0x1f, @none}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b00)=""/184, 0xb8}, {&(0x7f0000001bc0)=""/91, 0x5b}, {&(0x7f0000001c40)=""/185, 0xb9}], 0x3, &(0x7f0000001d40)=""/239, 0xef}, 0xfffffff9}, {{&(0x7f0000001e40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001ec0)=""/158, 0x9e}, {&(0x7f0000001f80)=""/20, 0x14}, {&(0x7f0000001fc0)=""/95, 0x5f}], 0x3}, 0x7c28}], 0x5, 0x40000002, &(0x7f0000002200)={r1, r2+60000000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002240)={@in6={{0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x0, 0x0, 0x3f, 0x0, "7833ec9d36659cf646a35febc845d6dcb92ed6e74b0950720d68d045843b2e7ca3c3f598af68446c6c1731d833ccf6a97aa7d1d0d0b55e09785533e0fa05cfeace9b463ee1cf94073ed419201101e942"}, 0xd8) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000002340)="83f6ec4c4a41d89769426fc3047f8ec787477fa092cd82d2f1eb4dc4917e994054d41632d4856dfde94bde57ae97bdd5cafca22a6f38c53771bd659ebce52bc66e92216966c3a4550ff10de7c6524935fda1d22fbdb4331787a8cf33e2b70330436e8ace805b376c28f816a80e0d8dc6905532301fa2129816fb04511e98dfcd7857a39209d9813d0bf7ccce64bdac386e5d872f09d45b6efa419a482cd98f1fda217ddc958eafc7eb9fe7a643cca0c4d374428e", 0xb4, 0x4001, &(0x7f0000002400)={0xa, 0x4e24, 0x80, @mcast2, 0x8c4}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000002440)={"6dbccbf83745b51285ada20d9d992de6", 0x0, 0x0, {0x3, 0x3}, {0xffffffff, 0x5}, 0x6, [0xfffffffffffffff9, 0x7fffffffffffffff, 0x100000000, 0x2, 0x1, 0x1, 0x401, 0x4, 0x10, 0x11354f40, 0x3, 0x7, 0x8, 0x4, 0x5, 0x2]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000002540)={{r0}, r5, 0x2, @unused=[0x9, 0xfffffffffffff8cb, 0xb2fb544, 0x8000000000000001], @devid}) syz_io_uring_setup(0x77eb, &(0x7f0000003540)={0x0, 0xaa27, 0x400, 0x2, 0x90}, &(0x7f00000035c0), &(0x7f0000003600)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000003680)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x1, &(0x7f0000003640), 0x1, 0x8, 0x1, {0x0, r7}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000036c0), 0x18400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000003700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mq_timedreceive(r8, &(0x7f0000003740)=""/138, 0x8a, 0x200, &(0x7f0000003800)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003840)) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003880)='/sys/power/freeze_filesystems', 0x224080, 0x134) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000003980)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x24, 0x1407, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4000014) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000039c0)={{0x1, 0x400}, 0x100, './file0\x00'}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r8, 0x8008ae9d, &(0x7f0000003b00)) ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000003b40)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000003b80)={0x28, 0x6, r10, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x56100000000000}) getpid() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc0045540, &(0x7f0000003bc0)=0x8) ioctl$FITHAW(r8, 0xc0045878) r11 = gettid() r12 = syz_open_procfs(r11, &(0x7f0000003c00)='net/nf_conntrack\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDGKBENT(r12, 0x4b46, &(0x7f0000003c40)={0xa, 0x7, 0xa73}) 3.419095918s ago: executing program 2 (id=2679): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x20a43, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x300, 0x70bd2c, 0x4000000, {0x0, 0x0, 0x0, r4, {0x6, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x7, 0x8001, 0x0, 0x1, 0x8001, 0x401, 0x1}}, {0x6, 0x2, [0x2009]}}, {{0x1c, 0x1, {0x1, 0x0, 0x2, 0x2, 0x1, 0x3, 0xfffffff9, 0x5}}, {0xe, 0x2, [0x4, 0x54b, 0x1, 0x4, 0x5]}}]}]}, 0x78}}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = fcntl$dupfd(r7, 0x406, r7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000378f8668755269ed30e8d86f", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) 3.359708181s ago: executing program 5 (id=2680): mount(0x0, 0x0, 0x0, 0x10068, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r1 = getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1a000000ff0300000400e1ff050080000050", @ANYRES32=r4, @ANYBLOB="000e00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) listen(r4, 0x39b3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e657438706f72742c6e65740000001400078008000640000000000800134000"], 0x64}}, 0x0) ioctl$int_in(r4, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) chmod(0x0, 0x22) 2.386545325s ago: executing program 0 (id=2681): ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x1, 0x40, 0x5, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800000000000000000000ff00000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) getpid() sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.28519031s ago: executing program 5 (id=2682): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$x25(0x9, 0x5, 0x400000000000000) 2.224136168s ago: executing program 0 (id=2683): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x71) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.223414372s ago: executing program 1 (id=2684): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0xb, 0x7fffffff}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000100)={0xb5}) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000600)={0x1000, 0x0, 0x356, 0x1000, 0x3, 0x192b, 0x10, 0x2, {0x9, 0x5, 0x1}, {0x5, 0x6}, {0x6, 0x7, 0x1}, {0xe2de, 0x8}, 0x2, 0x10, 0x0, 0x6, 0x1, 0x566, 0x1, 0x5, 0x8, 0x0, 0x6, 0x0, 0x10, 0x0, 0x2, 0x11}) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, 0x18, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000d40080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3ca}) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) 2.032317934s ago: executing program 5 (id=2685): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000009740)=[{{&(0x7f0000000d40)=@can, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000dc0)=""/24, 0x18}], 0x1}, 0x46a9}, {{&(0x7f0000000e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/41, 0x29}, {0x0}, {0x0}, {&(0x7f0000003400)=""/103, 0x67}], 0x5, &(0x7f0000003540)=""/184, 0xb8}, 0x3}, {{&(0x7f0000004900)=@in6, 0x80, 0x0}, 0x9}, {{&(0x7f0000005d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000006dc0)=""/46, 0x2e}, 0x3}, {{&(0x7f0000006e00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000007100)=[{0x0}, {&(0x7f00000070c0)=""/31, 0x1f}], 0x2}, 0xffff}, {{&(0x7f0000007180)=@caif=@dbg, 0x80, &(0x7f00000093c0), 0x0, &(0x7f0000009440)=""/230, 0xe6}, 0x6}], 0x6, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) 966.611964ms ago: executing program 1 (id=2686): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, 0xffffffffffffffff, 0xfff82000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, &(0x7f0000000440)={0x0, 0x2078, 0x20, 0x0, 0x3a3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x20000010) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14053d5ecd974dd5bc7f2a7caad26f028485485d5c100abe6e6fc9cc95e00ad260cb7372338c406f5035c551"], 0x20}}, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) 945.510993ms ago: executing program 0 (id=2687): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async, rerun: 64) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4, 0x8010, 0xffffffffffffffff, 0x71862000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0xc, 0x1, 0xfff7fe0000000001, 0xfa0f, 0xffffffff}, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000280)="66b80a8800000f23d80f21f86635000000100f23f80f0f61ae8e363e780b0f20e06635000040000f22e00fc72df30fc7b2d600b852008ec00f01ca2e0f51412a263ef30f1efa", 0x46}], 0x1, 0x10, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = openat$cgroup(r3, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r9, &(0x7f00000002c0)='memory.pressure\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x8) (async) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001"], 0x14}}, 0x0) 717.154383ms ago: executing program 0 (id=2688): setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080)={0x2, 0x10, 0xfffffffa, 0x6}, 0x10) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x48}}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r4, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) write$tun(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb080045f0002c00004000002f9078ac1e0001e00000010000655800189078040000000000000086ddffff0000b200"], 0x3e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x100) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f000000c280)=[{{&(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000540)="c9344608777facf744afff9c5b02db3202b677225b5084c6b43f43e6da4f23b12576b8025f49663e3add860dacc111bfe9f87cac3e6d53e3287c9d8a6f4cd642cdbe64e0abf876fa0af1b1e0e89b5e8226c1396a2b12598ddfdd9a593f612585b6c3f3aa76654e16f1c6aa41955b1bf3a5d759c40f5e3c73cef6956497b6ceeef4a542e11347f6704b860ab2f475c5e56fa6a82ca804c0cd90de3b0a98c329c086fb9540436a0e29da5e08fdc3c6a4248ddb3fa513834bb1f7fb050a286bc17fd1211f9f5aaa1fd5a87979b9bbb4d957bf6ea083c12a87dde8be8c", 0xdb}, {&(0x7f00000002c0)="f4079d372135de1e8d8170a46ff4ec4b32755c4785fe784302507e56ae504be8d875a83e3fb36e7581808ba857f4bb557f4d8d5eb51a83f02f6f68cbca01f86145eda12d6b6c3175d195b500fc1e28171aad2a94cd6ae8b20994b648df70f90260ade9c14144ec5fdfed30d8a067efa46f769fd19d49e1eea53ee3f91ce30ab24b2f", 0x82}, {&(0x7f00000001c0)="e98770be10d2ced5a7d9b4e98f", 0xd}, {&(0x7f0000000640)="4f319c2c567ca8636cc1dc8a1095e6567cf8837d817da4fd672828f1ce99a80a81e97a53572480bcc48e9196b59784ecc0242aa63b07ba396d4d174cf621b349becaeca1965c6419e6c82fae7bb9db8edc5402f9e034c5777797de5385aa41930e9be70b272322fd7f1f5279e024ba49d1aa9cbde5878c793af7fc4d495eb93ec55a9e1bcf1ff2377d5496041d70c7daeb34bf84606cdd8646eebbe09ff29d2350b66b2603d48824098217ec1623eb1839e132f04b8c2b83befbe94072019cac7f73fc1619b6b805495bd107a94e5aa790f38469c9f50b", 0xd7}, {&(0x7f0000000740)="29dbfa4fa27a90be1eede9344649abf6f98038abe5d914c88ee5e9eee29677e6e6e44de6e68368390c36735015b4aff6fd660e05b1b3379998da673302b60f2dd29b7408119295e94c66a5fd1b2e6cb4ff6bbe8cfd89b67a60755d48d661a460ec14bc77d0ef17d2", 0x68}, {&(0x7f00000007c0)="18a11378cf739c03ba145dc0241802925d07a6af42e4225353139f9d3a9175c7d7c92a0e2e66cc472aed23a756915756ad2ed4f1f5e538e986cce7f2d66a694ec4c39611fe21bcd345f3fa813069c8f62d27f0fa44f8ba91f9af6dee6f7f717b5b71e8aeb2b03bb1c1113c7dfbd640ce7d4d41dfbd5b6fab85c36eda646810d80a19e1be40ef", 0x86}, {&(0x7f0000000880)="22d28b9e017d86bd26acf2958d4763f1d35820d4f5d4e81fa35bbeee419e84388e56e8053f9f78928c3a050176460d9761ff5c05f8fe4db4b9e48ed92bd3867b5152b4dd0aa2ec734c33ddc711aa90a2d31c9ce9a22c91af1373b0128e8085354a557ff4c939977e9e831d1023750a9029466aa41f9e595764b96b56ab1b831d84b97788918e8a54ed48ed2db80396b491648f5c516f7f3bc073678bcdf4b839aa8f9720b712f36cd431", 0xaa}], 0x7, &(0x7f0000000940), 0x0, 0x40010}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000ac0)="e4284b17de868eb2c46dd200255a460eb92af274746c878bc1f16860a541d2e97f8c0535e5f35520d76406fd64f07acd", 0x30}, {&(0x7f0000000b40)="3b9366ce951976214e98648353d9ba8e394f97e8e82c29b9d09c78f4a4018899abb82bccbe8ce0585641c6a5ea4a7acee191215bdf0d", 0x36}, {&(0x7f0000000b80)="7401b695bc1ced8c6af9b09ae18ff6448a783877df77199ed52328d1c5b1f32358a579968faecfbbf9ea4a631020536c219d2219dcd9ed88cf27afda139de1b36dddc7", 0x43}, {&(0x7f0000000c00)="915c21f06a3e0ff889098d3ceddc9f513bf9026aa1ed", 0x16}, {&(0x7f0000000c40)="04de9f089d3fea94c6084868c9fd2737b8a281f2cfa1392741fdc9cc3f79e4875d100f9a41e552a3ddc0637aebe96c97073252380e534f984812a05d8a608ad302be121c76ff58c54fd1f3e44ed6dc70645d2c01f5509d4d46c7880c25c6536630376f6ce117e5594d60d216fc7669bc5dab92c56cc3466b1fc25f4dc06c84e070125bfb9452fa77627e4391691896f1affdc469efe8f9432aa46798bb2e0c51d4b1b3ae549cfab580a2a35dd8dae394fac1c2429652188b99112e688afe", 0xbe}, {&(0x7f0000000d00)="4ea35af6b8cf68f748f7f5b36fc62f79e17e526c2b1df632adcc436b3806f53b8cc5f9e1071d7872c05e7e98e0533d5a45f917cc4bf05d9ff382efc74308f6d7be46207bb6cb25c27553bd56cafe25ab782ad3e66550952469db6404b2a054c967b6f5a2e130baac77471f4b34431d1edbae92b85209c7ae6ee9aae48f090bf05e970ca464ff6b1c66975ad412f1185d57ab5a0aa4b85b5b03635873aa274cefa01da069811e92057f7117a4467e655a9c0ca1bf19361abf3e9541231e20533834158528f04ee23b8d35ec59dce8", 0xce}, {&(0x7f0000000e00)="108cdfbd9e1256e80cf555d7eb96160a44d22219db6db7962cf35aac976df716849c2de1a22f9b74f7c3353de0e1f9eb3c90a4c889541effdfc4810120983833d1f734b14608b88e31df22dc2996ccf2d62353f4c4c8ae5e798bd04b915c360131b0435bd5ff09931c3d8beb0b97b25bfc8fd4e9397cc898a41c", 0x7a}, {&(0x7f0000000e80)="4c8150f7bd00f3cf6afae69d248207be227e50f2c06395340c8e0fb43f7425060d76668acfd27ccfb889d4272133e916f68bfca3f80ccfe366", 0x39}], 0x8, &(0x7f00000010c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r10, r3, r3, r5, r1, r3, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x60, 0x2404c8d2}}, {{&(0x7f0000001180)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001200)="e64c43a0b919fbb3e9b7a0b6f860ab4a00a881bcb4bb232583e79dcb48c038826d84c6eec0d68691edbca268b25f110c6f673778bfedc8ea71f3eefefc8adfebc7cddedbcea2be542429cffcd44b2a51b27c9e5c2a0b9cd1884bcd665cbe2df0edc3c78a8cb9f16fc2d9b491ac2dcb8842abf66e97d6ec71694afa9cfdc0109cf1c7af348527cad461a4b0d8af3e9d29e429a1eb6be40186254200c97505984cfd4051103d003c2c5e1b15ad23", 0xad}, {&(0x7f00000012c0)="9d7c3740082f8b4b28dc13571ca2715e9c13e7866e07fad24e5f1abcc9f14488104a94edf084faec68b1e743b2f34e3c3cb23d042bc5b20b4fa9f8cc11a23b41e0affd04ae008aafa2136ebfde7b0ba6cf7624852d03fd369e696a49c611ea1328d9d013e0acbe0ebe8ead159117d2", 0x6f}], 0x2, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x1}}, {{&(0x7f00000013c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001440)="a342201fdcbced55e9db665393b20c21c83da654a2db2e551b3a7d6488134cd4f2f31ec9085267a764bf34226639628a4935ec207a9cbbd3423fd73d3a56a6fe9c70470228fab968d4ff2c185d9439789031e631be97daebc7928878e1d8e900c3fc0bf07d139d60695a45c2f91f7a6d45575a58257942219ccff26a2e71ea7fe4780ac6b1acf15edb3e3679", 0x8c}], 0x1, 0x0, 0x0, 0x40000}}, {{&(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000015c0)="ab13f7f99320e3267400adf293796edb54efdb876c11e44aa4f76393d5b6ca5523d64b32b6cc5be66e3fce658283dc65cb8aaff527405aeb8c0526a8e06c51b43c2a172fdcd011bc043bd42508b2459079aa7af94caeef56983730a3ef81d5a6b2fa0fc5c239e3969da3813c4eb24958fe43455fa48a21319b9fd60136d31089132ce59097d0bece998e70f87a834cb1e0e6b37a4656a66149130e2d06406518d7aa749fc58ad0178a018eecd2445bc67ce3d4b04687ce31bd5a094b5800031cead7a081708e7c74c054002383df6e5bd2f862e75e98fd671a555eebe62aa2cb7e252c87", 0xe4}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000016c0)="1b6efd237abfa9cadca3968e729153b394b84f1f76947e8f88d3ae9887127628d05dc178c8dfb7e6c1348f1b752a1aa99dc26be383d800dc207b5b1bb7c687cf605751f5203cf95dddf3338aa2ce2e1c702b090663c7aeadaff2a7f4c517d4c57fec8a69a3a94d67a729a3bbf4a9a7304ad89692f1e8284c5535ada55ee866b48a6638d17b3dc883cca405a9c28181d4a16f8851fed86fc7705cbc31e829e914974e3a589e238253a7c72912ae", 0xad}, {&(0x7f0000001780)="74c83326da4880575b9c1691d574a9a13f15ae4a689d5c687c727ea38a43da4c297b8c7bf7e412386bad585a7276a5a32a1acd1b299117f684df87c562a3972f9692fe69b4cb79fb3de0eac49e149d148ab5b3cc3e74c4d73b64f35553b617a16b3ab3ee7a5030f4d3d52b1be10fe8f514cb4895331276ab554130970fdef08d932b1cb7d2248f568ead9a9123cd6fdbbbd8", 0x92}, {&(0x7f0000001840)="4ba150c5fca0cedc4ce95f0544dc183da78a1dcaec3958c68982b793c5ebb8385cfdc4f524a6bb08160bf6d17712b6a11608c2ac8a30a026a6e8197c9d69080cc31c9b44ca32d0b3e3381954c339afef685d2c1629e66ae27ebc", 0x5a}, {&(0x7f00000018c0)="5c74ba56364f5373e369bc7463bc1a661b3fcb95de7899a558b9eb11195c914f355761837120245781ab9d14c5548d281169763d9827de0df3b0ce366b526c425eb8e1b7e774588d522b402138214686700d89cee63453375e30e2a309ad2b5863551a9b3126d846", 0x68}, {&(0x7f0000001940)="a7fc843f838388c7cde2e15b2474e6b84a426cafcbd05ad1dd316d213226da0cdebfc72df52d77b88dff6a288dd116eaa027592982df2cfe1b7f30b0f79e8971aee6efc72abf4550e31278012382478340fa04cd036857d7e77166c0607aacea1a3c1670e3e4624cb6eb8697a4bd2dce7e3edb5492efda9559fcc9f63ba6a6ca405085dce781ede10ca03d169fe6ea963ab39871a6b959ebe8c53b204ab38938109b2de4996ec03c6803e542fa68a8809139e2a8a4cfbfe819fd86a13d604c629342643528e1274089cf", 0xca}], 0x7, &(0x7f0000001ac0), 0x0, 0x40000c0}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)="945c90517e57d014be3b542935cf6f81de0f310b228dfc7d4a0cafb4357d755f7f3d9e9bf38dc3efd84c6d73493b9aeecdec2524355f54dac7ff2a93966ce83b46c83fe4159d1a7a8c9951b182eae2fb115609d0838349af5334ba82cfbeeb28ec93f87717bd109abc3d9d0ec270a47bf6feb915bb4dddf478d6fe9ae2663f80f1e2a707db453cec7b5cbbd21051e1b9781874c36140c7c83bcc0bbe0cd2067049c1fe25af8b7791cdc9733a1b0b5e9553db39835d663ab76ec2377f99b8dd4ebef6017605902859a37a12bac82ef2d051a61c392cf90ae8b570bf8b870b59bb5b71d5f1dba910d2dd87f34badbe019f31edeb5d", 0xf4}], 0x1, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x30, 0x1, 0x1, [r10, r1, r1, r10, r2, r6, r7, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0, 0x4000000}}, {{&(0x7f0000001f40)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000000f40)="ce04b55cb2a66d906f407dc8872d6d31cc384c5b16662d046409f0bbf86f70df483c768bf3a0755b7db023359350f3348928080b1df5818fddc8dac912fc7e96e1b3799b9fc21680f0a89bd1b75581b7aee2", 0x52}, {&(0x7f0000002040)="b8616075eba2ae31251fb3e17d55b1877295aeb610e991c90151e164e3d8846d26a8cb8b80b3a3b56db7aa8cebf4078e36f6885d13cea53c5b48c8a5f043016154bbffa857970c3e9855a3d85ce15efb5ae9ed73d863cefef96d9bbdc6ad1b6dc642efa8fcff", 0x66}, {&(0x7f00000031c0)="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", 0x1000}, {&(0x7f00000041c0)="90929f3c267d38ee00326d6e8bc3c52d2e0512b22293f0fbb59dabe4ae363d06b3c5e151b406b7b7c4971085fce05359aef7509c2f7f923669fbb63e8a50e5b46fb0cbc824e91df8311e0f60cbb34badec2fc9a4a9b2c5c8c555e793b165b0511381a9b3924583ad541dcfbfa8b2ba2b434b1580fd027c607ba0f367fb2b", 0x7e}, {&(0x7f0000004240)="c61e5c5c2fa33f4bf3626aa47ac3569b73373cff5d02d18e091e9f4aef31400ad785b78ab7d5bace5f9bacc0f6ee6f75bce6ecf34f6c7afc0e137c372957d715f5ac960080e53cd40a8ea7e5327eae4e6c4d1f880e32431b0a059e7b5a1f7ceaf765dd1b7908fee01d66494246f1bc31ca36f7a36666a1286527dfdd31c89a59feb5aaa209474220e28ee5712fc52a1a419f2d9e9d7e00958e35450ffe05f577740a376781c33b0eac173f152582b3b7ba95b2c8bf603e", 0xb7}], 0x5, 0x0, 0x0, 0x40000}}, {{&(0x7f0000004380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004a00)=[{&(0x7f00000020c0)="154f3969faff3240bb7f3fcbc0bf9ef4f75b3fac2f33ec85e6c440ed9674e615e2006e52d7f05d752839f47b3d660a57edae05", 0x33}, {&(0x7f0000004400)="73f34e72d5", 0x5}, {&(0x7f0000004440)="e35f360c8d0f3d234410d1d728f4ead69d7caaa3a06ecef164aa376207280c636380dd8812d6bea67d8ca6fb35679a124684513ae6f2da0ac0965bd710c1d8e304e4721aaccde3a6b331f7ae6d1ec8fee6435e91232c101dfb2bd2385fd8a793c18c7c1ac919925c6b4a4b8d55d9cf11970b50574de597b05ee3a5fb8a016097f38c6ff22f72a36a68a343599a9af8b60129d9098da2399af943e94a1459f65a334da52c45ea133edb9e", 0xaa}, {&(0x7f0000004500)="507e9a611fc951a92478746d2ab9203d0dc37eccca82d8345dae5d34e4c89246c181735e7cb2a6e2d9a6207d6a2ebcb2ad394c8364222660515f52c6dd819b61ecd245aa231c95c650a48cf7152cedd004003a465eb19ca55652b385052ab76e8cd06afac813a6bd58d7610d610802f63854b58ae92996d26a1277a42a73fdb8efbbbec813d2f009bc8950ec0139fb18042743c501b09485fb72d80d3cf7d6770329d40fc70f29e1cb293fd6567043a1d0896d79a99af9045a680f7bfdfc61427d77f183f2cc86f14ed01d14400419ecf1869008867ac61433d18b00ca5ea20a9d7e98c04b", 0xe5}, {&(0x7f0000004600)="dc08a3ea4edf17632942dee880d82876dac2c1a92c8604551af871b453ca8f24aac72eb7e49db4594b9ac1e153dcfb1ce01c1cdbd3cbe28565eda1b09565dcd7ea0850677b26e874d4a6f2a223a6cce7820644bdfb6ac34be7f2494a885a999b6a89c6d48a188f48792ce76b2dd6d3505c026d4b575495411e64cb3552549a2b3490a1407e7ab878f4a5ce9d10184c10b75809a1c8e148ceb7f7f2a981456843019dfffd8aefb3ea4e63a2d3ab144043e1ace7c5143a2e77566a319bb3afb64a0901e5cb5bafcc6957ae0c3345d49c381eef6d50a72d99378ca627e9234c3a68d34ccdbab36004", 0xe7}, {&(0x7f0000004700)="db72607adf5caff44ea9ba3c39818604cc1459c060b8ee3d91215ca26f63e281827d32661051ca82bcd4e2fc4c362c2728214611fc5486f8bdec7c65e5dcfcadbafd316d93a9b60732780371f28e295c32cc32ab2ae0b4917bff80cf56e4e5fce12e1f87944e7a5471f3aad5c1836c8aa81c7b2d336f201d0087a6457f1d41422697f0b59f83aea96564a8c7fee0c6138d07347e80f8c8d16f97057791a3059d3195b82a88f8d992c5850810c079fa67034a50b6fb26b6d7d574d08593f507037a57cca7a5b9a25364dc7e26519fbd940dc5f041db90e76ea3fcf2010a337891", 0xe0}, {&(0x7f0000004800)="4f550c9cbc87ebf5131d5839c1a9d547ec91f5107ffccf59aa24d18b41311012ba1fa47b4bf1f72eb018f3450da9ef4451849be500e14fe3b6543ea8c9c9cec4ed455c2ac74ace183319738c", 0x4c}, {&(0x7f0000004880)="8c5b47db7b0a581245259e1cc099a0d2bc401657bd9673bbe9dea76354ee31adcab75fe27ad31b727d1d5ee314b964b847f8bf5db23f92465e22d9f4627dbc2c91a46e70571e3ebfd2c2", 0x4a}, {&(0x7f0000004900)="4a7328f4a3a30e31e1c72c0eab9a9916b2f77a6180d94a4bdc6149015c21497a87f5e1e3309b6015e4ac4263e7fdf790a64dc6fa9402720029fa41acf1849520ec0a27f01d9d7e2cfb95d0df93d07be8514e03b1654210436927eff50e6ecacba4ff3a9cc492379254bafb508843299843c603e3e67a8a9d3dfc0565ad8c12fe075fb9ee94fc484d1a21c5b0a278dbc97eebb2557bfe20427a487ce7e19b6756e7e1550385946647ccc6f58a112daba9d9647c7e7a374f5e1092a67ee59c712199ead61e29", 0xc5}], 0x9, &(0x7f0000004cc0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, r6, 0xffffffffffffffff, 0xffffffffffffffff, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x8, 0x4c8c1) r11 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r11, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffff0e0280c20000030800460000240066000000119078000000000000000044048d004e244e20000c907801000000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 715.666044ms ago: executing program 5 (id=2689): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba12000100000000000109022400010000e8010904000001030000000921fd7f0001226b00090581030002000000"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) r0 = socket(0x2, 0x2, 0x0) connect$netrom(r0, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) map_shadow_stack(&(0x7f0000d89000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x0, 0x0, @mcast1, 0xffffff08}}}, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x4e24, 0x6, @mcast1, 0x4}}}, 0x88) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[@ANYBLOB="0380c2000000ffffffffffff86c14201070000481a0000000000000000000000000000000000ff020000000e2200489078030000000000003217116f08971b816bada0001c62acdfad945d2b4f6f2255ad1b963029028df42bc19c774b2efecb22f91768539b1bf983c8123155f58650f790b44486a262078a7de5780000"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_rm_watch(0xffffffffffffffff, 0x0) timer_delete(r4) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xe}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) 0s ago: executing program 6 (id=2690): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0xe, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) pwrite64(r0, &(0x7f0000000040)="634c7fdaaa4cf510d9bdbd1f1e3c136ac4ed2324b62029dd5c2c81277a0dba088d015d364aca4d2b656a600553338fe5486520804a537b6a51300afea28170ad7962e78a293457112dba79bd880c7df74d94628531fcb8c106cee3cced1fb296b64308edc5c3fe30819ec5e0ed32f3f2957f0e2a5915155706c03ce2f08c6633de7864522df2107a5338810e4f812f27e6a073d4d4650bc2973ca9bc9511c1047c5d7fdca2c4fbb12d6fc9ee0d1477f2fb88a06237020c4047ed447ed418cc1c8e4e4f410c", 0xc5, 0xfffffffffffffffc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[], 0x5c}}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) kernel console output (not intermixed with test programs): : syz [ 782.251738][T15400] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 782.282618][ T30] audit: type=1400 audit(2000000586.431:31452): avc: denied { create } for pid=15405 comm="syz.4.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 782.742652][ T30] audit: type=1400 audit(2000000586.440:31453): avc: denied { ioctl } for pid=5161 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=3828 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 782.888534][ T30] audit: type=1400 audit(2000000586.459:31454): avc: denied { map_create } for pid=15405 comm="syz.4.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 782.909510][ T30] audit: type=1400 audit(2000000586.459:31455): avc: denied { create } for pid=15405 comm="syz.4.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 782.970327][ T30] audit: type=1400 audit(2000000586.468:31456): avc: denied { prog_load } for pid=15405 comm="syz.4.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 783.154536][T15426] audit: audit_backlog=65 > audit_backlog_limit=64 [ 783.408971][ T9021] Bluetooth: hci6: Frame reassembly failed (-84) [ 784.611182][ T792] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 784.674429][ T5959] usb 3-1: USB disconnect, device number 101 [ 784.729626][T13000] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 784.837128][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.970228][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.991773][T13000] usb 6-1: Using ep0 maxpacket: 8 [ 785.004442][ T792] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 785.014265][ T792] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 785.023331][T13000] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 785.038381][T13000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 785.046692][ T792] usb 5-1: Manufacturer: syz [ 785.059851][ T792] usb 5-1: config 0 descriptor?? [ 785.068235][T13000] usb 6-1: Product: syz [ 785.079484][T13000] usb 6-1: Manufacturer: syz [ 785.086969][T13000] usb 6-1: SerialNumber: syz [ 785.101454][T13000] usb 6-1: config 0 descriptor?? [ 785.113326][T13000] gspca_main: sq905-2.14.0 probing 2770:9120 [ 785.327935][T15420] 9p: Bad value for 'rfdno' [ 785.562745][ T5128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 786.098587][ T792] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0011/input/input30 [ 786.149001][T15450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2332'. [ 786.200340][ T792] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0011/input/input31 [ 786.255788][ T792] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0011/input/input32 [ 786.332882][ T792] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0011/input/input33 [ 786.446318][ T792] uclogic 0003:256C:006D.0011: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 786.478244][T13000] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 786.497082][T13000] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 786.534098][T13000] usb 6-1: USB disconnect, device number 6 [ 786.771551][ T30] kauditd_printk_skb: 223 callbacks suppressed [ 786.771567][ T30] audit: type=1400 audit(2000000591.444:31672): avc: denied { ioctl } for pid=5161 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3858 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 787.016686][ T30] audit: type=1400 audit(2000000591.482:31673): avc: denied { execmem } for pid=15458 comm="syz.2.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 787.062086][ T30] audit: type=1400 audit(2000000591.566:31674): avc: denied { read } for pid=5161 comm="acpid" name="event5" dev="devtmpfs" ino=3858 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 787.224613][ T30] audit: type=1400 audit(2000000591.566:31675): avc: denied { open } for pid=5161 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3858 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 787.336418][ T30] audit: type=1400 audit(2000000591.566:31676): avc: denied { ioctl } for pid=5161 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3858 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 787.365315][ T10] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 787.619133][ T30] audit: type=1400 audit(2000000591.613:31677): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.649905][ T30] audit: type=1400 audit(2000000591.613:31678): avc: denied { read write open } for pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.679860][ T30] audit: type=1400 audit(2000000591.613:31679): avc: denied { ioctl } for pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.892345][ T30] audit: type=1400 audit(2000000591.772:31680): avc: denied { read } for pid=15461 comm="syz.0.2335" dev="nsfs" ino=4026533280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 787.913738][ T30] audit: type=1400 audit(2000000591.772:31681): avc: denied { open } for pid=15461 comm="syz.0.2335" path="net:[4026533280]" dev="nsfs" ino=4026533280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 789.609373][ T9] usb 5-1: USB disconnect, device number 97 [ 790.922504][ T792] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 792.139273][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 792.139289][ T30] audit: type=1400 audit(2000000596.468:31769): avc: denied { ioctl } for pid=15482 comm="syz.0.2343" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 792.215417][ T30] audit: type=1400 audit(2000000596.542:31770): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 792.267464][ T30] audit: type=1400 audit(2000000596.542:31771): avc: denied { open } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 792.292242][ T792] usb 1-1: unable to get BOS descriptor or descriptor too short [ 792.308710][ T792] usb 1-1: not running at top speed; connect to a high speed hub [ 793.171482][ T30] audit: type=1400 audit(2000000596.542:31772): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.488058][ T30] audit: type=1400 audit(2000000596.589:31773): avc: denied { ioctl } for pid=15482 comm="syz.0.2343" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 794.071155][T11540] block nbd0: Possible stuck request ffff888028140000: control (read@0,1024B). Runtime 570 seconds [ 794.081945][T11540] block nbd0: Possible stuck request ffff888028140200: control (read@1024,1024B). Runtime 570 seconds [ 794.104724][T11540] block nbd0: Possible stuck request ffff888028140400: control (read@2048,1024B). Runtime 570 seconds [ 794.116299][T11540] block nbd0: Possible stuck request ffff888028140600: control (read@3072,1024B). Runtime 570 seconds [ 794.128269][ T30] audit: type=1400 audit(2000000596.617:31774): avc: denied { ioctl } for pid=15482 comm="syz.0.2343" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 794.176629][ T792] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 794.221135][ T792] usb 1-1: can't read configurations, error -71 [ 794.294022][ T30] audit: type=1400 audit(2000000596.617:31775): avc: denied { read write } for pid=15489 comm="syz.1.2342" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 794.531011][T15513] 9pnet: Found fid 0 not clunked [ 794.685532][ T30] audit: type=1400 audit(2000000596.617:31776): avc: denied { open } for pid=15489 comm="syz.1.2342" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 794.766157][ T30] audit: type=1400 audit(2000000596.627:31777): avc: denied { ioctl } for pid=15489 comm="syz.1.2342" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 794.809456][ T30] audit: type=1400 audit(2000000596.627:31778): avc: denied { map_create } for pid=15489 comm="syz.1.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 794.995446][T15519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.420699][T15523] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2351'. [ 795.432965][T15523] netlink: 'syz.0.2351': attribute type 10 has an invalid length. [ 795.440800][T15523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2351'. [ 795.450351][T15523] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 796.098083][T11735] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 796.292459][T11735] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 796.459961][T15549] netlink: 'syz.1.2358': attribute type 10 has an invalid length. [ 796.468133][T15549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2358'. [ 796.488454][T15549] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 796.645700][T11735] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 796.713130][T11735] usb 6-1: config 220 has no interface number 2 [ 796.731373][T11735] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 796.753354][T11735] usb 6-1: config 220 interface 0 has no altsetting 0 [ 796.762344][T11735] usb 6-1: config 220 interface 76 has no altsetting 0 [ 796.773242][T11735] usb 6-1: config 220 interface 1 has no altsetting 0 [ 796.807960][T11735] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 796.820365][T11735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.828450][T11735] usb 6-1: Product: syz [ 796.835750][T15550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2355'. [ 796.849931][T11735] usb 6-1: Manufacturer: syz [ 796.865903][T11735] usb 6-1: SerialNumber: syz [ 797.204809][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 797.354573][ T9] usb 2-1: device descriptor read/64, error -71 [ 797.496666][ T30] kauditd_printk_skb: 197 callbacks suppressed [ 797.496688][ T30] audit: type=1400 audit(2000000601.481:31976): avc: denied { ioctl } for pid=15551 comm="syz.1.2359" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 797.664864][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 797.878492][ T9] usb 2-1: device descriptor read/64, error -71 [ 797.928162][ T30] audit: type=1400 audit(2000000601.519:31977): avc: denied { ioctl } for pid=15551 comm="syz.1.2359" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 798.074456][ T9] usb usb2-port1: attempt power cycle [ 798.359345][ T30] audit: type=1400 audit(2000000601.771:31978): avc: denied { ioctl } for pid=15551 comm="syz.1.2359" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 798.438088][ T30] audit: type=1400 audit(2000000601.940:31979): avc: denied { create } for pid=15557 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 798.498763][ T30] audit: type=1400 audit(2000000601.940:31980): avc: denied { prog_load } for pid=15557 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 798.645445][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 799.009574][T15573] 9p: Bad value for 'timeout' [ 799.197367][T11735] usb 6-1: selecting invalid altsetting 0 [ 799.200701][ T30] audit: type=1400 audit(2000000601.940:31981): avc: denied { bpf } for pid=15557 comm="syz.0.2362" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 799.236611][T15568] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2365'. [ 799.247070][T15568] netlink: 'syz.2.2365': attribute type 10 has an invalid length. [ 799.254881][T15568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2365'. [ 799.291195][T15568] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 799.311816][ T9] usb 2-1: device descriptor read/8, error -71 [ 799.350567][T11735] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 799.385541][T11735] uvcvideo 6-1:220.0: No valid video chain found. [ 799.395789][T11735] usb 6-1: selecting invalid altsetting 0 [ 799.412571][T11735] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 799.434205][ T30] audit: type=1400 audit(2000000601.940:31982): avc: denied { create } for pid=15557 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 799.435911][T11735] usb 6-1: USB disconnect, device number 7 [ 799.574677][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 799.583315][T15576] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2366'. [ 799.599865][ T30] audit: type=1400 audit(2000000601.940:31983): avc: denied { create } for pid=15557 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 799.636000][ T9] usb 2-1: device descriptor read/8, error -71 [ 799.654059][T15580] syzkaller1: entered promiscuous mode [ 799.664044][T15580] syzkaller1: entered allmulticast mode [ 799.671547][T15581] netlink: 356 bytes leftover after parsing attributes in process `syz.4.2368'. [ 799.695809][ T30] audit: type=1400 audit(2000000601.940:31984): avc: denied { write } for pid=15557 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 799.696571][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 799.760033][ T9] usb usb2-port1: unable to enumerate USB device [ 799.769326][T15581] audit: audit_backlog=65 > audit_backlog_limit=64 [ 800.410716][T15601] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 802.820603][T15600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2372'. [ 802.863120][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 802.863134][ T30] audit: type=1400 audit(2000000606.495:32122): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.970274][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2374'. [ 802.979307][T15616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.341102][T15591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 803.360545][ T30] audit: type=1400 audit(2000000606.495:32123): avc: denied { read write open } for pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 803.385858][ T30] audit: type=1400 audit(2000000606.495:32124): avc: denied { ioctl } for pid=5817 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 803.453456][ T30] audit: type=1400 audit(2000000606.589:32125): avc: denied { create } for pid=15610 comm="syz.2.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 803.657226][ T30] audit: type=1400 audit(2000000606.589:32126): avc: denied { bpf } for pid=15610 comm="syz.2.2374" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 803.680831][ T30] audit: type=1400 audit(2000000606.598:32127): avc: denied { write } for pid=15610 comm="syz.2.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 803.683285][ T5959] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 803.703144][ T30] audit: type=1400 audit(2000000606.832:32128): avc: denied { read write } for pid=15610 comm="syz.2.2374" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 803.786944][ T30] audit: type=1400 audit(2000000606.841:32129): avc: denied { open } for pid=15610 comm="syz.2.2374" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 803.871113][ T30] audit: type=1400 audit(2000000606.841:32130): avc: denied { ioctl } for pid=15610 comm="syz.2.2374" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 804.032583][ T5959] usb 3-1: device descriptor read/64, error -71 [ 804.281098][ T30] audit: type=1400 audit(2000000607.075:32131): avc: denied { prog_load } for pid=15615 comm="syz.0.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 804.452951][ T5959] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 804.529405][ T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 804.592009][ T5959] usb 3-1: device descriptor read/64, error -71 [ 804.631237][T15632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2380'. [ 804.698827][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 804.710045][ T5959] usb usb3-port1: attempt power cycle [ 804.736714][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.742858][T15639] 9pnet_fd: p9_fd_create_tcp (15639): problem connecting socket to 127.0.0.1 [ 804.758580][T15638] 9pnet_fd: p9_fd_create_tcp (15638): problem binding to privport [ 804.769586][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.803493][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 804.819595][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.840798][ T9] usb 5-1: config 0 descriptor?? [ 805.051722][T15644] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2384'. [ 805.053383][T15643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2383'. [ 805.066022][T15644] netlink: 'syz.5.2384': attribute type 10 has an invalid length. [ 805.077714][T15644] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2384'. [ 805.090425][T15644] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 805.098015][T15644] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 805.113392][T15644] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 805.137335][ T5959] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 805.181187][ T5959] usb 3-1: device descriptor read/8, error -71 [ 805.507770][ T5959] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 805.813831][ T5959] usb 3-1: device descriptor read/8, error -71 [ 805.964341][ T5959] usb usb3-port1: unable to enumerate USB device [ 806.315460][T15657] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 806.969956][T15667] comedi comedi4: bad chanlist[0]=0x0015c000 chan=49152 range length=2 [ 807.100329][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.107137][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.124955][T15670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2392'. [ 807.897982][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 807.904042][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 807.937955][ T9] usb 5-1: USB disconnect, device number 98 [ 808.256121][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 808.256139][ T30] audit: type=1400 audit(2000000611.537:32385): avc: denied { write } for pid=15675 comm="syz.5.2395" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 808.295235][T15684] random: crng reseeded on system resumption [ 808.365490][ T30] audit: type=1400 audit(2000000611.574:32386): avc: denied { write open } for pid=15675 comm="syz.5.2395" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 808.780095][ T30] audit: type=1400 audit(2000000611.621:32387): avc: denied { create } for pid=15675 comm="syz.5.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 808.789258][ T5809] overlayfs: failed lookup in lower (newroot/449, name='bus', err=-40): overlapping layers [ 808.898894][ T30] audit: type=1400 audit(2000000611.621:32388): avc: denied { read } for pid=15675 comm="syz.5.2395" dev="nsfs" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 808.920817][ T5809] overlayfs: failed lookup in lower (newroot/449, name='bus', err=-40): overlapping layers [ 809.008218][T15673] ALSA: mixer_oss: invalid OSS volume '' [ 809.020807][ T30] audit: type=1400 audit(2000000611.621:32389): avc: denied { open } for pid=15675 comm="syz.5.2395" path="net:[4026532930]" dev="nsfs" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 809.051116][ T30] audit: type=1400 audit(2000000611.621:32390): avc: denied { create } for pid=15675 comm="syz.5.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 809.098345][ T30] audit: type=1400 audit(2000000611.621:32391): avc: denied { mount } for pid=15675 comm="syz.5.2395" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 809.128217][ T30] audit: type=1400 audit(2000000611.630:32392): avc: denied { search } for pid=15675 comm="syz.5.2395" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 809.206565][ T30] audit: type=1400 audit(2000000611.630:32393): avc: denied { search } for pid=15675 comm="syz.5.2395" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 809.297160][ T30] audit: type=1400 audit(2000000611.630:32394): avc: denied { search } for pid=15675 comm="syz.5.2395" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 809.338568][ T24] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 809.415581][T13268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.524011][ T24] usb 1-1: too many configurations: 206, using maximum allowed: 8 [ 809.567955][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 809.586787][T13268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.598916][ T24] usb 1-1: can't read configurations, error -61 [ 809.766313][ T24] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 809.788138][T13268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.958501][T13268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.994904][ T24] usb 1-1: too many configurations: 206, using maximum allowed: 8 [ 810.657060][T15710] IPVS: fo: FWM 3 0x00000003 - no destination available [ 810.787145][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 810.805642][ T24] usb 1-1: can't read configurations, error -61 [ 810.825209][ T24] usb usb1-port1: attempt power cycle [ 811.058929][T13268] bridge_slave_1: left allmulticast mode [ 811.091765][T13268] bridge_slave_1: left promiscuous mode [ 811.097569][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.151781][T15714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2404'. [ 811.230815][ T24] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 811.270865][ T24] usb 1-1: too many configurations: 206, using maximum allowed: 8 [ 811.283671][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 811.300804][ T24] usb 1-1: can't read configurations, error -61 [ 811.319141][T13268] bridge_slave_0: left allmulticast mode [ 811.324792][T13268] bridge_slave_0: left promiscuous mode [ 811.346262][T13268] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.455777][ T24] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 811.510877][ T24] usb 1-1: too many configurations: 206, using maximum allowed: 8 [ 811.542672][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 811.550251][ T24] usb 1-1: can't read configurations, error -61 [ 811.577445][ T24] usb usb1-port1: unable to enumerate USB device [ 811.680197][ T5128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 811.690107][ T5128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 811.701687][ T5128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 811.734083][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 811.741675][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 812.290468][T13268] team0: Port device bridge1 removed [ 812.352183][T15741] xt_hashlimit: size too large, truncated to 1048576 [ 812.431344][T13268] team0: Port device bridge2 removed [ 812.508835][T15747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.668013][T15752] netlink: 'syz.0.2411': attribute type 10 has an invalid length. [ 812.680669][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.088862][T15727] lo speed is unknown, defaulting to 1000 [ 813.094801][T13268] tipc: Left network mode [ 813.442134][T15762] 9p: Bad value for 'timeout' [ 813.749782][ T30] kauditd_printk_skb: 273 callbacks suppressed [ 813.749799][ T30] audit: type=1400 audit(2000000616.682:32668): avc: denied { search } for pid=15760 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.888317][ T30] audit: type=1400 audit(2000000616.682:32669): avc: denied { search } for pid=15760 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.958121][ T5128] Bluetooth: hci2: command tx timeout [ 814.108092][ T30] audit: type=1400 audit(2000000616.682:32670): avc: denied { search } for pid=15760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.134217][ T30] audit: type=1400 audit(2000000616.682:32671): avc: denied { search } for pid=15760 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.158344][ T30] audit: type=1400 audit(2000000616.682:32672): avc: denied { search } for pid=15764 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.265210][ T30] audit: type=1400 audit(2000000616.682:32673): avc: denied { search } for pid=15764 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.301672][T15727] chnl_net:caif_netlink_parms(): no params data found [ 814.355817][T15760] audit: audit_backlog=65 > audit_backlog_limit=64 [ 814.365855][T15779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 814.382317][T15760] audit: audit_lost=388 audit_rate_limit=0 audit_backlog_limit=64 [ 814.393186][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 814.647757][T15793] binder: binder_mmap: 15783 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 815.314911][T15727] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.322002][T15727] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.411035][T15727] bridge_slave_0: entered allmulticast mode [ 815.418431][T15727] bridge_slave_0: entered promiscuous mode [ 815.427499][T15727] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.436710][T15727] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.443869][T15727] bridge_slave_1: entered allmulticast mode [ 815.532906][T15727] bridge_slave_1: entered promiscuous mode [ 815.598659][T15814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2423'. [ 815.685483][T15727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.723348][T13268] hsr_slave_0: left promiscuous mode [ 815.763062][T13268] hsr_slave_1: left promiscuous mode [ 815.770470][T13268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.859507][T15819] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2421'. [ 815.875802][T13268] pim6reg (unregistering): left allmulticast mode [ 816.120439][T15812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2422'. [ 816.182626][ T5128] Bluetooth: hci2: command tx timeout [ 816.406390][T13268] team0 (unregistering): Port device team_slave_1 removed [ 816.458876][T13268] team0 (unregistering): Port device team_slave_0 removed [ 816.534313][ T8374] smc: removing ib device syz2 [ 816.603389][T15727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.886083][T13000] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 817.042353][T15833] 9p: Bad value for 'timeout' [ 817.089283][T13000] usb 1-1: Using ep0 maxpacket: 32 [ 817.311977][T13000] usb 1-1: unable to get BOS descriptor or descriptor too short [ 817.322513][T15727] team0: Port device team_slave_0 added [ 817.339779][T13000] usb 1-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 817.361896][T15727] team0: Port device team_slave_1 added [ 817.402780][T13000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.425009][T13000] usb 1-1: Product: 䀊 [ 817.464052][T13000] usb 1-1: Manufacturer: 뵞臨哥䦎⥝癔亝ﺨ윯쯡齳ꮘ⇴䘥ᚬⳣ漝㈅턉跩ŝᴞ䏞꥞疷ଽ滋羒칏誡 [ 817.526302][T13000] usb 1-1: SerialNumber: syz [ 818.089883][T15727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.140451][T15727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.259631][T15727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.322893][T15727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.335720][T15727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.362716][T15727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.394300][T13000] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 818.415109][ T5128] Bluetooth: hci2: command tx timeout [ 818.511102][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 818.574182][T13000] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 818.650471][T13000] usb 1-1: USB disconnect, device number 99 [ 818.654354][T15727] hsr_slave_0: entered promiscuous mode [ 818.697205][ T10] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 818.727203][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 818.751961][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 818.768392][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.779277][T15727] hsr_slave_1: entered promiscuous mode [ 818.784444][T15868] xt_hashlimit: size too large, truncated to 1048576 [ 818.786072][T15727] debugfs: 'hsr0' already exists in 'hsr' [ 818.800688][T15727] Cannot create hsr debugfs directory [ 818.810087][ T10] usb 3-1: config 0 has no interfaces? [ 818.816944][ T10] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 818.837946][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.867400][T15871] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2432'. [ 818.904217][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.932864][ T10] usb 3-1: config 0 descriptor?? [ 819.184563][T11735] usb 3-1: USB disconnect, device number 106 [ 819.191488][ T30] kauditd_printk_skb: 414 callbacks suppressed [ 819.191501][ T30] audit: type=1400 audit(2000000003.236:33053): avc: denied { ioctl } for pid=15867 comm="syz.5.2432" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.265162][ T30] audit: type=1400 audit(2000000003.320:33054): avc: denied { ioctl } for pid=15867 comm="syz.5.2432" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.320102][ T30] audit: type=1400 audit(2000000003.367:33055): avc: denied { search } for pid=15877 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.323562][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 819.363034][ T30] audit: type=1400 audit(2000000003.367:33056): avc: denied { search } for pid=15877 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.473303][ T30] audit: type=1400 audit(2000000003.367:33057): avc: denied { search } for pid=15877 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.590948][ T30] audit: type=1400 audit(2000000003.507:33058): avc: denied { ioctl } for pid=15867 comm="syz.5.2432" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.623538][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 819.637918][ T10] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 819.652039][ T30] audit: type=1400 audit(2000000003.507:33059): avc: denied { ioctl } for pid=15867 comm="syz.5.2432" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.659464][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.702288][T15884] fuse: Unknown parameter '00000000000000000000' [ 819.852509][T15885] ubi31: attaching mtd0 [ 819.864533][ T30] audit: type=1400 audit(2000000003.507:33060): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 819.867171][T15885] ubi31: scanning is finished [ 819.893852][T15885] ubi31: empty MTD device detected [ 820.106929][ T30] audit: type=1400 audit(2000000003.507:33061): avc: denied { open } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 820.199475][T15727] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 820.264457][ T30] audit: type=1400 audit(2000000003.507:33062): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 820.309021][T15727] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 820.344627][ T10] usb 6-1: config 0 descriptor?? [ 820.364798][T15727] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 820.386975][T15885] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 820.395126][T15885] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 820.405982][T15885] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 820.414390][T15885] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 820.423058][T15885] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 820.431616][T15895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2435'. [ 820.444831][T15885] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 820.464932][ T10] as10x_usb: device has been detected [ 820.482131][T15885] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4287346437 [ 820.482888][T15727] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 820.490262][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 820.513106][T15885] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 820.549275][T15894] ubi31: background thread "ubi_bgt31d" started, PID 15894 [ 820.630478][ T5128] Bluetooth: hci2: command tx timeout [ 820.680612][ T10] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 820.764774][ T10] as10x_usb: error during firmware upload part1 [ 820.782036][ T10] Registered device nBox DVB-T Dongle [ 820.796629][ T10] usb 6-1: USB disconnect, device number 8 [ 820.923632][ T10] Unregistered device nBox DVB-T Dongle [ 820.946194][ T10] as10x_usb: device has been disconnected [ 821.214604][T15727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.294227][T15727] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.372501][T13268] IPVS: stop unused estimator thread 0... [ 821.416066][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.423220][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.453106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.460245][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.524458][T15727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 821.536755][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 821.966937][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 822.155201][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.164223][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.178452][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.187623][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.200339][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.213031][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.223602][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.234234][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.245823][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.261195][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.271949][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.274302][ T5959] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 822.337346][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.345108][T15931] netlink: 'syz.2.2444': attribute type 10 has an invalid length. [ 822.353089][T15931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2444'. [ 822.362490][T15931] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 822.394235][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.404283][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.436947][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.451543][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.488598][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.521373][ T5959] usb 6-1: not running at top speed; connect to a high speed hub [ 822.531837][ T5959] usb 6-1: config 45 has an invalid interface number: 2 but max is 0 [ 822.533916][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.557003][T15727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.580610][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.593790][ T5959] usb 6-1: config 45 has an invalid descriptor of length 240, skipping remainder of the config [ 822.633128][ T5959] usb 6-1: config 45 has no interface number 0 [ 822.643917][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.676217][ T5959] usb 6-1: config 45 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 822.682482][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.739423][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.748468][ T5959] usb 6-1: string descriptor 0 read error: -22 [ 822.777800][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.807663][ T5959] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 822.827651][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.862340][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.892319][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 822.917574][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 822.941253][ T5959] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 822.959057][ T10] usb 1-1: Product: syz [ 822.963239][ T10] usb 1-1: Manufacturer: syz [ 822.967832][ T10] usb 1-1: SerialNumber: syz [ 822.990572][ T5959] dvb-usb: bulk message failed: -22 (3/0) [ 823.004496][ T10] usb 1-1: config 0 descriptor?? [ 823.028569][ T5959] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 823.044203][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 823.080577][ T5959] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 823.120167][ T5959] usb 6-1: media controller created [ 823.136449][ T5959] dvb-usb: bulk message failed: -22 (5/0) [ 823.169204][ T5959] dvb-usb: MAC address reading failed. [ 823.199670][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.261369][ T5959] dvb-usb: bulk message failed: -22 (6/0) [ 823.304516][ T5959] dvb-usb: bulk message failed: -22 (6/0) [ 823.332058][ T5959] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 823.361113][ T5959] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 823.417249][ T5959] dvb-usb: schedule remote query interval to 100 msecs. [ 823.437883][ T5959] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 823.559240][ T5959] dvb-usb: bulk message failed: -22 (2/0) [ 823.571354][ T5959] dvb-usb: error while querying for an remote control event. [ 823.613564][T15727] veth0_vlan: entered promiscuous mode [ 823.667557][T15727] veth1_vlan: entered promiscuous mode [ 823.707096][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 823.712854][ T24] dvb-usb: error while querying for an remote control event. [ 823.732596][T15727] veth0_macvtap: entered promiscuous mode [ 823.764116][T15727] veth1_macvtap: entered promiscuous mode [ 823.784304][T15727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.816114][T15727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.849002][ T8374] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.867284][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 823.868244][ T8374] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.882682][ T24] dvb-usb: error while querying for an remote control event. [ 823.883107][ T8374] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.906246][ T8374] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.115849][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 824.174018][ T24] dvb-usb: error while querying for an remote control event. [ 824.183149][T13268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.209818][T13268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.286943][ T8374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.296557][ T8374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.348214][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 824.355917][ T24] dvb-usb: error while querying for an remote control event. [ 824.782088][T11735] usb 6-1: USB disconnect, device number 9 [ 824.803179][ T30] kauditd_printk_skb: 382 callbacks suppressed [ 824.803194][ T30] audit: type=1400 audit(2000000008.502:33445): avc: denied { unmount } for pid=15177 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 824.869907][ T30] audit: type=1400 audit(2000000008.530:33446): avc: denied { mounton } for pid=15727 comm="syz-executor" path="/root/syzkaller.Si8EF4/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 824.904181][ T30] audit: type=1400 audit(2000000008.530:33447): avc: denied { mount } for pid=15727 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 824.928276][ T30] audit: type=1400 audit(2000000008.530:33448): avc: denied { mounton } for pid=15727 comm="syz-executor" path="/root/syzkaller.Si8EF4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 824.999036][ T792] usb 1-1: USB disconnect, device number 100 [ 825.019278][ T792] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 825.088342][T11735] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 825.117062][ T30] audit: type=1400 audit(2000000008.558:33449): avc: denied { mounton } for pid=15727 comm="syz-executor" path="/root/syzkaller.Si8EF4/syz-tmp/newroot/proc" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 825.182200][ T30] audit: type=1400 audit(2000000008.558:33450): avc: denied { mount } for pid=15727 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 825.214396][ T30] audit: type=1400 audit(2000000008.558:33451): avc: denied { mounton } for pid=15727 comm="syz-executor" path="/root/syzkaller.Si8EF4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 825.242045][ T30] audit: type=1400 audit(2000000008.568:33452): avc: denied { mounton } for pid=15727 comm="syz-executor" path="/root/syzkaller.Si8EF4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=52061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 825.313091][ T30] audit: type=1400 audit(2000000008.568:33453): avc: denied { mounton } for pid=15727 comm="syz-executor" path="/root/syzkaller.Si8EF4/syz-tmp/newroot/syzcgroup/unified" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 825.403360][ T30] audit: type=1400 audit(2000000008.568:33454): avc: denied { unmount } for pid=15727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 825.769900][T15976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2449'. [ 825.791489][ T792] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 825.964883][ T792] usb 7-1: device descriptor read/64, error -71 [ 826.192605][T11540] block nbd0: Possible stuck request ffff888028140000: control (read@0,1024B). Runtime 600 seconds [ 826.241317][T11540] block nbd0: Possible stuck request ffff888028140200: control (read@1024,1024B). Runtime 600 seconds [ 826.255892][T11540] block nbd0: Possible stuck request ffff888028140400: control (read@2048,1024B). Runtime 600 seconds [ 826.272629][T11540] block nbd0: Possible stuck request ffff888028140600: control (read@3072,1024B). Runtime 600 seconds [ 826.338210][ T792] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 826.809512][ T792] usb 7-1: device descriptor read/64, error -71 [ 826.925638][ T792] usb usb7-port1: attempt power cycle [ 827.340991][T16000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.363074][ T792] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 827.430197][T16000] netlink: 'syz.5.2454': attribute type 10 has an invalid length. [ 827.459939][ T792] usb 7-1: device descriptor read/8, error -71 [ 827.474099][T11735] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 827.592272][T16000] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.655322][T16000] bond0: (slave team0): Enslaving as an active interface with an up link [ 827.729664][ T792] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 827.769212][T11735] usb 1-1: Using ep0 maxpacket: 32 [ 827.777909][T11735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 827.801376][T11735] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 827.810908][T11735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.828010][ T792] usb 7-1: device descriptor read/8, error -71 [ 827.951639][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 827.973127][ T792] usb usb7-port1: unable to enumerate USB device [ 827.990556][T11735] usb 1-1: Product: syz [ 828.005148][T11735] usb 1-1: Manufacturer: syz [ 828.033892][T11735] usb 1-1: SerialNumber: syz [ 828.072152][T11735] usb 1-1: config 0 descriptor?? [ 828.198513][ T10] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 828.226283][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.260939][ T10] usb 3-1: Product: syz [ 828.265126][ T10] usb 3-1: Manufacturer: syz [ 828.275743][ T10] usb 3-1: SerialNumber: syz [ 828.516230][ T10] usb 3-1: config 0 descriptor?? [ 828.531818][ T10] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 107 [ 828.961156][ T10] (null): failure reading functionality [ 828.978230][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 829.125588][T16024] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 830.241331][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 830.241342][ T30] audit: type=1400 audit(2000000013.591:33666): avc: denied { create } for pid=16032 comm="syz.1.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 830.295054][T16033] IPVS: fo: FWM 3 0x00000003 - no destination available [ 830.349245][ T30] audit: type=1400 audit(2000000013.694:33667): avc: denied { read write } for pid=16035 comm="syz.6.2461" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.416338][ T30] audit: type=1400 audit(2000000013.694:33668): avc: denied { read write open } for pid=16035 comm="syz.6.2461" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.520206][ T30] audit: type=1400 audit(2000000013.694:33669): avc: denied { ioctl } for pid=16035 comm="syz.6.2461" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.545658][ T30] audit: type=1400 audit(2000000013.694:33670): avc: denied { ioctl } for pid=16035 comm="syz.6.2461" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.571102][ T30] audit: type=1400 audit(2000000013.853:33671): avc: denied { ioctl } for pid=16035 comm="syz.6.2461" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.620104][ T5959] usb 1-1: USB disconnect, device number 101 [ 830.637883][ T30] audit: type=1400 audit(2000000013.956:33672): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 830.666349][ T792] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 830.685368][ T30] audit: type=1400 audit(2000000013.984:33673): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.065728][T16043] can0: slcan on ttyS3. [ 831.358080][ T30] audit: type=1400 audit(2000000013.984:33674): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.400990][ T10] usb 3-1: USB disconnect, device number 107 [ 831.416934][ T792] usb 7-1: Using ep0 maxpacket: 32 [ 831.434833][ T792] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 831.448605][ T30] audit: type=1400 audit(2000000013.993:33675): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 831.449603][T16041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2463'. [ 831.505440][ T792] usb 7-1: config 0 has no interface number 0 [ 831.531359][ T792] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 831.565758][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.573779][ T792] usb 7-1: Product: syz [ 831.592335][ T792] usb 7-1: Manufacturer: syz [ 831.602648][ T792] usb 7-1: SerialNumber: syz [ 831.617648][ T792] usb 7-1: config 0 descriptor?? [ 831.693361][T16039] can0 (unregistered): slcan off ttyS3. [ 832.089393][ T792] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 833.025337][ T792] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 833.253429][T16078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.301179][T16078] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 834.279793][T13000] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 834.443939][T13000] usb 2-1: device descriptor read/64, error -71 [ 835.267785][T13000] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 835.769838][ T30] kauditd_printk_skb: 291 callbacks suppressed [ 835.769857][ T30] audit: type=1400 audit(2000000018.745:33967): avc: denied { ioctl } for pid=16086 comm="syz.1.2470" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 835.830009][T13000] usb 2-1: device descriptor read/64, error -71 [ 835.888213][ T792] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 835.924059][ T30] audit: type=1400 audit(2000000018.773:33968): avc: denied { read write } for pid=15177 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 835.926626][ T792] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 835.989882][T13000] usb usb2-port1: attempt power cycle [ 836.022994][ T30] audit: type=1400 audit(2000000018.773:33969): avc: denied { read write open } for pid=15177 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 836.075876][ T792] usb 7-1: USB disconnect, device number 6 [ 836.123128][ T30] audit: type=1400 audit(2000000018.773:33970): avc: denied { ioctl } for pid=15177 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 836.234285][ T30] audit: type=1400 audit(2000000018.782:33971): avc: denied { ioctl } for pid=16035 comm="syz.6.2461" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 836.429159][ T30] audit: type=1400 audit(2000000018.857:33972): avc: denied { create } for pid=16113 comm="syz.5.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 836.429746][T13000] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 836.451980][ T30] audit: type=1400 audit(2000000018.876:33973): avc: denied { read write } for pid=15727 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.063308][ T30] audit: type=1400 audit(2000000018.876:33974): avc: denied { open } for pid=15727 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.097976][T13000] usb 2-1: device descriptor read/8, error -71 [ 837.205806][T16105] audit: audit_backlog=65 > audit_backlog_limit=64 [ 837.229337][T16105] audit: audit_lost=401 audit_rate_limit=0 audit_backlog_limit=64 [ 838.641506][ T5959] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 838.777807][T16162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2477'. [ 838.826781][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 838.849401][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 838.880119][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 838.951810][ T5959] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 838.961020][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 838.983693][ T5959] usb 1-1: Product: syz [ 838.989554][T16161] xt_hashlimit: size too large, truncated to 1048576 [ 838.997339][ T5959] usb 1-1: SerialNumber: syz [ 839.007418][ T5959] usb 1-1: config 0 descriptor?? [ 839.242822][T16174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 839.271727][ T5959] usb 1-1: USB disconnect, device number 102 [ 839.349367][T16174] netlink: 'syz.1.2482': attribute type 10 has an invalid length. [ 840.545244][T16190] xt_TPROXY: Can be used only with -p tcp or -p udp [ 840.799951][T16195] 9p: Bad value for 'timeout' [ 840.876020][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 841.153259][ T30] kauditd_printk_skb: 320 callbacks suppressed [ 841.153297][ T30] audit: type=1400 audit(2000000023.787:34285): avc: denied { create } for pid=16184 comm="syz.2.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 841.169635][T16198] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 841.528224][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 841.549653][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 841.562718][ T9] usb 1-1: config 0 has no interface number 0 [ 841.570331][ T30] audit: type=1400 audit(2000000023.805:34286): avc: denied { read } for pid=16184 comm="syz.2.2486" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 841.583382][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 841.665275][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.698074][ T30] audit: type=1400 audit(2000000023.805:34287): avc: denied { open } for pid=16184 comm="syz.2.2486" path="net:[4026532806]" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 841.708853][ T9] usb 1-1: Product: syz [ 841.795420][ T9] usb 1-1: Manufacturer: syz [ 841.800108][ T9] usb 1-1: SerialNumber: syz [ 841.854955][ T30] audit: type=1400 audit(2000000023.805:34288): avc: denied { create } for pid=16184 comm="syz.2.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 841.884280][ T9] usb 1-1: config 0 descriptor?? [ 841.982458][ T30] audit: type=1400 audit(2000000023.805:34289): avc: denied { create } for pid=16184 comm="syz.2.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 842.064360][T16213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 842.081837][ T30] audit: type=1400 audit(2000000023.805:34290): avc: denied { read } for pid=16184 comm="syz.2.2486" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 842.114992][T16214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 842.130270][T16189] audit: audit_backlog=65 > audit_backlog_limit=64 [ 842.133433][T16211] audit: audit_backlog=65 > audit_backlog_limit=64 [ 842.212232][T11735] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 843.279155][T11735] usb 2-1: device descriptor read/64, error -71 [ 843.289593][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 843.311847][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 843.548700][T11735] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 843.762456][T11735] usb 2-1: device descriptor read/64, error -71 [ 843.880920][T11735] usb usb2-port1: attempt power cycle [ 844.254460][T11735] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 844.287818][T11735] usb 2-1: device descriptor read/8, error -71 [ 844.691146][T11735] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 844.738796][T11735] usb 2-1: device descriptor read/8, error -71 [ 844.875093][T11735] usb usb2-port1: unable to enumerate USB device [ 845.416416][T16268] xt_l2tp: wrong L2TP version: 0 [ 845.451498][ T5959] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 845.658425][ T5959] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 845.679952][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.703375][ T5959] usb 6-1: Product: syz [ 845.707567][ T5959] usb 6-1: Manufacturer: syz [ 845.707585][ T5959] usb 6-1: SerialNumber: syz [ 845.751350][ T5959] usb 6-1: config 0 descriptor?? [ 845.796101][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 845.819223][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 845.834033][ T9] usb 1-1: USB disconnect, device number 103 [ 845.991466][ T5959] peak_usb 6-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 846.018863][T16271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2499'. [ 846.216563][ T5959] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 846.253218][ T5959] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 846.260014][ T5959] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 846.371604][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 846.563453][ T30] kauditd_printk_skb: 376 callbacks suppressed [ 846.563488][ T30] audit: type=1400 audit(2000000028.772:34650): avc: denied { read } for pid=16262 comm="syz.5.2497" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 846.568705][T16285] netlink: 'syz.6.2494': attribute type 10 has an invalid length. [ 846.601052][T16285] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2494'. [ 846.612910][T16285] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 846.620331][T16285] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 846.636319][T16285] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 846.710314][ T30] audit: type=1400 audit(2000000028.772:34651): avc: denied { open } for pid=16262 comm="syz.5.2497" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 846.758978][ T5959] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 846.881205][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.895411][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.920149][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 846.944509][ T30] audit: type=1400 audit(2000000028.857:34652): avc: denied { map_create } for pid=16277 comm="syz.6.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 846.958045][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 846.989094][ T9] usb 1-1: Manufacturer: syz [ 847.089290][ T30] audit: type=1400 audit(2000000028.857:34653): avc: denied { map_read map_write } for pid=16277 comm="syz.6.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 847.114320][ T9] usb 1-1: config 0 descriptor?? [ 847.138939][ T30] audit: type=1400 audit(2000000028.978:34654): avc: denied { create } for pid=16279 comm="syz.1.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 847.281878][ T30] audit: type=1400 audit(2000000028.978:34655): avc: denied { ioctl } for pid=16279 comm="syz.1.2501" path="socket:[53583]" dev="sockfs" ino=53583 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 847.702890][T11735] usb 6-1: USB disconnect, device number 10 [ 848.228206][T16307] audit: audit_backlog=66 > audit_backlog_limit=64 [ 848.267704][T16307] audit: audit_lost=412 audit_rate_limit=0 audit_backlog_limit=64 [ 848.281731][T16308] audit: audit_backlog=66 > audit_backlog_limit=64 [ 848.326249][T16310] audit: audit_backlog=66 > audit_backlog_limit=64 [ 848.530155][ T9] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input35 [ 848.646758][ T9] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input36 [ 848.708039][ T9] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input37 [ 848.783044][ T9] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input38 [ 848.818740][ T9] uclogic 0003:256C:006D.0012: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 848.943417][T16319] netlink: 'syz.5.2509': attribute type 1 has an invalid length. [ 849.149126][ T9] usb 1-1: USB disconnect, device number 104 [ 849.168263][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 849.332137][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 849.371495][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 849.435120][ T10] usb 3-1: config 0 has no interface number 0 [ 849.506173][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 849.524540][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.542801][T16320] fido_id[16320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 849.557502][ T10] usb 3-1: Product: syz [ 849.561697][ T10] usb 3-1: Manufacturer: syz [ 849.566290][ T10] usb 3-1: SerialNumber: syz [ 849.575237][ T10] usb 3-1: config 0 descriptor?? [ 849.660001][T16324] xt_hashlimit: size too large, truncated to 1048576 [ 849.666987][T16324] xt_hashlimit: overflow, try lower: 3/0 [ 849.695666][T16324] can0: slcan on ttyS3. [ 849.960407][T16324] dummy0: entered allmulticast mode [ 850.201144][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 850.214685][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 850.337598][T16330] can0 (unregistered): slcan off ttyS3. [ 850.968014][ T5959] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 851.780412][ T5959] usb 7-1: Using ep0 maxpacket: 32 [ 851.792728][ T5959] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 851.803057][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.822970][ T5959] usb 7-1: Product: syz [ 851.827278][ T5959] usb 7-1: Manufacturer: syz [ 851.840990][ T5959] usb 7-1: SerialNumber: syz [ 851.867913][ T5959] usb 7-1: config 0 descriptor?? [ 851.939135][ T30] kauditd_printk_skb: 373 callbacks suppressed [ 851.939177][ T30] audit: type=1400 audit(2000000033.880:35024): avc: denied { search } for pid=16365 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.077595][ T5472] peak_usb 7-1:0.0 can0: bit-timing not yet defined [ 852.084559][ T30] audit: type=1400 audit(2000000033.889:35025): avc: denied { read } for pid=16343 comm="syz.0.2518" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 852.122408][ T30] audit: type=1400 audit(2000000033.889:35026): avc: denied { open } for pid=16343 comm="syz.0.2518" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 852.179275][ T30] audit: type=1400 audit(2000000033.889:35027): avc: denied { ioctl } for pid=16343 comm="syz.0.2518" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 852.368371][ T30] audit: type=1400 audit(2000000033.917:35028): avc: denied { search } for pid=16365 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.443153][ T30] audit: type=1400 audit(2000000033.917:35029): avc: denied { search } for pid=16365 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.580697][ T30] audit: type=1400 audit(2000000033.917:35030): avc: denied { watch watch_reads } for pid=16343 comm="syz.0.2518" path="/529" dev="tmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 852.679804][ T30] audit: type=1400 audit(2000000034.011:35031): avc: denied { search } for pid=16332 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.710379][ T30] audit: type=1400 audit(2000000034.011:35032): avc: denied { ioctl } for pid=16317 comm="syz.2.2510" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 852.747684][ T30] audit: type=1400 audit(2000000034.048:35033): avc: denied { create } for pid=16367 comm="syz.5.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 852.831812][ T5959] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 853.034053][ T5959] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 853.100783][ T5959] usb 7-1: USB disconnect, device number 7 [ 853.182468][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 853.214833][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 853.279425][ T10] usb 3-1: USB disconnect, device number 108 [ 854.015529][T16391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2523'. [ 854.421099][T13000] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 854.581300][T13000] usb 6-1: device descriptor read/64, error -71 [ 854.870141][T13000] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 855.084050][T13000] usb 6-1: device descriptor read/64, error -71 [ 855.319096][T13000] usb usb6-port1: attempt power cycle [ 855.716482][T13000] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 855.833019][T13000] usb 6-1: device descriptor read/8, error -71 [ 856.156027][T13000] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 856.263039][T13000] usb 6-1: device descriptor read/8, error -71 [ 856.890713][T13000] usb usb6-port1: unable to enumerate USB device [ 857.138119][ T5128] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 857.149345][ T5128] CPU: 0 UID: 0 PID: 5128 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.149377][ T5128] Tainted: [L]=SOFTLOCKUP [ 857.149385][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 857.149399][ T5128] Workqueue: hci4 hci_rx_work [ 857.149432][ T5128] Call Trace: [ 857.149439][ T5128] [ 857.149447][ T5128] dump_stack_lvl+0x100/0x190 [ 857.149480][ T5128] sysfs_warn_dup.cold+0x1c/0x28 [ 857.149508][ T5128] sysfs_create_dir_ns+0x24b/0x2b0 [ 857.149538][ T5128] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 857.149565][ T5128] ? find_held_lock+0x2b/0x80 [ 857.149588][ T5128] ? kobject_add_internal+0x25f/0x930 [ 857.149612][ T5128] ? kobject_add_internal+0x25f/0x930 [ 857.149638][ T5128] ? do_raw_spin_unlock+0x145/0x1e0 [ 857.149661][ T5128] kobject_add_internal+0x2c8/0x930 [ 857.149688][ T5128] kobject_add+0x16a/0x1e0 [ 857.149713][ T5128] ? __pfx_kobject_add+0x10/0x10 [ 857.149734][ T5128] ? class_to_subsys+0x10f/0x150 [ 857.149768][ T5128] ? kobject_put+0xb9/0x640 [ 857.149787][ T5128] ? _raw_spin_unlock+0x28/0x50 [ 857.149812][ T5128] device_add+0x294/0x1950 [ 857.149837][ T5128] ? __pfx_dev_set_name+0x10/0x10 [ 857.149855][ T5128] ? __pfx_device_add+0x10/0x10 [ 857.149882][ T5128] ? mgmt_send_event_skb+0x2fb/0x460 [ 857.149917][ T5128] hci_conn_add_sysfs+0x1a3/0x260 [ 857.149938][ T5128] le_conn_complete_evt+0x11cb/0x1f40 [ 857.149975][ T5128] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 857.150010][ T5128] hci_le_conn_complete_evt+0x23c/0x3a0 [ 857.150039][ T5128] ? skb_pull_data+0x15f/0x1e0 [ 857.150066][ T5128] hci_le_meta_evt+0x34a/0x5f0 [ 857.150085][ T5128] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 857.150126][ T5128] hci_event_packet+0x682/0x11c0 [ 857.150157][ T5128] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 857.150179][ T5128] ? __pfx_hci_event_packet+0x10/0x10 [ 857.150214][ T5128] ? kcov_remote_start+0x374/0x660 [ 857.150239][ T5128] ? lockdep_hardirqs_on+0x78/0x100 [ 857.150266][ T5128] hci_rx_work+0x451/0xfc0 [ 857.150301][ T5128] process_one_work+0x9d7/0x1920 [ 857.150332][ T5128] ? __pfx_process_one_work+0x10/0x10 [ 857.150360][ T5128] ? __pfx_hci_rx_work+0x10/0x10 [ 857.150392][ T5128] worker_thread+0x5da/0xe40 [ 857.150420][ T5128] ? __pfx_worker_thread+0x10/0x10 [ 857.150442][ T5128] ? kthread+0x13a/0x450 [ 857.150458][ T5128] ? __pfx_worker_thread+0x10/0x10 [ 857.150476][ T5128] kthread+0x370/0x450 [ 857.150494][ T5128] ? __pfx_kthread+0x10/0x10 [ 857.150515][ T5128] ret_from_fork+0x754/0xd80 [ 857.150535][ T5128] ? __pfx_ret_from_fork+0x10/0x10 [ 857.150556][ T5128] ? __switch_to+0x7b4/0x1120 [ 857.150579][ T5128] ? __pfx_kthread+0x10/0x10 [ 857.150598][ T5128] ret_from_fork_asm+0x1a/0x30 [ 857.150634][ T5128] [ 857.150656][ T5128] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 857.429924][ T5128] Bluetooth: hci4: failed to register connection device [ 857.462854][ T30] kauditd_printk_skb: 787 callbacks suppressed [ 857.462866][ T30] audit: type=1400 audit(2000000039.052:35821): avc: denied { read open } for pid=16431 comm="syz.6.2536" path="net:[4026532887]" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 857.591947][ T30] audit: type=1400 audit(2000000039.081:35822): avc: denied { create } for pid=16431 comm="syz.6.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 857.655251][ T30] audit: type=1400 audit(2000000039.081:35823): avc: denied { create } for pid=16431 comm="syz.6.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 857.732527][ T30] audit: type=1400 audit(2000000039.081:35824): avc: denied { mount } for pid=16427 comm="syz.0.2535" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 857.798119][ T30] audit: type=1400 audit(2000000039.081:35825): avc: denied { execmem } for pid=16431 comm="syz.6.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 857.848860][ T30] audit: type=1400 audit(2000000039.118:35826): avc: denied { read write } for pid=15177 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.929994][ T30] audit: type=1400 audit(2000000039.118:35827): avc: denied { open } for pid=15177 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 858.016847][ T30] audit: type=1400 audit(2000000039.118:35828): avc: denied { ioctl } for pid=15177 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 858.101927][ T30] audit: type=1400 audit(2000000039.165:35829): avc: denied { module_request } for pid=16436 comm="syz.5.2537" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 858.212260][ T30] audit: type=1400 audit(2000000039.473:35830): avc: denied { execmem } for pid=16436 comm="syz.5.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 858.344823][T11540] block nbd0: Possible stuck request ffff888028140000: control (read@0,1024B). Runtime 630 seconds [ 858.355796][T11540] block nbd0: Possible stuck request ffff888028140200: control (read@1024,1024B). Runtime 630 seconds [ 858.366938][T11540] block nbd0: Possible stuck request ffff888028140400: control (read@2048,1024B). Runtime 630 seconds [ 858.387200][T11540] block nbd0: Possible stuck request ffff888028140600: control (read@3072,1024B). Runtime 630 seconds [ 858.622001][T16442] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2538'. [ 858.814814][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 859.067662][ T9] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 859.082055][ T9] usb 2-1: config 8 has no interface number 0 [ 859.182568][T16455] netlink: 'syz.2.2541': attribute type 58 has an invalid length. [ 859.366233][ T9] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 859.392419][ T9] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 859.436556][ T9] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x87 has invalid maxpacket 0 [ 859.472610][ T9] usb 2-1: config 8 interface 177 has no altsetting 0 [ 859.508271][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 859.551568][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.780747][T16450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 859.789795][T16459] Failed to get privilege flags for destination (handle=0x2:0x0) [ 859.934108][T16466] xt_hashlimit: size too large, truncated to 1048576 [ 860.023090][ T9] usb 2-1: string descriptor 0 read error: -71 [ 860.030179][ T9] ir_toy 2-1:8.177: required endpoints not found [ 860.075891][ T9] usb 2-1: USB disconnect, device number 104 [ 860.711280][T16480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=16480 comm=syz.6.2549 [ 860.894655][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 861.260758][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 861.287799][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 861.302910][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 861.328585][ T9] usb 6-1: Product: syz [ 861.344682][ T9] usb 6-1: Manufacturer: syz [ 861.354497][ T9] usb 6-1: SerialNumber: syz [ 861.653564][ T9] usb 6-1: config 0 descriptor?? [ 861.693024][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 862.220193][ T9] gspca_sn9c2028: read1 error -32 [ 862.233530][ T9] gspca_sn9c2028: read1 error -32 [ 862.396095][ T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 862.828325][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 862.828341][ T30] audit: type=1400 audit(2000000044.066:36016): avc: denied { ioctl } for pid=16491 comm="syz.0.2551" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 862.906845][ T30] audit: type=1400 audit(2000000044.113:36017): avc: denied { map_create } for pid=16458 comm="syz.5.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 862.997774][ T30] audit: type=1400 audit(2000000044.113:36018): avc: denied { read } for pid=16458 comm="syz.5.2543" dev="nsfs" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 863.040922][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.052106][ T30] audit: type=1400 audit(2000000044.113:36019): avc: denied { open } for pid=16458 comm="syz.5.2543" path="net:[4026532930]" dev="nsfs" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 863.078092][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.127693][ T30] audit: type=1400 audit(2000000044.113:36020): avc: denied { create } for pid=16458 comm="syz.5.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 863.136546][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 863.169505][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 863.177674][ T10] usb 1-1: Manufacturer: syz [ 863.186987][ T30] audit: type=1400 audit(2000000044.113:36021): avc: denied { bind } for pid=16458 comm="syz.5.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 863.234563][ T10] usb 1-1: config 0 descriptor?? [ 863.274408][ T30] audit: type=1400 audit(2000000044.113:36022): avc: denied { write } for pid=16458 comm="syz.5.2543" path="socket:[53940]" dev="sockfs" ino=53940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 863.374171][ T30] audit: type=1400 audit(2000000044.122:36023): avc: denied { ioctl } for pid=16491 comm="syz.0.2551" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 863.495944][ T30] audit: type=1400 audit(2000000044.188:36024): avc: denied { ioctl } for pid=16491 comm="syz.0.2551" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 863.591548][ T30] audit: type=1400 audit(2000000044.272:36025): avc: denied { ioctl } for pid=16491 comm="syz.0.2551" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 864.075768][ T5856] usb 6-1: USB disconnect, device number 15 [ 864.229494][ T10] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0013/input/input39 [ 864.918259][ T29] libceph: connect (1)[c::]:6789 error -101 [ 864.925150][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 864.936334][ T10] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0013/input/input40 [ 864.969321][ T10] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0013/input/input41 [ 865.962798][ T10] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0013/input/input42 [ 865.989441][ T29] libceph: connect (1)[c::]:6789 error -101 [ 866.005685][T16519] ceph: No mds server is up or the cluster is laggy [ 866.051387][ T10] uclogic 0003:256C:006D.0013: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 866.140179][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 866.232846][ T10] usb 1-1: USB disconnect, device number 105 [ 866.539553][T16538] fido_id[16538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 866.909028][T16546] 9p: Bad value for 'timeout' [ 867.656325][T16550] netlink: 'syz.0.2564': attribute type 10 has an invalid length. [ 867.696649][T16550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2564'. [ 867.754832][T16550] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 867.933131][T13268] Bluetooth: hci6: Frame reassembly failed (-84) [ 867.996918][T16542] sctp: [Deprecated]: syz.6.2562 (pid 16542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 867.996918][T16542] Use struct sctp_sack_info instead [ 868.182169][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 868.182185][ T30] audit: type=1400 audit(2000000049.080:36226): avc: denied { read write } for pid=15177 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 868.233193][ T5959] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 868.307942][ T30] audit: type=1400 audit(2000000049.080:36227): avc: denied { open } for pid=15177 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 868.366462][ T30] audit: type=1400 audit(2000000049.080:36228): avc: denied { ioctl } for pid=15177 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 868.404535][ T30] audit: type=1400 audit(2000000049.127:36229): avc: denied { ioctl } for pid=16551 comm="syz.0.2565" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 868.469718][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 868.548797][ T30] audit: type=1400 audit(2000000049.145:36230): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 868.574951][ T30] audit: type=1400 audit(2000000049.145:36231): avc: denied { open } for pid=5804 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 868.603946][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 868.894809][ T30] audit: type=1400 audit(2000000049.145:36232): avc: denied { ioctl } for pid=5804 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 868.931822][ T5959] usb 1-1: config 162 has an invalid interface number: 84 but max is 2 [ 868.940294][ T5959] usb 1-1: config 162 has an invalid interface number: 3 but max is 2 [ 868.948538][ T30] audit: type=1400 audit(2000000049.145:36233): avc: denied { ioctl } for pid=16551 comm="syz.0.2565" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 868.962833][ T5959] usb 1-1: config 162 has no interface number 0 [ 869.192936][ T30] audit: type=1400 audit(2000000049.230:36234): avc: denied { ioctl } for pid=16551 comm="syz.0.2565" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 869.270081][ T5959] usb 1-1: config 162 has no interface number 1 [ 869.276737][ T5959] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 869.320377][ T5959] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 869.343896][ T5959] usb 1-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 869.355905][ T5959] usb 1-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 869.368422][ T5959] usb 1-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 869.378922][ T5959] usb 1-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 869.392045][ T30] audit: type=1400 audit(2000000049.239:36235): avc: denied { create } for pid=16559 comm="syz.2.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 869.422773][ T5959] usb 1-1: config 162 interface 84 has no altsetting 0 [ 869.429738][ T5959] usb 1-1: config 162 interface 2 has no altsetting 0 [ 869.442349][ T5959] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 869.451471][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.461092][ T5959] usb 1-1: Product: syz [ 869.469781][ T5959] usb 1-1: Manufacturer: syz [ 869.478964][ T5959] usb 1-1: SerialNumber: syz [ 869.709838][T16552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.737525][T16552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.787832][ T5959] usb 1-1: USB disconnect, device number 106 [ 869.791824][T14381] Bluetooth: hci7: sending frame failed (-19) [ 869.803913][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -19 [ 869.945215][T16575] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 870.146859][ T51] Bluetooth: hci6: command 0x1003 tx timeout [ 870.146875][ T5128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 870.595785][ T5856] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 870.760483][ T5856] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 870.771357][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.783710][ T5856] usb 2-1: Product: syz [ 870.787908][ T5856] usb 2-1: Manufacturer: syz [ 870.793421][ T5856] usb 2-1: SerialNumber: syz [ 870.807920][ T5856] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 870.830123][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 870.917600][T11735] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 871.059385][T16582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.068470][T16582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.078938][T16582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.087656][T11735] usb 1-1: Using ep0 maxpacket: 32 [ 871.093348][T16582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.104936][T11735] usb 1-1: unable to get BOS descriptor or descriptor too short [ 871.113537][T11735] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 871.126763][T11735] usb 1-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 871.136021][T11735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.144094][T11735] usb 1-1: Product: 晅泑㍰䫎溢찎늉薊ᣍ驖ᙰ쑳獳浔렫텠ᲁ틼ܦڿƳ鯀簭푂썍㢄ㆠ娜絤ꙟᵅ鏹䛨睗훬ꑜ叺⹈㹶蔃䬋⃜Ꟁ謭ᾜ闘។澣疸橜ㅶꅦﲆ灛멊좂뢋簃㑺㹛㏱㖥䮵뿊믴嗽틕솀荈뢱ᗊꮧ첍ꊾ藈脗ᔼˆꁶ냭⎺祍⧋鋑跙꒖⅍啻蟸⒚㳈屌,找뜐蕍ꟶ민␸顭惂愬襊㠘瞁噷尩ퟳ [ 871.179033][T11735] usb 1-1: Manufacturer: 锿ꧮねꊮ⧖ [ 871.185512][T11735] usb 1-1: SerialNumber: ᐊ [ 871.196972][ T5959] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 872.465631][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 872.472771][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 872.488692][ T5959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 872.509637][ T5959] usb 6-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 872.518688][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.527317][ T10] ath9k_htc: Failed to initialize the device [ 872.535224][ T5959] usb 6-1: Product: syz [ 872.535243][ T5959] usb 6-1: Manufacturer: syz [ 872.544264][ T5959] usb 6-1: SerialNumber: syz [ 872.558658][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 872.571348][ T5959] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 873.512158][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.518969][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.538770][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 873.538890][ T30] audit: type=1400 audit(2000000054.094:36445): avc: denied { ioctl } for pid=16581 comm="syz.1.2572" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.544198][T16609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.551063][ T30] audit: type=1400 audit(2000000054.094:36446): avc: denied { read write } for pid=16589 comm="syz.0.2575" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.574828][T16609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.701453][ T30] audit: type=1400 audit(2000000054.094:36447): avc: denied { open } for pid=16589 comm="syz.0.2575" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.758084][ T10] usb 2-1: USB disconnect, device number 105 [ 873.793455][ T30] audit: type=1400 audit(2000000054.094:36448): avc: denied { ioctl } for pid=16589 comm="syz.0.2575" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.928195][ T30] audit: type=1400 audit(2000000054.206:36449): avc: denied { create } for pid=16593 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 873.980072][ T30] audit: type=1400 audit(2000000054.206:36450): avc: denied { create } for pid=16593 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 874.054739][T16611] hub 9-0:1.0: USB hub found [ 874.166699][ T30] audit: type=1400 audit(2000000054.243:36451): avc: denied { write } for pid=16593 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 874.201293][T16611] hub 9-0:1.0: 1 port detected [ 874.223006][ T30] audit: type=1400 audit(2000000054.243:36452): avc: denied { prog_load } for pid=16593 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 874.273272][ T30] audit: type=1400 audit(2000000054.243:36453): avc: denied { bpf } for pid=16593 comm="syz.5.2576" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 874.298983][ T5959] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 874.320935][ T30] audit: type=1400 audit(2000000054.243:36454): avc: denied { perfmon } for pid=16593 comm="syz.5.2576" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 874.373598][ T5959] usb 6-1: 3:0: failed to get current value for ch 0 (-22) [ 874.397601][ T5959] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 874.413679][ T5959] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 874.525331][ T5959] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 874.581853][ T5959] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 874.608934][T16618] xt_hashlimit: size too large, truncated to 1048576 [ 874.678480][T11735] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 874.704196][T11735] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 874.720359][ T5959] usb 6-1: USB disconnect, device number 16 [ 874.938329][T11735] usb 1-1: USB disconnect, device number 107 [ 875.091225][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 876.083540][T16649] xt_hashlimit: size too large, truncated to 1048576 [ 877.178756][T16658] 9p: Bad value for 'timeout' [ 877.780298][T16664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2590'. [ 878.183476][T16682] xt_hashlimit: size too large, truncated to 1048576 [ 878.469148][ T51] Bluetooth: hci2: link tx timeout [ 878.549731][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 878.561588][ T51] Bluetooth: hci2: link tx timeout [ 878.566730][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 878.915844][ T30] kauditd_printk_skb: 233 callbacks suppressed [ 878.915887][ T30] audit: type=1400 audit(2000000059.117:36688): avc: denied { ioctl } for pid=16693 comm="syz.5.2598" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 878.988214][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 878.996270][ T30] audit: type=1400 audit(2000000059.192:36689): avc: denied { ioctl } for pid=16693 comm="syz.5.2598" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 879.061731][ T30] audit: type=1400 audit(2000000059.248:36690): avc: denied { read } for pid=16701 comm="syz.6.2601" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 879.141047][ T30] audit: type=1400 audit(2000000059.248:36691): avc: denied { read open } for pid=16701 comm="syz.6.2601" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 879.203098][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 879.209119][ T30] audit: type=1400 audit(2000000059.248:36692): avc: denied { read } for pid=16701 comm="syz.6.2601" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 879.242855][ T30] audit: type=1400 audit(2000000059.248:36693): avc: denied { open } for pid=16701 comm="syz.6.2601" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 879.375104][ T29] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 879.383227][ T29] usb 6-1: config 0 has no interface number 0 [ 879.390352][ T30] audit: type=1400 audit(2000000059.276:36694): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 879.416980][ T29] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 879.429730][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.440449][ T29] usb 6-1: Product: syz [ 879.444628][ T30] audit: type=1400 audit(2000000059.276:36695): avc: denied { open } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 879.468933][ T29] usb 6-1: Manufacturer: syz [ 879.473529][ T29] usb 6-1: SerialNumber: syz [ 879.480779][ T29] usb 6-1: config 0 descriptor?? [ 879.489063][ T30] audit: type=1400 audit(2000000059.276:36696): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 879.897724][ T30] audit: type=1400 audit(2000000059.313:36697): avc: denied { ioctl } for pid=16693 comm="syz.5.2598" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 880.098604][ T5128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 880.098755][ T51] Bluetooth: hci6: command 0x1003 tx timeout [ 880.453195][ T29] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 880.464209][ T29] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 880.670253][T16723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2606'. [ 880.751794][ T5128] Bluetooth: hci2: command 0x0406 tx timeout [ 883.437002][T16748] xt_hashlimit: size too large, truncated to 1048576 [ 883.789284][ T29] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 883.830572][ T29] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 883.882777][ T29] usb 6-1: USB disconnect, device number 17 [ 884.527507][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 884.527522][ T30] audit: type=1400 audit(2000000064.374:36887): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 884.589765][ T30] audit: type=1400 audit(2000000064.420:36888): avc: denied { read write open } for pid=5804 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 884.778780][ T30] audit: type=1400 audit(2000000064.420:36889): avc: denied { ioctl } for pid=5804 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 884.866764][ T30] audit: type=1400 audit(2000000064.458:36890): avc: denied { read write } for pid=15177 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 884.946165][ T30] audit: type=1400 audit(2000000064.458:36891): avc: denied { open } for pid=15177 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 885.021005][ T30] audit: type=1400 audit(2000000064.458:36892): avc: denied { ioctl } for pid=15177 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 885.083184][T16779] 9p: Bad value for 'wfdno' [ 885.188672][T16780] xt_bpf: check failed: parse error [ 886.102038][ T30] audit: type=1400 audit(2000000064.505:36893): avc: denied { read } for pid=16763 comm="syz.5.2618" name="vsock" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 886.236191][ T30] audit: type=1400 audit(2000000064.505:36894): avc: denied { open } for pid=16763 comm="syz.5.2618" path="/dev/vsock" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 886.275230][ T30] audit: type=1400 audit(2000000064.505:36895): avc: denied { ioctl } for pid=16763 comm="syz.5.2618" path="/dev/vsock" dev="devtmpfs" ino=1313 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 886.305307][ T30] audit: type=1400 audit(2000000064.505:36896): avc: denied { create } for pid=16763 comm="syz.5.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 886.899795][ T5959] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 887.071249][ T29] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 887.121550][ T5959] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 887.138836][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.251104][ T5959] usb 7-1: config 0 descriptor?? [ 887.276325][ T5959] cp210x 7-1:0.0: cp210x converter detected [ 887.299941][T16805] netlink: 'syz.2.2629': attribute type 1 has an invalid length. [ 887.337381][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 887.346031][ T29] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 887.356070][ T29] usb 6-1: config 0 has no interface number 0 [ 887.373488][T16805] bond1: entered promiscuous mode [ 887.409232][T16805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 887.410284][ T29] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 887.427951][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.438726][ T29] usb 6-1: Product: syz [ 887.444626][ T29] usb 6-1: Manufacturer: syz [ 887.451446][ T29] usb 6-1: SerialNumber: syz [ 887.504763][ T5959] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 887.525441][ T5959] cp210x 7-1:0.0: querying part number failed [ 887.654481][ T5959] usb 7-1: cp210x converter now attached to ttyUSB0 [ 887.681937][ T29] usb 6-1: config 0 descriptor?? [ 888.456390][ T24] usb 7-1: USB disconnect, device number 8 [ 888.476265][ T29] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 888.505721][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 888.522301][ T29] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 888.534913][ T24] cp210x 7-1:0.0: device disconnected [ 889.311243][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2632'. [ 889.322152][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2632'. [ 889.349544][T16830] lo speed is unknown, defaulting to 1000 [ 889.683450][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 889.861101][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 889.883604][ T30] kauditd_printk_skb: 259 callbacks suppressed [ 889.883619][ T30] audit: type=1400 audit(2000000069.378:37156): avc: denied { ioctl } for pid=16834 comm="syz.2.2636" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 889.927000][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 890.031286][ T30] audit: type=1400 audit(2000000069.490:37157): avc: denied { ioctl } for pid=16838 comm="syz.1.2637" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 890.063328][ T5856] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 890.164339][ T30] audit: type=1400 audit(2000000069.565:37158): avc: denied { ioctl } for pid=16838 comm="syz.1.2637" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 890.178475][ T24] usb 3-1: config 0 has no interface number 0 [ 890.223845][T16844] netlink: 'syz.0.2638': attribute type 4 has an invalid length. [ 890.242618][ T30] audit: type=1400 audit(2000000069.677:37159): avc: denied { ioctl } for pid=16798 comm="syz.5.2628" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 890.268010][ T5856] usb 2-1: device descriptor read/64, error -71 [ 890.348258][ T30] audit: type=1400 audit(2000000069.677:37160): avc: denied { read } for pid=16836 comm="syz.0.2638" dev="nsfs" ino=4026533280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 890.352235][T16845] netlink: 'syz.0.2638': attribute type 4 has an invalid length. [ 890.388086][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 890.421267][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 890.448197][ T30] audit: type=1400 audit(2000000069.677:37161): avc: denied { open } for pid=16836 comm="syz.0.2638" path="net:[4026533280]" dev="nsfs" ino=4026533280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 890.448750][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 890.520659][T11540] block nbd0: Possible stuck request ffff888028140000: control (read@0,1024B). Runtime 660 seconds [ 890.531804][T11540] block nbd0: Possible stuck request ffff888028140200: control (read@1024,1024B). Runtime 660 seconds [ 890.543184][ T5856] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 890.544465][ T5959] lo speed is unknown, defaulting to 1000 [ 890.550883][T11540] block nbd0: Possible stuck request ffff888028140400: control (read@2048,1024B). Runtime 660 seconds [ 890.569811][T11540] block nbd0: Possible stuck request ffff888028140600: control (read@3072,1024B). Runtime 660 seconds [ 890.581997][ T30] audit: type=1400 audit(2000000069.677:37162): avc: denied { create } for pid=16836 comm="syz.0.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 890.619269][ T30] audit: type=1400 audit(2000000069.677:37163): avc: denied { bpf } for pid=16836 comm="syz.0.2638" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 890.633509][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.640082][ T30] audit: type=1400 audit(2000000069.771:37164): avc: denied { read write } for pid=15727 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 890.717070][ T30] audit: type=1400 audit(2000000069.771:37165): avc: denied { read write open } for pid=15727 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 890.775749][ T5856] usb 2-1: device descriptor read/64, error -71 [ 891.048491][ T5856] usb usb2-port1: attempt power cycle [ 891.105739][ T792] lo speed is unknown, defaulting to 1000 [ 891.212519][ T24] usb 3-1: Product: syz [ 891.223429][ T24] usb 3-1: Manufacturer: syz [ 891.243958][ T24] usb 3-1: SerialNumber: syz [ 891.307188][ T29] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 891.333497][ T24] usb 3-1: config 0 descriptor?? [ 891.340706][ T29] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 891.369733][ T29] usb 6-1: USB disconnect, device number 18 [ 891.453390][ T5856] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 891.479444][ T5856] usb 2-1: device descriptor read/8, error -71 [ 891.742140][ T5856] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 891.765059][ T5856] usb 2-1: device descriptor read/8, error -71 [ 891.881059][ T5856] usb usb2-port1: unable to enumerate USB device [ 892.522722][T16859] kAFS: unable to lookup cell '(' [ 892.908968][T16877] netlink: 'syz.1.2647': attribute type 1 has an invalid length. [ 892.964502][T16877] erspan1: entered allmulticast mode [ 893.177626][T16872] 9p: Could not find request transport: un)_& [ 893.736043][ T24] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 893.743668][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 893.750952][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 893.850433][T16897] No such timeout policy "syz0" [ 894.876336][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 895.021824][ T24] usb 3-1: USB disconnect, device number 109 [ 895.326028][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 895.326039][ T30] audit: type=1400 audit(2000000074.467:37316): avc: denied { create } for pid=16902 comm="syz.2.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 895.354198][T16906] xt_hashlimit: size too large, truncated to 1048576 [ 895.436529][ T30] audit: type=1400 audit(2000000074.485:37317): avc: denied { setopt } for pid=16902 comm="syz.2.2651" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 895.511188][ T30] audit: type=1400 audit(2000000074.598:37318): avc: denied { create } for pid=16902 comm="syz.2.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 895.611861][ T30] audit: type=1400 audit(2000000074.598:37319): avc: denied { module_request } for pid=16902 comm="syz.2.2651" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 895.707978][ T30] audit: type=1400 audit(2000000074.626:37320): avc: denied { connect } for pid=16902 comm="syz.2.2651" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 895.811379][ T30] audit: type=1400 audit(2000000074.626:37321): avc: denied { write } for pid=16902 comm="syz.2.2651" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 895.868415][ T30] audit: type=1400 audit(2000000074.635:37322): avc: denied { read write } for pid=15727 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 896.010959][T16918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.073708][ T30] audit: type=1400 audit(2000000074.635:37323): avc: denied { open } for pid=15727 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 896.105170][T16918] netlink: 'syz.0.2655': attribute type 10 has an invalid length. [ 896.117817][T16918] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.295703][ T30] audit: type=1400 audit(2000000074.635:37324): avc: denied { ioctl } for pid=15727 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 896.782882][ T30] audit: type=1400 audit(2000000074.719:37325): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 896.788933][T16925] pim6reg: entered allmulticast mode [ 897.015600][T16933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16933 comm=syz.2.2660 [ 897.143947][T16929] pim6reg: left allmulticast mode [ 897.212123][T16925] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2658'. [ 897.813996][T16948] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 898.818961][ T5856] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 899.013825][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 899.304870][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.331070][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 899.371758][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 899.421820][ T5856] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 899.470445][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.506301][ T5856] usb 1-1: config 0 descriptor?? [ 899.793055][T16963] xt_hashlimit: size too large, truncated to 1048576 [ 899.887096][T16965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.952455][T16965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.694832][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 900.694843][ T30] audit: type=1400 audit(2000000079.490:37515): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 900.791137][ T30] audit: type=1400 audit(2000000079.527:37516): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 900.826001][ T5856] usb 1-1: USB disconnect, device number 108 [ 900.877904][ T30] audit: type=1400 audit(2000000079.621:37517): avc: denied { map_create } for pid=16971 comm="syz.1.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 900.978799][ T30] audit: type=1400 audit(2000000079.621:37518): avc: denied { map_read map_write } for pid=16971 comm="syz.1.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 901.495000][ T30] audit: type=1400 audit(2000000079.630:37519): avc: denied { prog_load } for pid=16971 comm="syz.1.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 901.608004][ T30] audit: type=1400 audit(2000000079.630:37520): avc: denied { bpf } for pid=16971 comm="syz.1.2670" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 901.693071][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2672'. [ 901.734249][ T30] audit: type=1400 audit(2000000079.630:37521): avc: denied { prog_load } for pid=16971 comm="syz.1.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 902.079393][T16983] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2672'. [ 902.118282][ T30] audit: type=1400 audit(2000000079.630:37522): avc: denied { bpf } for pid=16971 comm="syz.1.2670" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 902.255319][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2672'. [ 902.279295][ T30] audit: type=1400 audit(2000000079.630:37523): avc: denied { perfmon } for pid=16971 comm="syz.1.2670" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 902.454003][ T30] audit: type=1400 audit(2000000079.630:37524): avc: denied { perfmon } for pid=16971 comm="syz.1.2670" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 903.520719][T17012] netlink: 'syz.5.2680': attribute type 10 has an invalid length. [ 903.528694][T17012] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2680'. [ 903.540417][T17012] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 903.608406][T13000] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 903.800759][T13000] usb 7-1: device descriptor read/64, error -71 [ 903.893872][T17017] xt_hashlimit: size too large, truncated to 1048576 [ 904.068061][T13000] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 905.137355][T13000] usb 7-1: device descriptor read/64, error -71 [ 905.287377][T13000] usb usb7-port1: attempt power cycle [ 905.650228][T13000] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 905.700873][T13000] usb 7-1: device descriptor read/8, error -71 [ 905.832107][ T5856] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 905.960564][T13000] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 905.994596][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 906.006387][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 906.017805][ T5856] usb 6-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 906.048013][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.092071][ T5856] usb 6-1: config 0 descriptor?? [ 906.099472][T13000] usb 7-1: device descriptor read/8, error -71 [ 906.121613][T17042] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 906.130816][ T30] kauditd_printk_skb: 207 callbacks suppressed [ 906.130828][ T30] audit: type=1400 audit(2000000084.560:37729): avc: denied { ioctl } for pid=17041 comm="syz.5.2689" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 906.267135][ T31] INFO: task syz.3.2225:14964 blocked for more than 143 seconds. [ 906.315398][T17048] block device autoloading is deprecated and will be removed. [ 906.328519][T17048] PM: Image not found (code -22) [ 906.367262][ T31] Tainted: G L syzkaller #0 [ 906.374840][T13000] usb usb7-port1: unable to enumerate USB device [ 906.539874][ T30] audit: type=1400 audit(2000000084.569:37730): avc: denied { bpf } for pid=17046 comm="syz.6.2690" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 906.575169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 906.589997][ T30] audit: type=1400 audit(2000000084.999:37731): avc: denied { bpf } for pid=17046 comm="syz.6.2690" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 906.599486][ T31] task:syz.3.2225 state:D [ 906.612452][ T30] audit: type=1400 audit(2000000085.009:37732): avc: denied { prog_load } for pid=17046 comm="syz.6.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 906.625152][ T31] stack:28152 pid:14964 tgid:14963 ppid:6991 task_flags:0x400040 flags:0x00080802 [ 906.646239][ T31] Call Trace: [ 906.648806][ T30] audit: type=1400 audit(2000000085.009:37733): avc: denied { bpf } for pid=17046 comm="syz.6.2690" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 906.657633][ T31] [ 906.681783][ T31] __schedule+0xfee/0x6120 [ 906.686956][ T31] ? __lock_acquire+0x4a5/0x2630 [ 906.692806][ T31] ? __pfx___schedule+0x10/0x10 [ 906.698375][ T31] ? find_held_lock+0x2b/0x80 [ 906.701272][ T30] audit: type=1400 audit(2000000085.009:37734): avc: denied { prog_load } for pid=17046 comm="syz.6.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 906.703266][ T31] ? schedule+0x2bf/0x390 [ 906.727099][ T31] schedule+0xdd/0x390 [ 906.731348][ T30] audit: type=1400 audit(2000000085.009:37735): avc: denied { perfmon } for pid=17046 comm="syz.6.2690" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 906.752751][ T31] schedule_preempt_disabled+0x13/0x30 [ 906.754485][ T30] audit: type=1400 audit(2000000085.009:37736): avc: denied { bpf } for pid=17046 comm="syz.6.2690" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 906.762377][ T31] __mutex_lock+0xc9a/0x1b90 [ 906.781685][ T30] audit: type=1400 audit(2000000085.027:37737): avc: denied { name_bind } for pid=17041 comm="syz.5.2689" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 906.867613][ T30] audit: type=1400 audit(2000000085.027:37738): avc: denied { prog_run } for pid=17046 comm="syz.6.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 906.887473][ T31] ? sync_bdevs+0x153/0x480 [ 906.892201][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 906.897573][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 906.903377][ T31] ? iput.part.0+0x1a0/0xf50 [ 906.908303][ T31] ? sync_bdevs+0x153/0x480 [ 906.912914][ T31] sync_bdevs+0x153/0x480 [ 906.917330][ T31] ksys_sync+0xb0/0xf0 [ 906.921513][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 906.926682][ T31] ? do_syscall_64+0x95/0xf80 [ 906.931421][ T31] __do_sys_sync+0xe/0x20 [ 906.937557][ T31] do_syscall_64+0x106/0xf80 [ 906.942382][ T31] ? clear_bhb_loop+0x40/0x90 [ 906.947767][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.953930][ T31] RIP: 0033:0x7f1742d9c799 [ 906.958663][ T31] RSP: 002b:00007f1740ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 906.967388][ T31] RAX: ffffffffffffffda RBX: 00007f1743015fa0 RCX: 00007f1742d9c799 [ 906.975487][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 906.984275][ T31] RBP: 00007f1743015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 906.992947][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.002271][ T31] R13: 00007f1743016038 R14: 00007f1743015fa0 R15: 00007ffc62f83058 [ 907.010808][ T31] [ 907.017970][ T31] INFO: task syz.3.2225:14970 blocked for more than 144 seconds. [ 907.018328][T17050] syzkaller0: entered promiscuous mode [ 907.026030][ T31] Tainted: G L syzkaller #0 [ 907.042842][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 907.052533][ T31] task:syz.3.2225 state:D stack:27592 pid:14970 tgid:14963 ppid:6991 task_flags:0x400040 flags:0x00080002 [ 907.056694][T17050] syzkaller0: entered allmulticast mode [ 907.065554][ T31] Call Trace: [ 907.074740][ T31] [ 907.077941][ T31] __schedule+0xfee/0x6120 [ 907.082402][ T31] ? __lock_acquire+0x4a5/0x2630 [ 907.087545][ T31] ? __pfx___schedule+0x10/0x10 [ 907.092649][ T31] ? find_held_lock+0x2b/0x80 [ 907.097537][ T31] ? schedule+0x2bf/0x390 [ 907.101945][ T31] schedule+0xdd/0x390 [ 907.106100][ T31] schedule_preempt_disabled+0x13/0x30 [ 907.111610][ T31] __mutex_lock+0xc9a/0x1b90 [ 907.117055][ T31] ? sync_bdevs+0x153/0x480 [ 907.121612][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 907.126714][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 907.132446][ T31] ? iput.part.0+0x1a0/0xf50 [ 907.137145][ T31] ? sync_bdevs+0x153/0x480 [ 907.141690][ T31] sync_bdevs+0x153/0x480 [ 907.146068][ T31] ksys_sync+0xb0/0xf0 [ 907.150197][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 907.154997][ T31] ? kcov_ioctl+0x16a/0x720 [ 907.160575][ T31] ? do_syscall_64+0x95/0xf80 [ 907.165299][ T31] __do_sys_sync+0xe/0x20 [ 907.170197][ T31] do_syscall_64+0x106/0xf80 [ 907.174835][ T31] ? clear_bhb_loop+0x40/0x90 [ 907.179774][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.185712][ T31] RIP: 0033:0x7f1742d9c799 [ 907.190203][ T31] RSP: 002b:00007f1740fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 907.198709][ T31] RAX: ffffffffffffffda RBX: 00007f1743016090 RCX: 00007f1742d9c799 [ 907.207025][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 907.215073][ T31] RBP: 00007f1743016090 R08: 0000000000000000 R09: 0000000000000000 [ 907.223121][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.231313][ T31] R13: 00007f1743016128 R14: 00007f1743016090 R15: 00007ffc62f83058 [ 907.239581][ T31] [ 907.260766][ T31] [ 907.260766][ T31] Showing all locks held in the system: [ 907.274301][ T31] 3 locks held by kworker/0:0/9: [ 907.332681][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 907.343316][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 907.352540][ T31] #2: ffff8880b8426358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 907.362075][ T31] 1 lock held by khungtaskd/31: [ 907.366957][ T31] #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 907.377146][ T31] 2 locks held by getty/5563: [ 907.381857][ T31] #0: ffff8880394ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 907.391924][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 907.402306][ T31] 1 lock held by udevd/5794: [ 907.406977][ T31] #0: ffff8880280f3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 907.416548][ T31] 5 locks held by kworker/0:5/5856: [ 907.422018][ T31] #0: ffff888022e89948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 907.433053][ T31] #1: ffffc90003087d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 907.444820][ T31] #2: ffff88802b504198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 907.453951][ T31] #3: ffff88804e7e3198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 907.463445][ T31] #4: ffff888020f35160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 907.473232][ T31] 1 lock held by syz.3.2225/14964: [ 907.478758][ T31] #0: ffff8880280f3358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 907.488507][ T31] 1 lock held by syz.3.2225/14970: [ 907.493926][ T31] #0: ffff8880280f3358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 907.505809][ T31] 2 locks held by syz.5.2689/17041: [ 907.511281][ T31] #0: ffffffff90610828 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 907.520653][ T31] #1: ffffffff8e7f3238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 907.547659][ T31] [ 907.550060][ T31] ============================================= [ 907.550060][ T31] [ 907.559554][ T31] NMI backtrace for cpu 0 [ 907.559573][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 907.559597][ T31] Tainted: [L]=SOFTLOCKUP [ 907.559601][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 907.559607][ T31] Call Trace: [ 907.559611][ T31] [ 907.559615][ T31] dump_stack_lvl+0x100/0x190 [ 907.559637][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 907.559649][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 907.559666][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 907.559684][ T31] sys_info+0x141/0x190 [ 907.559697][ T31] watchdog+0xd25/0x1050 [ 907.559716][ T31] ? __pfx_watchdog+0x10/0x10 [ 907.559730][ T31] ? __kthread_parkme+0x18c/0x230 [ 907.559747][ T31] ? kthread+0x13a/0x450 [ 907.559756][ T31] ? __pfx_watchdog+0x10/0x10 [ 907.559770][ T31] kthread+0x370/0x450 [ 907.559779][ T31] ? __pfx_kthread+0x10/0x10 [ 907.559790][ T31] ret_from_fork+0x754/0xd80 [ 907.559801][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 907.559815][ T31] ? __switch_to+0x7b4/0x1120 [ 907.559828][ T31] ? __pfx_kthread+0x10/0x10 [ 907.559839][ T31] ret_from_fork_asm+0x1a/0x30 [ 907.559857][ T31] [ 907.559893][ T31] Sending NMI from CPU 0 to CPUs 1: [ 907.687105][ C1] NMI backtrace for cpu 1 [ 907.687119][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 907.687139][ C1] Tainted: [L]=SOFTLOCKUP [ 907.687144][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 907.687152][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 907.687171][ C1] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f1 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 907.687184][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 907.687196][ C1] RAX: 0000000004166997 RBX: ffff88801e6a24c0 RCX: ffffffff8b8f9c75 [ 907.687206][ C1] RDX: 0000000000000000 RSI: ffffffff8de74d20 RDI: ffffffff8c1afba0 [ 907.687215][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 907.687225][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd4498 [ 907.687235][ C1] R13: 0000000000000001 R14: ffffffff90d98310 R15: 0000000000000000 [ 907.687244][ C1] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 907.687258][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 907.687267][ C1] CR2: 0000555567b6c4e8 CR3: 000000007c225000 CR4: 00000000003526f0 [ 907.687276][ C1] Call Trace: [ 907.687280][ C1] [ 907.687285][ C1] default_idle+0x9/0x10 [ 907.687301][ C1] default_idle_call+0x6c/0xb0 [ 907.687318][ C1] do_idle+0x35b/0x4b0 [ 907.687336][ C1] ? __pfx_do_idle+0x10/0x10 [ 907.687355][ C1] cpu_startup_entry+0x4f/0x60 [ 907.687374][ C1] start_secondary+0x21d/0x2d0 [ 907.687394][ C1] ? __pfx_start_secondary+0x10/0x10 [ 907.687415][ C1] common_startup_64+0x13e/0x148 [ 907.687436][ C1] [ 907.859552][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 907.866415][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 907.877070][ T31] Tainted: [L]=SOFTLOCKUP [ 907.881374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 907.891409][ T31] Call Trace: [ 907.894667][ T31] [ 907.897581][ T31] dump_stack_lvl+0x100/0x190 [ 907.902250][ T31] vpanic+0x552/0x970 [ 907.906211][ T31] ? __pfx_vpanic+0x10/0x10 [ 907.910695][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 907.916836][ T31] panic+0xd1/0xe0 [ 907.920537][ T31] ? __pfx_panic+0x10/0x10 [ 907.924934][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 907.931071][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 907.937207][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 907.943343][ T31] ? watchdog.cold+0x198/0x1ca [ 907.948087][ T31] ? watchdog+0xd35/0x1050 [ 907.952488][ T31] watchdog.cold+0x1a9/0x1ca [ 907.957063][ T31] ? __pfx_watchdog+0x10/0x10 [ 907.961727][ T31] ? __kthread_parkme+0x18c/0x230 [ 907.966738][ T31] ? kthread+0x13a/0x450 [ 907.970960][ T31] ? __pfx_watchdog+0x10/0x10 [ 907.975623][ T31] kthread+0x370/0x450 [ 907.979669][ T31] ? __pfx_kthread+0x10/0x10 [ 907.984238][ T31] ret_from_fork+0x754/0xd80 [ 907.988808][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 907.993901][ T31] ? __switch_to+0x7b4/0x1120 [ 907.998561][ T31] ? __pfx_kthread+0x10/0x10 [ 908.003130][ T31] ret_from_fork_asm+0x1a/0x30 [ 908.007884][ T31] [ 908.011085][ T31] Kernel Offset: disabled [ 908.015382][ T31] Rebooting in 86400 seconds..